Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C238C0ACDBB11EFBF7C775A762E951A.roa
File: 1C238C0ACDBB11EFBF7C775A762E951A.roa (raw, json)
Hash identifier: wWyDpaVBu/Sey3qyRAoIQoLmlotYlQP74Jr0P95y6/s=
Subject key identifier: 88:33:A6:A4:9D:2C:77:CC:A7:72:E3:1A:B0:E7:EE:C2:A4:44:DC:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C238C0ACDBB11EFBF7C775A762E951A.roa
Signing time: Wed 08 Jan 2025 12:21:39 +0000
ROA not before: Wed 08 Jan 2025 12:21:35 +0000
ROA not after: Tue 16 Dec 2025 12:21:35 +0000
asID: 984
IP address blocks: 154.200.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79584 (0x136e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:21:35 2025 GMT
Not After : Dec 16 12:21:35 2025 GMT
Subject: CN=677e6dd3-70e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:82:97:fa:77:e3:2d:71:eb:b3:88:9a:3f:
57:fa:5f:71:60:eb:d9:ce:ef:f7:45:a5:b4:63:93:
42:ab:22:12:d8:c8:9a:e0:3d:0b:30:b9:95:5e:e8:
69:c4:72:83:da:82:3a:a3:85:10:21:f5:b6:9e:02:
55:92:8f:3a:bc:9e:f9:44:bf:85:44:a7:11:86:a6:
57:a4:f0:37:4d:29:46:e8:06:bb:32:71:00:4f:de:
8e:7e:b7:d4:c8:1c:16:69:85:ba:69:f8:92:04:ef:
10:78:ea:3f:44:f3:24:17:3c:30:01:5b:37:67:54:
3a:1a:f3:39:ec:d3:73:b7:cd:97:2f:a9:9a:bd:a1:
a8:5c:fb:6c:2d:62:72:25:08:35:b0:56:51:d8:96:
f7:26:4e:35:28:6c:87:57:c4:74:22:58:9b:b0:89:
f7:0b:4a:95:ee:6d:73:10:ab:c0:05:b0:65:d8:8d:
2b:91:51:8a:cd:5f:ca:d8:ff:a3:f2:88:28:42:73:
5a:cb:b7:f2:41:7f:5a:c2:ca:da:d0:72:f3:45:f1:
86:23:7e:27:b2:e0:3d:ea:43:4e:c2:42:ab:a3:c9:
00:94:5e:8e:5b:f3:2f:5e:fb:18:ba:a9:8c:3c:ec:
39:c2:24:5a:8c:9f:1c:50:49:3a:c8:aa:1e:ac:c8:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:A6:A4:9D:2C:77:CC:A7:72:E3:1A:B0:E7:EE:C2:A4:44:DC:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C238C0ACDBB11EFBF7C775A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.185.0/24
Signature Algorithm: sha256WithRSAEncryption
27:02:9d:07:9e:f0:53:06:d7:0d:c5:71:f7:c5:d7:6e:80:2c:
01:69:ac:3c:90:dd:a7:90:4e:5d:62:c7:8f:b9:fa:de:e7:18:
5b:96:7d:39:c7:3b:51:44:a1:26:0c:18:9b:64:6c:f5:ea:c5:
9c:d2:79:7e:b5:8d:b6:7c:9e:b7:94:22:f8:f1:d6:b5:59:3f:
78:e4:6d:00:93:60:0d:af:7f:af:9d:c4:b3:6d:c0:e9:5e:8a:
d8:6a:43:da:3b:d3:08:d8:8b:60:d7:71:a8:89:f8:4f:f8:af:
30:22:8f:52:98:93:eb:cf:e6:ea:01:8f:82:09:c0:1d:01:ec:
6c:03:2c:41:03:3d:5b:ca:64:fa:98:3b:3e:d3:77:a3:8b:3f:
af:8d:54:9e:b0:8d:ba:9f:b4:dd:c1:0b:7b:e4:68:44:ac:8b:
ac:3e:58:96:2d:13:9a:81:55:85:49:35:f8:48:8f:5f:d0:47:
97:0a:79:21:a6:bf:10:71:02:89:4e:ec:d1:f5:ab:a7:ef:c0:
78:38:bf:fb:ae:13:7e:dc:9c:1a:1b:11:c7:c5:aa:37:8f:76:
b8:9d:bb:65:26:9b:d2:08:f8:da:96:42:48:f9:b3:f3:b6:f1:
cb:54:9c:66:e6:e3:48:45:14:74:2a:37:86:43:31:1f:f0:6f:
18:19:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:11 2025 by rpki-client