Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0FCE72C1A511EF98B64173762E951A.roa
File: 2F0FCE72C1A511EF98B64173762E951A.roa (raw, json)
Hash identifier: FsqnrQC0aJQH5XL2HsKSRoe31+Esnb+vjYHmBW7wz7U=
Subject key identifier: 56:26:4F:0A:16:22:0E:B7:13:79:DA:A3:4A:3E:77:C6:BF:C7:38:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0FCE72C1A511EF98B64173762E951A.roa
Signing time: Tue 24 Dec 2024 03:14:27 +0000
ROA not before: Tue 24 Dec 2024 03:14:24 +0000
ROA not after: Wed 10 Dec 2025 03:14:24 +0000
asID: 984
IP address blocks: 154.92.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73957 (0x120e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:14:24 2024 GMT
Not After : Dec 10 03:14:24 2025 GMT
Subject: CN=676a2713-8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:18:cb:16:d9:e5:9d:fe:ef:9a:5e:25:e9:
32:a0:a7:76:75:e3:f9:c9:a5:c7:8d:1c:59:54:90:
09:29:18:b9:ec:cc:c1:2f:5c:d6:a4:f5:e8:fe:d5:
6a:b3:fd:82:1a:48:52:79:ff:70:8f:a5:c2:72:98:
a8:aa:11:06:da:93:21:71:66:01:4b:7e:7a:b1:fb:
ac:f7:cc:c6:bd:77:86:31:2d:7f:cc:22:0c:db:2b:
fd:b1:b6:34:46:f3:54:0e:5c:75:0a:9f:57:4a:eb:
41:87:46:94:d8:11:6b:5a:74:d7:6f:6d:ee:52:e2:
3a:2c:ec:e9:fa:a0:a8:96:5e:65:33:1d:10:39:17:
b8:fe:b4:bc:1e:ed:3d:a9:88:80:1d:7e:ba:e9:63:
b2:e7:37:a2:69:f8:9c:d2:e3:9c:f5:2d:73:21:fd:
61:30:41:c9:35:53:80:37:6b:81:97:7f:e5:f3:70:
ab:02:9a:45:b9:26:54:07:30:17:63:bb:c8:cc:47:
32:83:ca:62:6d:48:68:2d:77:e7:b1:6a:2d:92:88:
3c:cb:96:50:40:3a:60:6f:1d:1b:ab:b0:a9:37:e1:
09:f6:6d:8d:05:a4:c8:49:94:f8:72:63:fa:ce:be:
b7:45:ab:2d:e9:30:89:06:8c:06:2b:84:4a:fb:f9:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:4F:0A:16:22:0E:B7:13:79:DA:A3:4A:3E:77:C6:BF:C7:38:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F0FCE72C1A511EF98B64173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.154.0/24
Signature Algorithm: sha256WithRSAEncryption
55:49:9e:a4:9f:d9:d3:86:be:bc:23:ae:8b:4e:b8:e7:4d:00:
65:13:44:ab:7e:23:cf:21:97:3f:78:ff:34:86:c8:d3:59:c7:
2f:ef:0f:0f:17:3d:db:9e:78:75:ee:d3:18:2a:47:05:d2:31:
3e:10:97:a9:71:c9:ec:66:41:d4:2d:d6:17:57:58:3f:a6:4f:
58:3d:c1:55:78:0b:61:86:42:37:e6:52:15:ca:b9:05:30:11:
47:4f:90:8e:e5:d5:06:24:46:f4:b2:4d:f7:ef:04:b6:26:64:
79:4e:83:1d:2d:da:54:4e:87:19:10:aa:98:bb:ee:db:de:8a:
ea:a6:a3:61:e3:85:f2:49:ae:bc:16:f2:6f:ed:50:83:81:8a:
3c:5f:39:b5:61:1b:9c:16:3b:cb:eb:86:ae:aa:03:04:48:f8:
a9:e6:89:43:c8:d1:2b:6b:cc:e2:d6:f2:44:4f:28:b6:78:56:
b5:77:62:63:33:f9:d9:91:49:02:09:b7:2c:de:43:77:da:65:
92:0f:60:41:f5:8b:d6:c4:e4:88:e9:f3:69:1d:d4:ea:bd:0f:
97:fa:42:83:14:95:41:24:a7:ca:24:da:8c:bc:bf:8c:62:91:
2d:44:f8:12:b6:89:5a:c4:97:52:8a:9c:44:d0:46:2f:5a:f8:
a1:2c:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:37 2025 by rpki-client