Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD9CCC4C1A311EFA7B03867762E951A.roa
File: 2AD9CCC4C1A311EFA7B03867762E951A.roa (raw, json)
Hash identifier: rl46hv+zDZaDoLhiXt4seiqi/wW5/Vrtq+YUPV1F3S0=
Subject key identifier: CA:93:70:7F:8B:03:B0:FF:BF:B4:CA:07:9C:84:41:89:21:50:6D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD9CCC4C1A311EFA7B03867762E951A.roa
Signing time: Tue 24 Dec 2024 03:00:01 +0000
ROA not before: Tue 24 Dec 2024 02:59:58 +0000
ROA not after: Wed 10 Dec 2025 02:59:58 +0000
asID: 984
IP address blocks: 154.92.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73933 (0x120cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:59:58 2024 GMT
Not After : Dec 10 02:59:58 2025 GMT
Subject: CN=676a23b1-55fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:16:f3:bb:e4:39:fb:0d:5e:13:ad:17:93:
08:23:39:ac:0a:6c:f5:07:52:7a:b6:75:a0:fc:82:
a4:53:23:bb:b8:e9:2a:8f:7e:dd:84:41:93:57:46:
a3:89:fb:0e:af:2e:ef:1a:9d:25:ed:38:b3:dc:e5:
f0:48:9b:58:0f:f3:d2:19:ab:05:62:87:fd:31:34:
0a:a7:ce:09:a5:86:6d:df:77:44:b1:dc:fc:1d:74:
85:97:e4:1d:5d:37:f6:f2:bd:8d:4d:01:d5:a9:e1:
eb:d6:5f:b2:ce:db:34:fe:53:e1:58:2c:f6:d1:47:
3c:3d:75:61:f4:89:27:cb:96:6a:e1:54:9f:2b:12:
98:0a:2a:25:b6:f6:c3:75:8d:fc:f4:f5:d4:c3:8f:
99:f0:b8:fe:82:00:f5:6b:ff:c9:7f:27:4f:c8:82:
64:91:36:8f:49:2d:e6:28:d0:01:db:a5:de:4c:c3:
af:8e:1a:a8:d7:c5:e0:ef:55:96:26:9b:db:2f:13:
6b:6e:76:8b:60:93:b9:e3:dc:d9:4b:df:2d:8d:72:
51:e5:50:9a:28:04:f1:0d:4d:ef:51:0e:ec:ac:ef:
e2:24:c1:fe:d8:17:3d:5a:0b:c0:a7:6c:57:fb:7f:
02:45:45:ed:cf:53:cb:45:36:b1:dd:87:43:8d:d3:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:70:7F:8B:03:B0:FF:BF:B4:CA:07:9C:84:41:89:21:50:6D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AD9CCC4C1A311EFA7B03867762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.141.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3e:7d:45:2e:a1:ff:fb:b7:c3:0e:b7:71:52:46:e9:74:03:
72:c7:fe:27:b1:4d:9a:0b:38:29:d3:01:c8:b3:0b:58:80:0e:
43:eb:7f:a4:50:af:33:b7:1d:c2:c6:ce:a2:91:d1:ca:67:a4:
cf:cd:15:46:11:bd:02:a4:83:a0:04:8e:45:41:7b:c7:07:1b:
5e:97:89:c4:62:f5:dc:b5:ae:87:3f:ec:34:42:69:03:4f:32:
bb:ae:4b:ce:9e:1f:8c:6e:c1:75:dc:92:b0:2c:27:1d:c8:28:
57:46:c5:54:d2:c0:8a:2f:20:1a:72:cb:5f:e3:14:95:94:49:
ea:da:3f:8d:7a:42:6b:75:f8:e6:ff:44:6a:14:39:1b:20:37:
a1:20:38:2a:a7:6e:ea:11:e1:82:a4:21:0a:da:24:81:47:18:
73:72:7c:5e:95:97:03:1d:51:2e:46:2f:34:da:1c:36:e7:cd:
23:f9:f6:33:0c:7d:39:2e:e3:da:50:06:2c:0e:32:64:99:4c:
70:7d:67:79:6a:4b:e4:92:52:66:ec:48:cf:b8:0c:11:b0:82:
34:f2:e0:41:70:37:b2:3c:1f:6e:fe:cc:ca:f5:bf:94:63:b4:
df:c9:04:6c:5c:7c:4e:47:50:82:94:ba:e4:28:be:21:c5:cb:
f3:1b:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:16 2025 by rpki-client