Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C337CAC52011EF8B56069B762E951A.roa
File: 31C337CAC52011EF8B56069B762E951A.roa (raw, json)
Hash identifier: me77lHnuVhA0kCPOsCIkPmDB7SDYiqkv3MtqvEe64mY=
Subject key identifier: 63:A7:B3:9D:3B:67:5C:7A:E2:8C:BE:C3:58:9E:C0:AC:E4:BD:87:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C337CAC52011EF8B56069B762E951A.roa
Signing time: Sat 28 Dec 2024 13:32:34 +0000
ROA not before: Sat 28 Dec 2024 13:32:30 +0000
ROA not after: Sun 12 Dec 2027 13:32:30 +0000
asID: 17561
IP address blocks: 154.203.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76623 (0x12b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:32:30 2024 GMT
Not After : Dec 12 13:32:30 2027 GMT
Subject: CN=676ffdf2-2029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:9c:93:26:b5:e6:da:79:a4:74:73:3f:7c:
1d:dc:6b:ac:15:61:58:26:7a:e3:2c:b2:c3:45:c9:
ea:17:13:67:e2:6e:7f:d2:87:b0:f0:d4:bd:1e:84:
d2:e4:c1:c7:b5:96:9e:f9:26:68:b0:f3:e0:0e:32:
ac:0c:c8:35:e5:32:7c:2b:07:8a:8c:ee:09:0e:d0:
72:b2:0f:7e:31:09:b9:6d:4b:59:fd:a5:52:9d:83:
80:9c:d8:f4:8d:16:74:13:4f:c8:79:66:38:6c:f1:
b2:f2:83:b1:a8:a4:b7:f7:8a:6f:3a:fc:7b:eb:f9:
47:37:53:f8:c4:06:aa:fb:9e:c2:69:6e:41:77:f3:
e9:ed:44:aa:62:bd:33:bb:9f:9a:3b:c8:e8:1b:a8:
d3:4d:2f:7a:a0:15:13:64:46:42:c2:ac:94:26:c3:
4d:00:9a:41:04:a5:52:60:73:91:34:d1:71:e7:ba:
bf:0a:61:0c:cb:2a:70:fb:fe:11:0f:84:74:3e:3f:
89:68:7b:2a:83:eb:98:7c:cd:46:f8:7f:29:c3:f1:
8a:a5:68:16:6b:87:ee:04:f5:26:b7:60:45:a4:0d:
ea:71:f3:89:16:a7:22:d8:e2:8c:9e:e3:22:8a:12:
95:2a:26:56:44:24:f2:82:b7:79:62:1a:55:ab:7b:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A7:B3:9D:3B:67:5C:7A:E2:8C:BE:C3:58:9E:C0:AC:E4:BD:87:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C337CAC52011EF8B56069B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b4:30:b7:9d:5e:0e:50:ed:ea:22:31:b4:d0:e6:6c:1c:ba:
97:ea:ac:bc:be:8f:c2:7f:2d:94:1f:2d:dd:44:9d:2b:f9:ed:
4c:58:2a:8d:12:21:19:86:c1:7f:1e:3a:c2:a0:76:ed:87:d3:
1f:49:a4:10:f2:67:2e:b5:b5:a7:32:d8:e0:03:9d:34:5a:8b:
6a:8c:43:e2:e9:21:4d:a9:71:98:7e:5c:40:86:0c:14:c5:7a:
45:26:a6:1d:09:bb:11:eb:a7:d9:b8:b7:47:51:d2:88:9e:a6:
ad:ff:56:22:46:25:5d:f1:60:3c:91:8d:d6:32:7e:8c:63:0d:
99:ae:31:d2:db:43:db:4c:46:42:26:a9:1b:93:04:b0:ec:8b:
25:ff:04:71:6d:6d:45:50:cd:75:8e:c1:4d:f5:13:d9:94:87:
71:92:29:25:be:b1:61:c5:87:28:80:98:1f:95:54:af:f6:a2:
9d:6d:e9:58:d5:0a:95:bb:1e:e7:45:09:94:43:31:6a:ab:75:
13:e9:89:d2:6a:86:98:d2:f6:7a:13:65:76:26:54:9e:3e:0a:
5f:27:15:d3:60:b5:0e:c2:7d:7a:b6:54:2a:b4:65:4c:6d:98:
29:b8:f3:d6:b2:e5:ee:79:2c:d8:de:09:92:cb:b7:c3:1b:22:
09:2b:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:47 2025 by rpki-client