Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4A063EC38411EF82B14061762E951A.roa
File: 1F4A063EC38411EF82B14061762E951A.roa (raw, json)
Hash identifier: 5xXW3+s4yAmu+jyV1/4j9GdXqTWWF+X8WBLU9US/RVQ=
Subject key identifier: 69:6C:69:DD:5C:E3:52:B7:2E:B9:1F:56:9E:43:B0:0B:FD:60:E6:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01277E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4A063EC38411EF82B14061762E951A.roa
Signing time: Thu 26 Dec 2024 12:22:50 +0000
ROA not before: Thu 26 Dec 2024 12:22:46 +0000
ROA not after: Fri 12 Dec 2025 12:22:46 +0000
asID: 984
IP address blocks: 154.94.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75646 (0x1277e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:22:46 2024 GMT
Not After : Dec 12 12:22:46 2025 GMT
Subject: CN=676d4a9a-4345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:94:3f:53:f6:bd:12:6a:94:7f:84:2d:c4:
ab:ab:18:34:bc:e8:2c:bb:e4:01:e5:9d:06:55:b2:
1c:a5:3b:f2:17:a0:b5:c6:fe:47:52:a5:b3:ab:a7:
15:40:40:18:46:77:86:28:50:9f:42:05:e1:34:fe:
27:40:94:f2:b3:6a:6d:ce:63:db:43:2a:3f:58:64:
fd:67:0e:c6:50:d3:ae:5b:85:56:5a:ee:23:96:cf:
b7:0a:92:6d:13:d1:46:c2:88:76:52:f5:4a:fe:9c:
17:18:82:be:25:11:b4:c2:7d:b9:76:20:14:4d:12:
68:7d:59:65:8f:ab:69:8e:49:78:4d:15:68:f3:1e:
9d:3a:a1:64:94:24:bb:0f:bc:cc:0f:5f:9f:86:42:
2c:3a:46:2a:c4:d8:59:27:0b:6d:25:82:02:15:c0:
65:d6:f4:d2:ec:95:82:e4:71:2d:16:0a:5c:fa:d6:
e1:d7:bd:cb:2a:f3:c2:41:7a:89:d3:aa:75:13:3d:
e4:d3:b0:8a:03:e8:28:fe:19:ae:b5:21:9b:46:94:
6d:11:53:8c:a0:5f:7f:0f:70:57:f7:03:d1:b6:88:
f5:33:bd:13:05:49:cc:38:05:20:58:b0:4a:1e:80:
64:0f:80:de:f8:55:dc:eb:66:41:36:25:4e:27:89:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:69:DD:5C:E3:52:B7:2E:B9:1F:56:9E:43:B0:0B:FD:60:E6:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4A063EC38411EF82B14061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.214.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d6:2f:bd:b1:68:f4:2c:d4:80:bd:95:4e:10:55:3b:b1:d7:
85:7b:59:8e:ff:42:f0:47:b1:c7:f0:b8:4f:31:e5:73:9e:8f:
50:ba:52:eb:79:37:14:e1:4b:45:4f:f3:bb:2b:dc:4d:2e:ea:
70:d0:66:b3:94:94:ea:19:0f:30:6d:87:f1:78:a0:ed:a0:75:
e7:44:72:c2:af:f6:6a:57:f3:1f:ec:a0:82:f8:4a:a0:2f:9a:
a1:00:5b:61:8a:a9:a6:2a:8b:85:db:13:76:39:e6:91:61:29:
10:1c:bb:da:04:ba:91:8a:2f:3f:d3:74:7d:23:da:a8:0e:c8:
66:2e:31:38:1f:3f:a2:ff:38:57:52:1d:93:f1:e5:f8:d8:c9:
44:a2:37:c8:98:eb:9f:73:60:89:d0:72:52:95:a0:45:8a:fe:
7c:19:7c:97:70:21:f5:ba:f4:10:a5:fc:16:08:52:73:aa:b7:
cb:f3:ce:9e:8a:94:ff:9f:a9:86:46:81:c1:5a:97:3c:e2:ea:
48:81:df:cf:02:55:01:2d:77:3f:f8:b0:9a:ab:e2:51:fb:13:
38:ec:3d:b6:68:4a:55:94:b8:74:4b:7c:05:9e:75:a8:5f:20:
0d:bb:09:d7:1e:b0:e3:7e:f7:13:ea:f8:cd:a8:18:f7:b0:9e:
14:29:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:09 2025 by rpki-client