Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA33164C26611EF95D14949762E951A.roa
File: 3EA33164C26611EF95D14949762E951A.roa (raw, json)
Hash identifier: lWh05b7JnJlZR42mUfsDATA33xUQoaoZWXXOG371LxQ=
Subject key identifier: D8:AC:5A:B6:9F:2B:B6:CE:13:FF:67:1A:69:90:9E:28:01:50:A8:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA33164C26611EF95D14949762E951A.roa
Signing time: Wed 25 Dec 2024 02:16:26 +0000
ROA not before: Wed 25 Dec 2024 02:16:23 +0000
ROA not after: Wed 10 Dec 2025 02:16:23 +0000
asID: 984
IP address blocks: 154.199.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74732 (0x123ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:16:23 2024 GMT
Not After : Dec 10 02:16:23 2025 GMT
Subject: CN=676b6afa-1fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:d9:c5:4e:b0:fa:6e:25:9e:e6:f7:e2:55:
52:96:6f:ea:7f:c5:67:c6:f9:2c:e0:6a:f0:a7:cd:
da:79:74:c7:a9:10:b4:b5:fe:9f:f1:1c:54:9c:42:
34:6f:bc:b3:5b:32:99:c6:fe:e8:0c:2f:3f:c5:4b:
af:2d:63:c8:dd:28:0c:1f:24:76:ca:cd:fb:b3:58:
63:af:ee:2f:0f:65:41:ab:2d:12:7b:5f:36:5f:03:
58:c9:39:11:57:aa:16:20:e3:32:4d:0d:e4:b1:0b:
55:f6:98:cb:44:65:c9:67:d5:5c:25:1e:37:c8:19:
85:55:bb:1c:9f:cb:3f:7c:b7:b5:37:54:f7:e3:2e:
23:63:98:7f:74:12:f3:0e:6a:1c:ee:df:ae:fa:e6:
0d:4f:12:e7:a1:38:16:a4:89:bd:24:4c:85:90:76:
83:01:ec:3b:32:16:1c:6b:3e:a7:94:16:b5:67:1d:
33:73:20:f0:d4:df:4a:c3:e0:3a:ed:ad:c4:d3:c7:
da:4f:6f:13:b0:64:de:99:d1:e1:84:23:61:09:03:
33:cb:e3:7c:d8:6d:1d:3b:8b:84:3d:02:5a:75:23:
7e:78:7e:7c:01:e4:89:9b:46:d3:2b:9f:ec:bd:b7:
ea:93:54:fb:9b:fd:a4:92:ba:f3:07:35:d4:c2:9b:
35:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:5A:B6:9F:2B:B6:CE:13:FF:67:1A:69:90:9E:28:01:50:A8:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA33164C26611EF95D14949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b5:8d:5d:be:03:88:5b:74:12:3f:7a:c6:5b:b9:9b:16:4f:
4f:8b:d5:62:bf:69:1c:e4:97:c9:9f:b0:e9:05:ac:6e:2d:ae:
99:1a:3e:fc:13:75:f4:63:c4:9b:5f:ee:4d:b7:46:cf:9e:3e:
9e:04:f8:41:d3:65:71:5a:f6:c6:ad:e7:11:4b:91:c9:fd:a1:
b5:36:bf:2b:a7:95:af:f5:97:6d:88:1b:b0:7b:64:0a:11:14:
66:16:b8:3e:26:f4:42:a9:ab:45:d9:89:36:65:c8:12:9b:fe:
73:ab:6f:39:4a:0c:89:24:c0:64:d7:e8:97:c2:f7:6a:95:93:
6a:49:f9:a2:71:b3:f1:5e:ae:cc:0b:a0:13:d7:39:c4:a4:86:
73:07:c3:e7:d3:a9:2f:f4:d5:e0:49:39:97:17:ad:e3:95:0a:
e1:ac:26:4f:4f:0b:da:40:84:cd:29:d6:0c:8b:8f:e5:73:f7:
15:3e:08:19:5e:b2:df:4a:d7:b9:b7:f1:e8:31:ee:ce:10:32:
8a:4f:1e:2f:8b:a2:91:d4:8f:5b:b9:a8:bc:a5:0c:33:b8:06:
68:2a:b3:b2:cc:3f:01:de:1b:36:0b:b1:73:ab:47:f8:d0:44:
5d:7c:f1:0d:6b:25:e8:2b:ee:33:9d:fb:4b:66:c1:e4:32:55:
9a:c4:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client