Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102B78CCC41011EFB2F6DC67762E951A.roa
File: 102B78CCC41011EFB2F6DC67762E951A.roa (raw, json)
Hash identifier: orMZIWSNCZ7uo5YKYARmvt+7hVIk/4bn+WWwGwaXdLQ=
Subject key identifier: 2D:F8:F5:68:7D:26:66:52:D3:58:B1:45:05:E5:A6:51:2F:7B:79:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012947
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102B78CCC41011EFB2F6DC67762E951A.roa
Signing time: Fri 27 Dec 2024 05:04:34 +0000
ROA not before: Fri 27 Dec 2024 05:04:30 +0000
ROA not after: Fri 12 Dec 2025 05:04:30 +0000
asID: 984
IP address blocks: 154.196.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76103 (0x12947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:04:30 2024 GMT
Not After : Dec 12 05:04:30 2025 GMT
Subject: CN=676e3562-01be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:ee:e3:d4:4f:6a:c3:12:25:fa:5d:5f:64:
73:69:8e:1c:74:81:7f:91:e8:36:3a:7f:44:c5:d2:
38:2a:c7:43:bc:9e:a0:5a:12:c0:55:07:3e:e8:3b:
79:76:5a:10:b7:b4:18:39:d2:fa:63:f7:5a:05:be:
88:b7:c4:ea:01:e0:d7:a9:5d:09:9b:00:df:cb:8f:
ea:03:b7:1e:78:8c:23:a9:40:48:42:a6:9a:58:fd:
3f:b4:42:ad:2e:af:9e:a5:61:01:05:3e:f3:6d:c5:
d7:bc:cc:e1:02:79:a3:ea:cf:51:fd:e5:2f:5c:4f:
87:a9:de:be:47:6f:76:cb:4c:9e:f1:9b:d2:65:89:
bd:cb:88:be:5b:57:2c:83:01:ed:af:8b:70:ae:06:
69:dc:fb:c4:e2:3b:e1:64:80:b3:54:61:07:bf:ce:
b9:b3:05:48:14:f1:a4:dd:09:a4:9e:5e:e8:f0:5d:
66:ae:4e:51:84:58:4a:35:8f:26:76:70:a0:4c:d6:
e0:3c:fc:e3:28:e8:ff:88:d5:9b:9f:5a:0c:86:3f:
38:62:60:22:5f:8a:f4:a7:2b:5c:ad:54:16:37:7f:
ca:3e:f4:5e:cf:31:e2:6e:f1:2a:36:ff:72:de:c9:
79:da:7a:6b:55:4c:8b:b8:1c:3c:ed:3a:04:78:ba:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:F5:68:7D:26:66:52:D3:58:B1:45:05:E5:A6:51:2F:7B:79:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102B78CCC41011EFB2F6DC67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.237.0/24
Signature Algorithm: sha256WithRSAEncryption
81:84:76:e4:cd:cb:cc:50:ed:61:eb:5d:9f:77:55:1c:3a:33:
9c:2f:04:35:5c:7c:48:f8:5b:e9:c0:ce:12:08:a3:21:d3:4d:
c3:9f:79:1b:3b:0c:97:ed:38:ae:a5:3f:48:4a:21:5e:b7:26:
75:75:c6:4f:aa:68:d6:b6:2c:09:5d:df:93:6d:7d:4f:24:41:
a9:74:13:18:74:7a:f7:7f:18:16:a2:0f:83:40:eb:bf:26:f7:
d5:58:f1:3e:74:47:b5:65:29:b5:1b:15:78:cf:e3:e7:93:42:
89:cc:26:f2:8f:dd:8f:51:0c:19:78:df:df:89:39:c9:f6:36:
3a:10:2d:93:0f:67:17:6b:a5:cc:1a:0c:f3:41:89:69:f8:41:
55:24:0a:3d:5a:92:1d:00:41:a8:b8:d4:d4:69:af:47:b8:c3:
a1:9b:15:5e:f0:d3:4b:52:0c:5a:e2:5d:6c:8e:32:47:70:4b:
b1:2c:34:89:4f:6a:a4:ba:c1:ed:a5:43:99:8d:61:55:9d:cd:
89:81:81:d5:d1:d1:98:2c:14:a5:38:21:84:39:b0:0a:89:a0:
fd:a9:f9:48:22:a3:e1:c9:33:b3:0b:51:7c:43:85:7a:fc:9e:
ad:25:1f:f9:9d:17:a6:09:40:3c:96:54:08:5f:c7:c9:36:7e:
dc:d4:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:03 2025 by rpki-client