Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E097A80C26511EFA001C740762E951A.roa
File: 2E097A80C26511EFA001C740762E951A.roa (raw, json)
Hash identifier: pquFE4hQ+KcaqzjF38o8ktWehQFQYnojlEV9IxHbc0M=
Subject key identifier: B4:A3:7B:5A:18:00:F1:01:2E:2B:BE:F1:E9:7B:98:17:E2:1D:F6:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E097A80C26511EFA001C740762E951A.roa
Signing time: Wed 25 Dec 2024 02:08:49 +0000
ROA not before: Wed 25 Dec 2024 02:08:46 +0000
ROA not after: Wed 10 Dec 2025 02:08:46 +0000
asID: 984
IP address blocks: 154.199.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74720 (0x123e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:08:46 2024 GMT
Not After : Dec 10 02:08:46 2025 GMT
Subject: CN=676b6931-98bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:ae:c0:78:15:47:c2:a3:c4:5c:b9:8d:8a:
a7:12:7c:dd:1c:0a:ac:09:20:fa:9d:8a:f4:00:9e:
42:8b:7a:84:aa:f4:9c:09:83:37:fe:4d:59:2e:0b:
f1:6e:03:5f:12:49:8b:4e:99:7c:1d:a8:18:99:e8:
cd:54:98:a0:f5:46:bf:10:f8:88:26:2f:e0:07:99:
66:fc:06:35:7c:37:d4:a9:48:b5:05:6f:5f:91:11:
9a:d7:06:81:76:05:71:9e:79:2b:8b:04:19:28:29:
31:b6:4b:0a:d3:5a:ee:1b:1b:21:04:49:10:8d:33:
09:33:d3:b1:34:b9:8f:ea:d4:0b:ff:33:b2:21:38:
48:ca:b9:d1:d2:62:f2:98:35:2c:fa:73:4d:31:f3:
6d:8f:fe:96:60:f7:4a:71:ac:6c:2c:db:c7:41:84:
97:c5:26:3c:d3:65:7e:7d:6c:83:af:43:13:b8:40:
e8:b1:d7:79:e8:f6:fd:d3:47:08:c0:56:d7:c8:33:
b9:c0:93:ae:b1:89:92:5e:60:76:eb:4c:5f:f9:14:
e4:33:f7:6e:74:f7:9d:35:d2:f0:12:b9:76:ef:b1:
00:bb:4a:4b:3f:e4:3b:f6:7f:1d:28:21:7c:02:82:
57:0a:fe:c7:37:0a:73:d1:e7:25:b9:78:77:93:1d:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:7B:5A:18:00:F1:01:2E:2B:BE:F1:E9:7B:98:17:E2:1D:F6:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E097A80C26511EFA001C740762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.125.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d9:ce:2a:a1:12:44:73:69:90:fc:83:5a:43:6d:47:c2:45:
3f:56:ef:75:7a:9c:23:dd:61:28:55:df:34:34:02:f5:d4:90:
fe:d7:af:d0:e7:0b:41:b5:ca:e4:07:fe:82:35:8c:65:fe:c8:
bf:c5:3a:f7:65:37:e4:43:57:54:f5:32:cc:ea:c4:d1:75:ac:
e9:a0:c0:ad:b4:9d:b3:c9:18:47:98:0e:cf:06:c9:ed:72:78:
74:49:f9:cb:e0:55:d7:a0:25:3f:37:e4:67:9f:ff:3e:07:f9:
4e:5d:e4:de:d2:db:24:7f:01:5a:cd:ab:47:c6:ef:0a:df:f3:
42:db:08:7e:23:26:cd:dc:d6:44:ea:f5:26:c4:87:16:aa:ee:
bd:c1:2e:34:93:32:7f:ec:2f:67:7c:5d:07:2a:a3:66:8a:08:
ab:15:b0:ff:84:71:5e:f1:ab:35:26:7e:c1:64:55:1f:c1:c2:
68:62:66:79:70:de:10:31:a6:60:7c:04:e1:8f:4b:1a:3f:12:
a7:d0:af:30:05:f8:6b:ac:ae:8e:b8:54:d6:de:85:22:57:4b:
54:bd:9b:79:76:ec:2b:45:bd:80:f9:ec:62:14:78:64:3c:f5:
51:7d:5d:f6:a6:a1:0b:52:51:ac:32:64:e2:c0:19:57:51:23:
52:ba:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:50 2025 by rpki-client