Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02DFB968C3C411EF8A2FF173762E951A.roa
File: 02DFB968C3C411EF8A2FF173762E951A.roa (raw, json)
Hash identifier: fmquYXus79WKfw2lIRzIp2Zme1pw+7ZORDaFo7rMz7w=
Subject key identifier: 4B:E2:2B:85:94:37:96:38:9E:C7:8D:56:72:3B:E1:89:93:BD:52:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02DFB968C3C411EF8A2FF173762E951A.roa
Signing time: Thu 26 Dec 2024 20:00:10 +0000
ROA not before: Thu 26 Dec 2024 20:00:06 +0000
ROA not after: Fri 12 Dec 2025 20:00:06 +0000
asID: 984
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75708 (0x127bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:00:06 2024 GMT
Not After : Dec 12 20:00:06 2025 GMT
Subject: CN=676db5ca-7c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:85:26:3c:81:b7:07:b1:46:47:5f:cf:e9:
bf:21:92:ec:fd:6b:17:6f:bd:24:cd:10:e6:7b:9f:
23:2e:30:da:e0:a5:c6:aa:fa:57:6c:8b:a6:43:7d:
38:0f:60:6a:15:53:a4:2b:83:fd:84:ba:ea:49:96:
ae:a0:fd:8d:e3:f3:82:98:58:a2:ce:33:38:d4:d1:
0e:0c:e3:0e:90:63:9e:f3:b9:69:3f:6c:00:b4:73:
ea:5b:59:e0:13:81:fb:d5:95:8c:0b:bc:e2:99:bd:
e3:fd:9a:9d:7c:a3:34:ad:41:0b:73:07:d8:bf:d8:
6e:f8:2f:02:0b:f5:a5:fb:22:19:cb:4c:5e:a4:df:
a1:32:3e:0a:9d:fa:00:96:a5:52:de:f8:f9:07:fd:
2f:35:64:4a:1b:d6:c9:4d:ae:a4:d1:28:82:54:f5:
3c:b9:61:25:f0:7d:c8:52:5e:8d:12:27:7c:c1:bd:
76:8b:95:fb:e6:b7:7e:da:33:52:ca:4f:b4:e3:2e:
d3:67:4e:ba:ff:eb:f8:ed:6e:c5:93:cc:d9:10:12:
f2:42:77:99:dd:a5:e7:77:a2:7a:d3:7e:f1:ee:b6:
11:27:52:b7:9d:dc:52:f1:f9:74:5c:97:a5:15:f7:
27:08:4d:94:01:1e:e1:58:fa:be:c7:4d:72:59:15:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:2B:85:94:37:96:38:9E:C7:8D:56:72:3B:E1:89:93:BD:52:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02DFB968C3C411EF8A2FF173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2d:dc:fc:00:ae:bd:a8:6b:74:6b:bc:f3:33:eb:38:20:18:
61:ae:37:2a:5e:7f:57:7b:28:f2:cd:04:38:2f:0d:ca:7f:a4:
48:aa:01:c7:0a:fc:76:f0:20:d4:31:24:57:70:ef:fc:2d:3a:
1b:b7:22:84:c9:59:94:21:57:d9:13:fd:6d:67:59:db:e9:a7:
32:28:d9:8b:5c:23:9c:19:70:12:34:86:ed:d1:56:b0:da:3e:
b2:24:64:f7:b0:35:80:8d:c9:43:6d:fa:ce:41:95:1e:d7:b2:
49:6b:be:ca:1d:49:9c:7a:f2:75:5d:eb:fc:d4:1c:b5:f4:25:
ff:0e:fc:c2:79:e0:6f:bb:e8:02:87:74:7a:d3:a3:ed:91:01:
24:bc:df:11:79:0e:bb:f1:0a:73:81:a7:2a:38:06:17:b5:1a:
85:4a:65:e0:51:5b:7a:13:83:2a:20:ae:a1:73:cf:cc:94:9e:
e1:20:67:c4:e8:15:1b:45:d7:d2:fc:37:14:b3:96:bd:19:23:
ca:9a:d9:0d:12:ec:57:d1:4c:03:26:39:87:f0:3a:6f:37:7b:
a4:e6:66:e6:3a:05:ae:3c:41:30:4c:40:8c:d2:9d:a0:86:54:
ad:a7:b4:d6:48:85:69:f5:a2:1e:26:3a:48:fb:80:cc:d7:05:
2b:3a:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:53 2025 by rpki-client