Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC3B726C1BE11EFAB58E690762E951A.roa
File: 0BC3B726C1BE11EFAB58E690762E951A.roa (raw, json)
Hash identifier: bTmE0gPmbfU6aLZ++YT5hKruzGpTlgAsQPPTOAJLpy8=
Subject key identifier: 71:51:C9:17:13:3C:E6:4C:99:BA:2B:9B:DF:5B:DA:63:A4:D1:AD:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01220F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC3B726C1BE11EFAB58E690762E951A.roa
Signing time: Tue 24 Dec 2024 06:12:26 +0000
ROA not before: Tue 24 Dec 2024 06:12:22 +0000
ROA not after: Wed 10 Dec 2025 06:12:22 +0000
asID: 984
IP address blocks: 154.193.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74255 (0x1220f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:12:22 2024 GMT
Not After : Dec 10 06:12:22 2025 GMT
Subject: CN=676a50ca-31ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:6a:4b:d1:e9:c1:15:a1:4b:bb:42:f3:42:
02:66:b2:fb:ca:16:7d:1a:38:c0:ec:a1:dd:6d:be:
7b:d7:42:a4:4b:96:65:d2:53:a2:4b:21:86:b3:50:
e7:77:d8:91:01:00:02:12:85:a2:78:c9:4d:4e:00:
1e:92:be:b2:b5:62:f0:9c:42:00:8d:57:f8:e9:1e:
f7:e2:84:1c:6b:3f:86:6d:f1:ea:26:fe:f8:cf:44:
9d:ca:7e:31:92:6f:1e:ab:1e:9b:77:a9:e4:29:2e:
69:0d:12:da:bd:d5:91:92:f0:55:98:4d:e9:c4:18:
a0:4a:78:c3:f3:31:d1:45:ee:d2:69:b2:1d:09:c0:
ba:66:8f:98:d0:49:0b:e8:cd:24:9a:98:2e:c0:1b:
c1:50:05:fc:a6:fb:2b:eb:6d:95:f5:4d:d1:bf:53:
9a:40:4e:cf:cb:c1:38:67:31:b7:46:f3:b0:42:a1:
de:30:98:ad:e5:9e:0e:f1:27:6b:39:d8:70:6b:38:
c0:7c:bb:ff:b3:63:d3:10:45:c9:cc:f2:a6:1f:11:
ea:dd:80:0a:79:30:51:3e:64:86:03:eb:8f:3b:72:
66:1e:0c:8b:9d:df:52:3b:c3:75:5e:bb:30:55:11:
a5:02:f0:19:5d:81:14:1d:3f:80:51:69:2b:94:35:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:C9:17:13:3C:E6:4C:99:BA:2B:9B:DF:5B:DA:63:A4:D1:AD:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC3B726C1BE11EFAB58E690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.196.0/24
Signature Algorithm: sha256WithRSAEncryption
10:83:1d:2b:6e:fb:ad:98:3e:4e:9b:a3:ca:cf:0d:29:4e:94:
6f:30:f6:15:ec:e1:5e:1d:7f:62:99:3c:55:9b:4a:1d:db:59:
c6:59:9a:f8:33:5f:85:91:76:c4:51:db:f7:db:e6:44:2f:0c:
6f:70:40:8a:f8:74:17:1b:23:49:ec:27:64:14:29:31:9d:ec:
74:c5:a9:35:40:5c:26:a3:2b:d8:3e:f4:d6:da:05:a7:fa:54:
db:4e:ce:2a:61:ef:e0:e1:fd:6c:f4:d8:a1:96:c1:a5:96:2d:
bb:49:29:54:82:7a:ed:55:a4:81:81:e5:2c:d0:00:1a:c9:65:
0d:24:6a:bc:4b:b9:9a:b0:47:05:e6:3e:81:c3:51:e8:c4:97:
69:ac:d5:a3:64:5c:44:f8:44:a5:ee:3a:20:32:39:fe:f6:e5:
a1:4a:67:a4:10:6f:be:0a:cd:30:af:a1:dd:b0:55:15:b0:e5:
0a:bf:77:0f:1c:3f:37:90:26:9f:9c:42:39:3f:37:3d:35:64:
61:54:fc:e8:93:9b:94:64:27:f2:4f:d8:1a:85:d4:66:3f:34:
06:b5:c0:84:e3:dc:40:dd:cc:3e:f8:95:41:09:b3:bf:2f:70:
19:a0:c9:06:c1:68:22:50:c0:ec:9f:7e:58:93:53:e8:49:6e:
bd:a3:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:09 2025 by rpki-client