Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EDFFAAB21A11EFAF529AAA762E951A.roa
File: 13EDFFAAB21A11EFAF529AAA762E951A.roa (raw, json)
Hash identifier: DmQa7cjGuxp9X6wnVRLYWwqu2IwpxFBnSt6uhdskJb8=
Subject key identifier: 4C:9B:9D:54:8B:7A:6D:82:90:B4:5A:53:C9:02:AF:22:C4:16:59:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EDFFAAB21A11EFAF529AAA762E951A.roa
Signing time: Wed 04 Dec 2024 08:30:54 +0000
ROA not before: Wed 04 Dec 2024 08:30:51 +0000
ROA not after: Fri 05 Dec 2025 08:30:51 +0000
asID: 18229
IP address blocks: 154.83.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71640 (0x117d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 4 08:30:51 2024 GMT
Not After : Dec 5 08:30:51 2025 GMT
Subject: CN=6750133e-8caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:a1:1f:93:69:73:13:7e:2a:ce:b2:cf:f5:
c0:48:75:94:e7:12:3a:31:68:9f:e2:0b:30:3f:c2:
e7:3d:c6:3e:79:33:b9:98:72:3b:5a:16:8d:1e:5d:
95:50:d3:5d:fc:58:32:61:ef:c8:73:cc:9a:95:77:
5d:6b:ae:69:cb:84:04:f8:02:0c:a0:1a:07:70:da:
d4:29:1e:57:68:b5:e1:52:92:1d:10:26:aa:3e:7a:
00:8c:ca:ca:96:4a:04:76:4e:c0:9f:4d:e8:b7:42:
1b:7d:38:3c:0a:ff:0b:68:4f:90:75:b8:bf:a9:ce:
cd:51:4a:38:74:fc:c8:78:27:c2:f8:e3:bf:33:5b:
07:f5:f1:7e:94:76:0f:35:06:a8:19:82:8f:71:b9:
0a:20:4a:d5:32:23:1e:a2:21:ec:c5:c6:22:66:03:
d2:a6:6d:e2:98:97:62:04:39:58:f5:fc:1b:e9:ad:
1b:0f:03:ba:27:ca:86:be:1b:a2:7b:31:45:c9:7f:
f7:dd:77:8d:8e:0e:4f:42:e9:df:44:f4:c0:4f:d0:
31:6e:99:19:74:7a:80:4f:a0:74:f6:3e:76:fe:75:
17:7e:01:d9:5e:a8:de:6d:aa:f4:87:df:b5:7e:e1:
3e:2b:c6:b4:87:94:8c:2a:82:96:f0:bf:b4:e2:50:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:9D:54:8B:7A:6D:82:90:B4:5A:53:C9:02:AF:22:C4:16:59:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EDFFAAB21A11EFAF529AAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.3.0/24
Signature Algorithm: sha256WithRSAEncryption
47:51:ed:0f:8a:a7:98:8d:e8:83:68:cd:45:49:c4:90:09:a0:
53:14:85:d4:51:90:56:9c:ac:16:df:15:ed:1b:93:6f:32:24:
40:ba:ab:08:67:22:54:e2:88:cf:db:3f:32:13:ef:88:39:80:
c1:3b:9d:35:d7:b2:5a:48:d4:2a:43:26:af:20:cd:fc:31:0a:
de:d5:07:94:cf:25:6f:6e:05:f7:69:7f:cd:22:f2:bb:b9:a6:
e0:54:43:ad:c9:2d:21:3c:b2:43:7a:00:27:07:11:85:0a:b6:
4b:d5:e0:4a:92:e8:fb:e1:54:00:20:f5:20:e5:e0:2d:72:a3:
6a:57:bd:12:37:0e:25:74:a5:a1:a5:71:d1:66:30:c8:b6:f4:
71:0d:b9:5e:2f:a3:28:d9:0e:a2:3d:01:4c:5b:eb:5d:e1:c5:
21:0f:84:c9:b9:69:56:b2:1a:a9:db:9a:f1:b3:4b:bd:13:80:
b2:9d:ef:09:ae:6a:b4:e4:e4:b5:ad:43:f0:49:31:3e:16:5d:
37:e7:b0:d8:27:a8:55:cc:32:e3:f4:ad:69:91:5f:a8:9d:db:
46:fa:97:99:37:54:43:98:01:1b:1e:5d:5f:ae:88:c4:12:62:
36:b9:11:d8:bb:26:e1:2d:ca:b4:57:24:f5:b7:3c:70:7f:e7:
c8:9a:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:33 2025 by rpki-client