Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02948B50C36511EF955A3D9F762E951A.roa
File: 02948B50C36511EF955A3D9F762E951A.roa (raw, json)
Hash identifier: 6umxk8i7OHLXu/tU2LImqN1PS9Vltpvlw4KZS/ghxfY=
Subject key identifier: 4A:EA:C2:F5:0E:66:C6:9A:B2:7D:F8:BF:B2:1D:3F:14:1D:F7:15:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02948B50C36511EF955A3D9F762E951A.roa
Signing time: Thu 26 Dec 2024 08:40:07 +0000
ROA not before: Thu 26 Dec 2024 08:40:04 +0000
ROA not after: Sun 12 Dec 2027 08:40:04 +0000
asID: 17561
IP address blocks: 154.93.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75424 (0x126a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:40:04 2024 GMT
Not After : Dec 12 08:40:04 2027 GMT
Subject: CN=676d1667-c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:2c:81:8a:f7:ba:f9:07:21:2f:1e:79:97:
94:f5:e4:58:1b:47:d1:b9:09:fb:1f:02:12:a1:a8:
0f:2b:f3:f3:3f:04:1d:6c:de:cc:b3:86:5f:1c:ef:
fa:23:f1:be:04:c0:d5:14:17:37:9b:3c:38:71:a2:
5b:f0:c0:41:b9:e6:34:5d:a0:5a:a5:2b:d2:50:fa:
15:a3:5f:86:03:de:15:14:11:73:3a:40:96:35:d2:
d9:45:81:d2:f4:47:cb:cb:b8:79:f9:85:b4:1d:fd:
60:79:95:79:36:a2:c9:9d:c6:38:e4:ee:23:35:98:
4f:d4:5a:12:d5:71:23:d5:a9:13:b6:71:6d:6d:c4:
fd:03:2b:4a:84:b7:06:97:9e:10:3b:f5:45:03:ba:
5a:e2:1f:6b:2e:f5:74:94:95:48:96:7b:f1:ab:01:
a9:7b:24:07:d9:77:2f:af:dc:4e:30:db:cd:5e:11:
50:2f:fb:c8:c1:cc:6e:c7:17:b8:dc:cc:d1:14:07:
fd:a1:0c:fc:bd:7c:d5:ac:05:35:13:ff:e4:e7:c1:
ee:e7:98:e3:b6:43:aa:10:1b:81:eb:bc:b3:ee:aa:
09:0d:da:3e:4f:26:a1:66:1e:44:06:80:7e:a6:fc:
8e:f0:72:60:30:07:1f:91:34:ed:06:87:44:dd:af:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:C2:F5:0E:66:C6:9A:B2:7D:F8:BF:B2:1D:3F:14:1D:F7:15:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02948B50C36511EF955A3D9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:65:fb:be:00:1c:7a:14:1a:e8:9e:d1:a8:9d:49:cd:1c:28:
b4:b1:6d:80:05:ce:e1:b2:3c:e5:fc:7b:44:2a:75:75:b3:ad:
28:ff:8f:6b:c8:ae:d4:55:1a:64:f9:20:4d:00:db:9f:79:67:
0c:8c:ff:5e:a7:c4:ba:fb:0a:62:b7:e2:37:ae:b3:ca:f9:34:
18:df:9e:26:c1:50:3e:60:de:0d:86:27:f5:a2:a2:72:6a:34:
40:15:c1:bd:3a:7a:8b:3b:1e:02:5d:7c:f7:f2:fb:31:99:13:
2c:6e:15:e8:8c:77:6b:32:75:18:fa:89:1d:a8:c4:17:5c:97:
1a:8f:e4:82:59:a7:27:41:aa:5d:c9:bb:cf:6c:08:34:b4:e2:
53:2c:a7:cd:2f:bc:3f:20:1e:52:75:fb:8e:6b:0d:f4:1e:73:
02:45:ce:4e:e3:11:6d:54:d8:ca:12:4a:80:fc:24:3c:e1:c8:
54:cd:e8:40:93:42:8a:10:13:ce:99:79:e0:02:6c:9b:0f:44:
32:3b:e7:81:9b:80:b3:38:4e:45:27:39:b8:f2:4d:8b:ce:dc:
28:15:9c:c6:af:2a:ad:7e:05:33:5b:1f:34:47:cc:02:5c:80:
a6:62:75:b7:44:1f:a5:be:9b:7c:f2:e3:ae:da:6a:bc:1f:c8:
1c:94:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client