Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A6CC0EC1BE11EF84DBB492762E951A.roa
File: 35A6CC0EC1BE11EF84DBB492762E951A.roa (raw, json)
Hash identifier: 2ZKIQeAxwts8TkcBTUX8MAX4PSR3tI0wQOvDRBxRVgA=
Subject key identifier: 87:B8:A0:3F:2B:20:31:D1:23:5E:E5:AD:F7:D5:D5:AD:BD:90:D3:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012211
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A6CC0EC1BE11EF84DBB492762E951A.roa
Signing time: Tue 24 Dec 2024 06:13:36 +0000
ROA not before: Tue 24 Dec 2024 06:13:32 +0000
ROA not after: Wed 10 Dec 2025 06:13:32 +0000
asID: 984
IP address blocks: 154.193.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74257 (0x12211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:13:32 2024 GMT
Not After : Dec 10 06:13:32 2025 GMT
Subject: CN=676a5110-fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:cd:7f:4a:44:5c:07:e4:39:4a:b1:c2:80:
20:de:6a:55:4e:c9:5a:81:e4:f8:4c:54:79:0c:e4:
f2:5b:3c:e1:fd:ad:25:43:b5:5b:78:15:ee:cb:38:
b4:21:79:14:4f:d7:ca:1b:c6:8a:1e:0f:40:25:cc:
d1:d9:f5:7a:92:4e:79:d4:61:41:f8:f1:90:2e:40:
f9:36:7b:34:36:7b:3f:3d:de:57:a5:d9:9e:d4:d2:
fa:98:9d:8e:16:79:f6:46:d8:07:2f:3d:0f:71:81:
5f:6a:b3:15:4b:d7:a4:8a:88:8f:57:66:85:3d:d2:
b0:6e:83:ef:20:47:a0:ba:4d:2a:7a:11:0a:88:38:
60:8e:1e:7a:c8:b2:73:f9:cb:c5:6a:32:5f:f8:a2:
dd:f2:54:b8:8c:4e:33:e0:67:03:9b:43:bd:bb:7d:
83:fd:ed:13:3b:34:91:ba:1e:4a:14:4d:7f:e7:2e:
80:10:55:96:12:47:44:1b:99:86:bd:91:1a:03:75:
31:58:bf:5e:59:04:27:02:b5:40:0a:af:e3:5c:0f:
64:06:3f:f0:58:74:28:db:74:56:e6:12:b8:94:81:
b3:6d:71:3a:9d:70:cb:35:16:e9:49:b1:ce:00:e4:
57:0f:d3:b7:39:6a:06:b1:5e:88:1e:ac:43:00:59:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B8:A0:3F:2B:20:31:D1:23:5E:E5:AD:F7:D5:D5:AD:BD:90:D3:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A6CC0EC1BE11EF84DBB492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0b:d9:ae:b8:a7:6c:0e:f4:fb:ab:73:23:b3:a6:92:24:06:
6e:2e:30:e5:af:a7:fa:b3:67:f1:60:02:80:76:a5:fa:36:f1:
9d:6b:3e:6a:41:d1:77:28:7e:5f:b4:3b:e1:6f:1c:8b:b1:99:
6c:4c:f7:4b:42:36:07:5d:e3:65:36:c8:32:6e:31:78:ff:37:
7d:a5:db:66:41:1b:3c:3a:d3:73:f5:90:5b:a4:e4:90:b9:75:
53:d8:eb:16:4f:8a:43:d5:d8:79:63:f8:9e:8d:d3:90:04:c3:
e6:45:62:c3:71:eb:1b:35:dc:f8:7d:d6:9d:bf:11:19:d6:1a:
d2:f5:cd:05:6d:b4:26:41:57:7e:c9:6f:12:96:34:06:2a:2a:
a5:66:e3:94:40:e4:01:e5:2b:6e:a1:2e:5b:3f:89:a8:d4:94:
3e:c9:44:04:95:7a:b7:31:ca:c6:c0:be:e2:2b:f8:af:47:b2:
d4:b8:f9:ea:2a:63:43:f7:7c:df:c0:85:5a:c6:7d:2a:1b:05:
59:61:df:74:af:3a:14:e9:9e:4f:39:5e:b2:e2:e1:7c:78:41:
80:60:f4:1a:8b:82:8f:28:28:0d:4b:d5:bc:c4:d5:1f:39:f0:
ca:52:50:d6:5a:8d:0b:16:52:c8:78:4e:24:e7:1a:80:45:18:
9c:5a:f4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:41 2025 by rpki-client