Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F16914C40A11EF9A7E4B43762E951A.roa
File: 26F16914C40A11EF9A7E4B43762E951A.roa (raw, json)
Hash identifier: 8mZck5DkyBWq82Qzt0PjCZiKde2ZejGMquqTXAKuLo4=
Subject key identifier: 04:28:D5:9B:E3:0D:C5:10:DC:6E:12:10:99:E1:BE:65:24:F3:3B:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01290B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F16914C40A11EF9A7E4B43762E951A.roa
Signing time: Fri 27 Dec 2024 04:22:15 +0000
ROA not before: Fri 27 Dec 2024 04:22:12 +0000
ROA not after: Fri 12 Dec 2025 04:22:12 +0000
asID: 984
IP address blocks: 154.196.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76043 (0x1290b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:22:12 2024 GMT
Not After : Dec 12 04:22:12 2025 GMT
Subject: CN=676e2b77-0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:49:f1:09:8b:09:ab:b3:60:b8:26:69:65:
88:c0:77:07:58:d1:de:5e:15:05:5e:56:84:8c:58:
78:7b:e1:4d:cd:49:43:12:b6:7f:77:a7:35:ac:77:
63:7d:07:a7:27:58:d8:64:2d:03:3e:82:18:a3:b0:
e4:20:aa:3e:92:48:d6:68:c1:6c:26:21:fe:92:fe:
f0:86:2d:cc:d9:3b:0e:c1:65:ab:c9:a6:6e:54:ef:
52:b4:92:55:77:eb:59:da:7e:3f:41:8c:a8:88:27:
1e:2b:f1:b4:d4:38:cd:c5:89:1d:6e:a8:48:62:03:
73:7f:55:bc:4e:4c:05:06:b8:eb:04:f8:b0:8a:ba:
ea:6f:da:ac:56:b9:b0:7e:ef:d1:ab:5e:d8:17:ca:
c2:2e:b4:2b:fd:ab:f7:6d:b5:ab:cf:ab:fe:11:b5:
51:71:b6:17:30:6c:e7:d2:26:ba:72:b4:79:7a:f5:
e0:97:da:00:d7:33:58:29:23:79:2d:f5:fe:86:a8:
9e:7f:27:1a:e4:15:16:3e:c0:3b:c7:a7:49:8c:dd:
8d:69:7c:e1:ea:8d:42:8f:30:68:f7:66:cd:f6:2c:
f4:5b:b6:02:fd:9b:8b:ca:a7:54:37:0b:72:ac:55:
bf:b1:47:40:da:86:ca:9c:a9:1f:42:c5:95:e1:d5:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:D5:9B:E3:0D:C5:10:DC:6E:12:10:99:E1:BE:65:24:F3:3B:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F16914C40A11EF9A7E4B43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:25:21:9a:47:3c:4e:d4:89:51:28:32:78:c3:b0:2e:fe:4b:
2f:8c:17:d0:da:c3:e6:cf:24:8e:7f:ea:fb:9c:99:e5:29:e7:
e9:a3:d8:8c:63:49:29:fb:6d:ac:71:ce:7e:76:85:c1:fd:20:
9a:83:d5:eb:65:c7:79:39:fb:02:29:de:40:d6:ee:cf:35:f0:
e4:6d:db:aa:4a:c9:39:44:65:e1:e7:6a:5d:c6:05:64:d1:a5:
06:5a:ff:f5:90:3f:5d:24:5d:5d:95:b0:93:38:f5:3b:63:be:
d3:32:85:3b:2e:a7:c9:7a:a3:ef:b4:e7:e7:a2:f6:55:60:84:
4c:41:33:e5:c7:b3:9c:e4:6d:aa:5e:1b:eb:34:86:66:63:51:
22:cc:56:77:78:7f:bd:1e:d4:9f:e5:01:a0:cc:f7:12:d5:e5:
3a:2c:a6:e5:d8:82:7f:1b:57:4b:64:43:a8:02:b8:50:87:a8:
1c:4b:6c:b4:48:43:ec:1c:8c:83:92:9f:70:f8:3b:b6:37:d6:
5a:bf:87:84:20:fa:69:45:96:1b:fc:39:af:de:1c:92:58:40:
74:5c:d1:ef:87:11:85:75:50:2d:69:b3:82:13:71:c0:aa:91:
76:b8:89:3f:73:c9:ba:ed:17:63:68:ba:23:cc:c2:6f:3e:6a:
bc:f5:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:57 2025 by rpki-client