Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F163C4CC63B11EF81B0E695762E951A.roa
File: 0F163C4CC63B11EF81B0E695762E951A.roa (raw, json)
Hash identifier: QCvvobwmi2jmiRHGzQ/75chIrJlZn9f9kOh8NQsVMUo=
Subject key identifier: FB:31:CE:A4:DC:84:12:39:01:63:9A:4A:47:14:4C:60:D6:C0:9C:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F163C4CC63B11EF81B0E695762E951A.roa
Signing time: Sun 29 Dec 2024 23:17:23 +0000
ROA not before: Sun 29 Dec 2024 23:17:19 +0000
ROA not after: Fri 12 Dec 2025 23:17:19 +0000
asID: 984
IP address blocks: 154.218.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77893 (0x13045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:17:19 2024 GMT
Not After : Dec 12 23:17:19 2025 GMT
Subject: CN=6771d883-8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:4b:c6:0c:81:c6:c2:8d:9b:6a:c3:dd:c6:
d8:1d:42:21:5e:12:3d:fd:aa:c2:31:9c:dc:98:42:
99:c7:b8:64:4f:a4:af:f1:94:e4:82:f6:a1:e0:66:
9e:10:08:1b:cd:81:12:fa:1c:26:f7:5b:31:f0:0a:
63:44:08:2c:f6:95:8b:7f:8e:78:36:65:d6:46:3a:
66:87:4d:42:68:69:38:55:d2:6c:fb:ed:ce:a7:03:
3d:ee:41:ab:cc:63:a0:02:e7:49:0b:40:1b:d1:9a:
76:17:f1:ef:56:20:ee:88:7c:0f:d7:71:71:4a:f0:
8e:46:2e:69:23:df:45:53:d8:23:27:7d:88:6a:27:
96:59:95:63:b9:f8:6b:ac:d3:10:45:e5:98:40:ca:
14:8a:33:e0:10:9d:6a:a0:a6:9d:c7:be:1e:79:ee:
34:5e:2f:5d:ae:85:ef:4d:96:a9:1d:63:52:c4:d8:
80:8f:ba:3f:8d:33:68:46:ce:2e:3b:d8:ec:80:af:
65:d1:ae:72:4d:82:78:a8:5a:95:81:1b:7e:32:87:
ae:7e:6c:e3:2e:94:ea:57:6c:49:2a:53:45:54:c8:
ea:f5:c6:4c:a2:b6:48:8a:b0:42:3a:ea:5d:ab:71:
fc:ad:90:59:80:0c:88:47:34:cf:01:46:f0:5c:cf:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:CE:A4:DC:84:12:39:01:63:9A:4A:47:14:4C:60:D6:C0:9C:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F163C4CC63B11EF81B0E695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.33.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cd:82:cb:64:eb:41:57:28:01:d7:e7:c7:dc:45:ef:71:a3:
8e:f4:b1:45:a1:70:7b:9f:f6:eb:56:47:60:a9:7f:73:98:ce:
2f:e8:2c:40:d0:2e:0c:77:09:fd:ba:61:e3:2b:76:17:5a:a3:
e1:82:28:82:84:30:93:21:65:0d:25:00:a7:7b:87:36:ba:fe:
4f:a2:0c:99:4d:bf:8b:4d:11:f9:90:bb:58:cb:b2:e4:c0:a8:
cd:36:99:eb:40:b4:1b:5e:6b:50:be:cd:75:12:78:39:fb:07:
71:3f:dd:73:21:45:53:07:7d:5c:8e:98:94:72:2e:a1:4e:3c:
f4:83:a4:14:42:38:f0:a8:47:f3:ab:df:34:29:04:fb:f7:e5:
67:b5:43:97:39:f1:9d:84:ec:7f:57:d6:f3:c0:70:3f:cd:67:
c0:14:35:e0:56:bb:f5:79:17:6e:dc:c3:19:a0:2d:0b:ea:ed:
12:4d:a4:85:9d:94:ba:92:93:40:cb:2e:37:69:45:31:06:a5:
63:2b:4a:0a:53:82:1b:d1:be:a6:f5:12:c2:11:dd:c5:9b:b9:
7a:7c:19:a5:be:c4:c5:74:5a:c3:5d:38:b2:69:58:14:6c:ac:
a0:85:f4:41:36:fb:86:e0:3d:99:9a:34:b7:c3:3f:71:22:57:
83:c8:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:03 2025 by rpki-client