Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DE2A14C25C11EF905AD97C762E951A.roa
File: 14DE2A14C25C11EF905AD97C762E951A.roa (raw, json)
Hash identifier: F8yB/Kzz7skpVtridjIPp+YLjSvUwwlUyto+bOEZsKE=
Subject key identifier: 26:9B:13:CA:2A:7D:7E:60:7A:AD:C8:EF:EA:AD:34:5A:C5:DB:1B:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012378
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DE2A14C25C11EF905AD97C762E951A.roa
Signing time: Wed 25 Dec 2024 01:03:41 +0000
ROA not before: Wed 25 Dec 2024 01:03:38 +0000
ROA not after: Wed 10 Dec 2025 01:03:38 +0000
asID: 984
IP address blocks: 154.199.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74616 (0x12378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:03:38 2024 GMT
Not After : Dec 10 01:03:38 2025 GMT
Subject: CN=676b59ed-fb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:90:b8:1a:9b:bf:48:76:34:61:43:c7:67:
a3:db:8c:f7:61:78:b4:78:1f:a0:88:5c:6d:59:ab:
39:be:a3:61:7d:c5:32:b0:27:d2:b2:f5:32:e6:24:
93:b7:8e:7b:ed:a5:af:5b:b7:7a:03:e8:a2:7f:87:
35:0d:f8:4c:97:59:6d:1c:bb:7c:03:fb:8a:f6:56:
81:95:49:77:9d:cb:3c:59:2d:da:b3:71:46:e4:1a:
ab:c2:3a:30:fa:66:93:bb:a0:d1:67:2a:1d:32:97:
98:e6:08:d8:8a:da:3d:9c:ce:8c:0e:c2:ac:85:9d:
e5:05:22:d4:36:7b:44:08:7e:58:41:2a:0e:9e:a0:
6f:74:9c:0c:4a:84:9c:bc:8f:db:dc:85:1b:fc:2f:
83:da:4b:9e:e4:f2:6f:f2:1f:5c:a1:2a:0e:7e:04:
cb:38:05:93:c4:22:b9:87:c6:96:a4:fc:7c:04:19:
8c:ea:9e:50:4a:90:47:a2:e2:a4:7f:43:c4:08:40:
07:85:df:8b:ef:9d:99:28:2a:7f:4b:65:bd:47:cd:
0d:55:24:1e:cd:48:ad:b3:f5:c0:7c:12:23:b5:c8:
73:b5:cf:fd:87:54:b7:42:35:90:50:94:c9:57:78:
a2:f3:06:ea:41:f5:44:bc:78:81:dd:c2:87:60:e8:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:13:CA:2A:7D:7E:60:7A:AD:C8:EF:EA:AD:34:5A:C5:DB:1B:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DE2A14C25C11EF905AD97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.73.0/24
Signature Algorithm: sha256WithRSAEncryption
32:80:23:ed:7f:0e:ab:96:6f:83:3d:92:f7:c5:c5:7f:a5:a9:
e9:db:b4:16:91:57:95:33:c9:3a:bf:a4:92:8c:4b:d2:f4:5c:
10:be:3c:b9:d6:10:4d:7f:05:57:35:7e:aa:3d:e6:21:cb:1e:
56:33:6d:48:b2:7b:43:24:cc:34:cb:9a:21:92:8f:a8:66:9f:
ea:21:71:07:ec:29:22:0c:a1:80:22:c0:b3:5c:95:22:cb:e9:
9b:0b:2f:fc:82:fa:15:8e:ae:cd:f5:8a:48:94:e3:d1:89:9d:
2d:c8:3c:d2:ce:f0:a7:a8:7f:75:34:2f:81:e0:82:78:a0:47:
fa:d2:77:e5:93:cf:d7:91:e5:dd:d9:14:36:7f:76:6d:86:b9:
41:b8:7a:b4:62:e3:10:30:5e:95:ad:5a:73:e4:72:1e:81:4a:
aa:da:38:55:74:77:aa:cc:7f:05:6f:ea:03:02:0c:bf:1f:3c:
5e:a2:a9:b2:b8:da:15:06:e0:db:f2:4a:f3:3c:02:d8:21:cb:
5e:81:cd:39:3f:f9:d9:0a:f5:7e:55:8c:09:a5:4a:7f:45:79:
1d:67:dd:19:b9:61:c0:08:ce:e9:ed:7f:8c:50:dc:91:80:f2:
73:78:48:bc:e5:e3:24:15:c4:68:7c:ee:6d:98:a0:ee:26:c8:
d5:cd:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:52 2025 by rpki-client