Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/042B3A26C1D611EFAC830BA7762E951A.roa
File: 042B3A26C1D611EFAC830BA7762E951A.roa (raw, json)
Hash identifier: EXSfuTR2t4pqCgW5BzExG8f3TNg8vAigEbSk0pv6ZBI=
Subject key identifier: 9C:B3:B5:A9:8C:F9:E1:35:56:3A:DE:1D:61:DE:8A:13:80:64:70:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/042B3A26C1D611EFAC830BA7762E951A.roa
Signing time: Tue 24 Dec 2024 09:04:01 +0000
ROA not before: Tue 24 Dec 2024 09:03:57 +0000
ROA not after: Wed 10 Dec 2025 09:03:57 +0000
asID: 984
IP address blocks: 154.194.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74439 (0x122c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:03:57 2024 GMT
Not After : Dec 10 09:03:57 2025 GMT
Subject: CN=676a7901-31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:eb:9d:fe:79:84:8f:36:36:c1:7b:89:b5:
45:53:aa:0a:a3:7c:ab:9a:f2:b5:41:f0:49:ad:8e:
0f:3c:7f:7b:97:b3:4e:a9:05:de:60:57:2c:18:e5:
15:84:62:ba:27:52:57:29:68:66:32:03:0d:e9:d9:
9b:47:62:86:8f:aa:70:e4:68:dc:c6:b4:dc:f8:ac:
fb:93:4a:fd:59:c5:69:14:f3:c2:56:55:04:2f:f1:
03:09:03:cd:a8:e0:ff:90:5f:4e:90:61:48:fb:5a:
9f:0a:9a:d1:88:4d:00:7d:02:c9:c9:cf:c9:b6:6c:
de:ef:78:05:b0:0f:b5:b4:2a:fb:92:4e:37:7d:d8:
5c:6f:7e:e2:74:4b:97:6e:6a:2b:7e:f0:33:52:d0:
f4:5b:b6:e1:63:eb:45:35:1c:3a:ef:84:a1:1a:84:
d5:69:6d:54:07:ef:ad:1e:b0:d4:7f:07:f3:2f:b3:
ac:22:f4:bf:6e:bb:40:09:4e:8c:38:27:ec:1d:e7:
6f:dc:ba:c6:7b:6d:b0:74:eb:5b:57:27:cc:ad:9e:
a9:c4:b2:40:46:af:79:bc:a0:20:aa:a3:b4:d4:9e:
f8:0a:f7:2f:71:ca:05:3b:a4:a2:c3:90:6b:05:d3:
a3:7d:47:56:32:dd:e4:23:a5:c0:7c:6f:7b:62:69:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:B5:A9:8C:F9:E1:35:56:3A:DE:1D:61:DE:8A:13:80:64:70:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/042B3A26C1D611EFAC830BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.216.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:d1:aa:e2:18:89:97:98:ba:69:29:7c:17:40:3b:b3:42:c8:
25:ef:b4:3e:fa:da:fb:b6:5f:1b:de:f0:b4:64:78:8a:cd:d8:
db:d9:5c:0e:cb:c0:55:79:5a:c4:f5:f6:b3:fd:1d:7a:9b:89:
f7:82:55:d0:2a:d3:0b:87:1d:73:bb:4c:3f:7d:03:45:c8:d7:
f2:2e:f8:06:0c:c7:8b:f4:13:e8:5e:0a:af:60:2c:f1:f1:8a:
3e:28:f6:92:e5:ad:29:6d:25:52:db:64:f8:a4:45:59:14:5e:
c1:76:6f:dd:37:0e:be:df:e8:88:97:a9:94:e4:6f:3c:9a:71:
d3:15:bd:86:bd:a7:aa:f9:74:81:bf:86:98:35:6a:91:2a:b7:
ec:2d:94:81:36:90:e2:d5:1f:54:b4:eb:15:72:99:42:63:34:
4e:49:60:f8:f2:76:49:90:6f:05:2d:d4:c9:42:c4:c8:59:78:
ea:08:3d:dc:43:85:f4:9a:58:bd:4a:f0:88:7c:01:96:c8:95:
3b:9d:e1:a1:9b:a6:65:04:1a:fc:f3:a4:4b:2b:3c:70:40:34:
31:45:9f:e7:8a:63:18:69:10:3c:c6:64:a0:23:0e:04:03:ad:
39:42:e7:c9:f7:4b:fa:a0:7d:e3:0f:c8:15:32:4c:69:b2:1f:
ea:67:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client