Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168489CCC1CA11EF9B7E2D5E762E951A.roa
File: 168489CCC1CA11EF9B7E2D5E762E951A.roa (raw, json)
Hash identifier: dcSPceBOnvmNcHgz5/tcLXdZYv5iHwl7DvOaFPVrx50=
Subject key identifier: 06:91:60:C5:D4:6B:DE:DC:0B:DC:B8:C0:53:57:73:9B:9A:81:C9:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012251
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168489CCC1CA11EF9B7E2D5E762E951A.roa
Signing time: Tue 24 Dec 2024 07:38:38 +0000
ROA not before: Tue 24 Dec 2024 07:38:34 +0000
ROA not after: Wed 10 Dec 2025 07:38:34 +0000
asID: 984
IP address blocks: 154.193.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74321 (0x12251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:38:34 2024 GMT
Not After : Dec 10 07:38:34 2025 GMT
Subject: CN=676a64fe-afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:07:b0:97:07:75:c1:bf:75:d0:88:5c:2c:
58:41:c1:83:77:2b:66:bf:34:d5:87:eb:45:55:c0:
1e:6a:2e:c5:09:ab:c3:65:58:13:21:9c:c1:07:43:
d7:88:b4:03:26:03:9d:56:1f:15:b8:dd:05:cc:03:
24:04:36:96:c7:4c:b7:40:91:98:6b:63:27:64:5e:
1a:18:77:0c:1e:35:81:d0:86:ce:20:01:fe:c4:ed:
6a:07:8d:e4:5c:14:b6:c4:e4:b0:a9:c2:f9:eb:93:
0c:e7:11:bd:b4:7f:1f:d0:0d:99:02:9c:79:f4:71:
f8:3a:5e:2a:2f:22:cf:c0:90:40:7b:d0:da:97:55:
51:f0:03:e0:1c:b7:79:16:41:4d:58:c0:12:c7:e6:
4f:90:5e:bb:e6:91:66:0b:a9:f1:e9:62:3c:95:a7:
c7:6b:86:4b:c0:b2:9b:db:ab:7c:f3:a7:70:e6:10:
5f:fe:2a:22:04:78:53:1b:9e:ed:70:61:15:88:93:
1e:8f:e3:0f:fe:a5:df:68:6e:4f:02:6e:e4:d0:78:
aa:89:6f:ff:e0:c2:86:75:1f:65:40:90:9f:0d:6e:
88:7e:57:2d:7c:3b:7d:dd:58:bf:91:50:e1:3d:84:
6b:fd:02:31:0d:7f:c2:7b:7e:70:8d:6f:aa:9a:55:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:60:C5:D4:6B:DE:DC:0B:DC:B8:C0:53:57:73:9B:9A:81:C9:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168489CCC1CA11EF9B7E2D5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3c:ea:c7:dc:3c:00:70:b3:e4:f4:9d:8b:74:29:6d:0a:f6:
84:8f:31:6b:59:86:e2:af:f8:16:23:b5:60:d9:e3:c3:6e:53:
d6:94:f1:6a:f0:67:75:01:2d:9b:ef:e2:b0:ae:74:ed:82:c5:
7c:e3:d7:7f:60:97:01:23:b6:c4:10:7f:82:e9:a0:f9:a8:b1:
72:b5:5a:8f:a1:ed:9c:ca:b1:cc:89:20:26:92:a0:83:45:6f:
2d:bc:c4:d8:3a:6f:06:d2:8a:05:bb:f1:3a:af:d0:7a:c6:cf:
71:f9:18:18:93:b3:0f:4c:20:e6:e5:62:dd:49:86:ab:27:dd:
7f:ef:74:d6:d3:5f:02:83:77:2b:ca:05:00:48:de:55:32:71:
3d:11:2f:8b:6e:bc:29:d8:28:d8:96:00:59:c0:40:78:03:8e:
06:cd:d4:95:20:c6:b5:5f:8b:25:05:15:b8:18:60:49:b6:d7:
52:59:ac:dc:33:14:91:04:d9:15:63:e2:04:a7:c0:93:32:89:
66:c4:a7:32:ea:91:f7:cc:93:2d:8c:b6:8b:b5:1a:15:94:bb:
b4:96:ea:3e:be:3b:e2:30:28:2b:c5:cd:4d:15:bf:26:c9:70:
31:60:46:f4:5d:ee:e2:85:d0:3e:32:68:64:4d:7a:df:7d:8b:
ed:cf:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:11 2025 by rpki-client