Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0980A63CC1BD11EF86CF3A8C762E951A.roa
File: 0980A63CC1BD11EF86CF3A8C762E951A.roa (raw, json)
Hash identifier: ibcPwis4IHLphkA2ZhrXHFWKix8anwVa9/1J0F9lDAM=
Subject key identifier: 7E:F3:C3:D8:E6:0D:E9:FB:BA:7D:62:33:1D:91:FE:EB:FA:C6:CA:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012203
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0980A63CC1BD11EF86CF3A8C762E951A.roa
Signing time: Tue 24 Dec 2024 06:05:12 +0000
ROA not before: Tue 24 Dec 2024 06:05:09 +0000
ROA not after: Wed 10 Dec 2025 06:05:09 +0000
asID: 984
IP address blocks: 154.193.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74243 (0x12203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:05:09 2024 GMT
Not After : Dec 10 06:05:09 2025 GMT
Subject: CN=676a4f18-084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:26:64:cf:a3:67:63:92:75:22:83:29:83:
ff:09:7c:88:9b:d9:0b:35:d1:98:b0:24:16:b8:24:
5a:64:34:1c:61:c0:d9:2a:24:a1:ac:e3:aa:bb:0e:
18:8e:57:65:43:72:23:87:2c:b8:68:cf:d9:20:a4:
8a:33:05:79:2e:d7:92:60:0f:e3:77:7b:66:b2:2f:
38:e2:4b:e5:dc:42:fd:57:be:df:8c:12:3d:47:1e:
a1:a1:fc:52:37:69:9d:1d:e7:05:75:bd:8c:8d:d6:
a6:04:32:09:13:c1:d8:05:17:0b:2a:9d:d2:02:d1:
05:17:44:b2:48:17:dd:f6:f6:ff:87:93:af:1a:bf:
2c:ef:46:10:cf:64:34:0a:d7:44:9b:c4:a2:2a:7c:
98:58:d5:2a:0f:ea:4f:26:eb:aa:5c:d6:a6:2e:f1:
73:03:e1:f9:dc:02:70:ab:fc:7d:10:8a:b9:2a:99:
0b:b6:75:2e:52:34:f4:ef:08:c4:c1:66:90:ed:35:
f1:21:a4:14:0d:89:6d:13:8e:af:16:ec:38:3a:03:
a1:e4:ca:69:73:53:4e:28:b5:56:e5:a9:05:d5:5d:
a4:23:e2:1b:e5:66:e4:12:0e:47:91:9d:b1:48:d0:
fb:c4:e3:41:a3:79:21:d8:36:c3:7c:f2:0a:73:db:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:C3:D8:E6:0D:E9:FB:BA:7D:62:33:1D:91:FE:EB:FA:C6:CA:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0980A63CC1BD11EF86CF3A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bd:d7:cf:8e:c0:77:20:7d:1b:a7:09:6a:1d:b6:be:1f:0e:
3e:86:b8:c7:fe:e8:68:e0:37:7a:9d:bc:83:65:7b:dc:f2:e8:
8c:7a:81:85:05:6d:c7:db:5e:52:ee:29:b7:94:f1:94:e9:c2:
f9:98:ff:10:81:13:c4:62:fa:0a:d2:82:a6:93:66:6e:db:0a:
f1:b7:f8:bd:d3:fd:c1:6d:c5:3f:5f:40:32:b1:38:36:2e:82:
56:01:1d:4d:c8:53:a8:b3:6a:46:b4:17:21:b7:f6:5b:85:91:
e9:d4:e2:5b:b1:f4:5c:19:ab:7b:a8:f6:84:95:a1:d3:97:ce:
51:89:ec:72:a3:25:a5:06:83:2c:8f:67:fb:11:b2:a3:84:1c:
37:94:97:e8:b0:1d:5b:ce:50:dd:05:11:2b:41:ee:40:c9:37:
29:4f:6b:e3:c2:2d:4f:cb:70:aa:5f:9e:23:b3:73:3e:fa:7d:
70:42:fe:b8:e3:73:eb:c1:ed:f7:ef:c0:cd:3f:12:35:bc:91:
8d:71:7b:a7:9b:da:a3:e0:12:53:f9:c4:d8:e8:f9:bd:e9:43:
53:a4:a3:c5:2d:25:39:64:fe:43:1b:04:5d:e9:36:a4:b8:2f:
27:26:90:e1:44:88:da:d7:a6:df:6a:55:6e:06:43:55:b4:eb:
d6:bf:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:49 2025 by rpki-client