Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A4438F8C1D211EFB4759D8F762E951A.roa
File: 0A4438F8C1D211EFB4759D8F762E951A.roa (raw, json)
Hash identifier: Gm5YyhvDMzXZ29bZ5rnK2nFHOl5mZ1TnsRZdKIfcrxU=
Subject key identifier: 5A:2F:B5:19:E3:C5:5B:57:62:FB:74:03:10:E5:D8:8B:5F:5D:D3:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A4438F8C1D211EFB4759D8F762E951A.roa
Signing time: Tue 24 Dec 2024 08:35:33 +0000
ROA not before: Tue 24 Dec 2024 08:35:29 +0000
ROA not after: Wed 10 Dec 2025 08:35:29 +0000
asID: 984
IP address blocks: 154.193.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74413 (0x122ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:35:29 2024 GMT
Not After : Dec 10 08:35:29 2025 GMT
Subject: CN=676a7255-8365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:06:34:93:03:70:d8:a1:79:be:1d:88:64:
f7:3f:df:dc:3e:36:b9:cb:53:46:c1:64:8c:a1:28:
46:a1:48:53:84:99:ae:99:d5:4f:3a:83:ed:0f:33:
69:a9:02:00:6a:b3:27:b0:75:27:c8:e7:f9:51:2a:
56:66:17:3e:98:a9:b8:92:3d:b2:93:3b:28:61:ac:
66:cb:13:c0:a7:c7:90:80:bf:25:b0:9f:24:cc:ba:
93:26:62:a4:5a:3a:a8:32:cf:83:f4:cc:c5:b3:e0:
3c:14:13:d5:15:9c:e1:d1:c8:cf:be:77:0d:91:97:
f3:2d:70:58:70:c8:bb:ce:65:8d:63:31:af:0b:a3:
a7:77:6f:3e:25:31:fe:c0:7d:fe:36:0b:cb:a3:9c:
59:00:15:05:6a:b8:14:53:5a:e0:a0:fd:79:b0:f4:
90:9f:f3:8b:6c:0d:ee:3c:61:ab:c8:f9:4b:5f:0e:
56:8b:1c:92:42:55:40:90:94:6b:22:87:1f:04:49:
4f:70:f6:21:eb:21:05:8a:34:75:7d:b7:3f:49:88:
1b:a2:7b:d4:16:86:e1:41:39:27:08:f4:ca:f1:b2:
a6:16:7d:cc:d1:01:e9:60:32:0b:bd:bb:79:95:2c:
a5:ff:66:c9:88:e3:63:8d:3f:c4:73:81:b1:d8:30:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:B5:19:E3:C5:5B:57:62:FB:74:03:10:E5:D8:8B:5F:5D:D3:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A4438F8C1D211EFB4759D8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.246.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4b:09:96:d3:c7:1a:f3:b7:05:6a:3e:f3:d5:5e:d6:de:65:
dc:a3:e8:49:a7:48:54:d8:4d:d8:fe:8b:ce:23:3e:f0:99:a6:
07:2d:24:23:69:fb:77:c6:11:01:93:51:71:b5:29:b7:d8:4d:
b3:58:64:2b:1d:bb:de:cc:cb:87:74:57:f1:9e:82:c2:70:3a:
2f:f8:4b:f7:5a:3a:0b:ec:95:1f:00:b6:d0:91:a1:bf:0a:83:
ed:8b:6a:b7:fc:c0:08:d4:38:f2:e8:e2:dc:26:a7:bc:35:20:
cf:ba:6f:d0:64:11:1b:69:22:08:be:9f:87:86:9d:4e:f0:16:
1b:f7:b4:4f:ec:1d:bd:fc:64:5e:16:1a:af:ae:ce:54:63:42:
0d:40:8c:8e:57:14:42:85:4e:3f:6e:39:f7:09:f9:12:34:1e:
cb:d5:49:3d:f2:7b:3a:6b:7c:bc:b2:ff:14:84:19:50:74:df:
46:a5:1d:97:5c:76:76:dc:11:67:ac:ff:3f:4e:ea:77:7c:c4:
7a:a3:4e:0e:26:3f:59:05:cc:bb:da:ea:2e:ce:0a:14:c5:c6:
9a:dd:e4:a6:d1:9d:34:a2:d9:d8:e9:93:98:13:0f:f3:67:8a:
41:e7:48:a8:1d:3e:13:df:c2:6f:8f:49:ab:8a:6b:07:ab:62:
6c:07:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:50 2025 by rpki-client