Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3942151CC35D11EFBC94E26C762E951A.roa
File: 3942151CC35D11EFBC94E26C762E951A.roa (raw, json)
Hash identifier: Aq8PlXVPT6mJVyBEKIWV8ieQFPEFmiGh6osnFpoEJzw=
Subject key identifier: D7:AC:E9:9D:49:80:CB:BD:94:11:6B:A8:89:78:53:09:D0:B7:C7:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012603
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3942151CC35D11EFBC94E26C762E951A.roa
Signing time: Thu 26 Dec 2024 07:44:23 +0000
ROA not before: Thu 26 Dec 2024 07:44:20 +0000
ROA not after: Fri 12 Dec 2025 07:44:20 +0000
asID: 984
IP address blocks: 154.88.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75267 (0x12603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:44:20 2024 GMT
Not After : Dec 12 07:44:20 2025 GMT
Subject: CN=676d0957-5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:45:76:40:c7:b1:3f:98:c1:68:10:04:b3:
fd:45:e1:cd:07:13:cc:ac:79:cc:d9:42:a6:79:f5:
e6:d3:ad:cd:04:fa:04:92:0a:4e:71:0f:5a:ae:db:
85:92:94:f8:b8:e1:25:69:31:1a:bf:4e:82:e9:2a:
9e:5a:5c:96:1c:e5:02:2d:f0:d2:d8:1c:39:25:ec:
94:7a:1e:b9:43:1b:7b:9e:7a:04:37:c3:81:35:4b:
fd:70:d8:c1:95:7e:1b:ff:65:46:b2:75:fa:06:b9:
76:09:98:2d:44:e7:e0:98:05:a8:98:7e:6f:15:9f:
9a:b8:c4:91:c1:e6:dd:31:8a:0f:36:ae:e8:4d:15:
f9:99:1a:0f:ee:77:79:31:74:46:00:6e:45:c0:b0:
e9:14:28:49:ab:36:c6:fa:91:a8:8e:bf:29:5f:27:
62:d3:f5:a6:16:13:c1:00:56:5c:61:55:b1:92:a4:
73:7f:3d:0a:11:3c:79:53:e1:48:20:00:07:ad:fd:
75:f6:4c:59:76:0e:ba:cb:92:2f:aa:7a:34:8d:d2:
21:ae:56:22:d3:69:0d:a1:8f:c9:20:91:72:d0:5d:
4d:c1:f2:58:27:6e:4f:d5:b7:3f:55:51:83:74:ba:
20:e5:63:65:f5:91:5f:ab:c7:36:9b:54:ba:78:b7:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:E9:9D:49:80:CB:BD:94:11:6B:A8:89:78:53:09:D0:B7:C7:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3942151CC35D11EFBC94E26C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.56.0/24
Signature Algorithm: sha256WithRSAEncryption
16:10:8c:35:06:20:a7:d8:ff:35:a5:cb:b1:a8:c2:cd:2d:97:
4f:dc:c8:06:a6:7b:f2:f0:cc:fd:9c:fd:b9:58:c0:c3:98:5f:
6c:48:62:bb:5f:62:45:f5:26:d2:6c:dd:3e:07:cd:14:16:eb:
e8:a3:d0:66:dc:ef:0e:bc:82:d9:17:10:7f:77:a6:2a:3f:79:
9e:b7:30:d7:cf:bb:76:0e:be:6d:64:50:70:70:74:bc:ce:86:
0f:52:cc:b1:26:55:8f:aa:e4:1e:c9:a2:07:bc:d3:d4:54:e6:
bf:98:74:1e:df:34:96:db:b0:ce:e0:5b:f1:72:2f:13:57:f7:
f3:7c:58:25:78:73:53:d9:c1:d8:e5:6f:d8:5f:fb:01:37:90:
82:11:5d:bb:0e:16:6a:39:2d:6f:8e:b2:7b:59:56:58:5f:8e:
81:86:37:42:e3:dc:ed:e1:12:fe:74:47:c1:3f:a4:07:0d:e2:
de:21:bd:db:42:2b:33:28:3e:1a:17:14:3d:d9:3a:16:60:a0:
c5:21:a7:57:a6:02:fe:7c:95:33:46:30:e5:72:48:c2:f7:be:
d1:79:44:b7:2e:9d:2d:88:86:f7:20:f9:ba:9c:b7:d7:76:76:
91:72:74:a6:c3:2a:95:fc:98:13:9c:c1:2d:5f:a0:ca:c7:52:
9d:d1:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client