Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/423FB4E8C3D111EF8B19F747762E951A.roa
File: 423FB4E8C3D111EF8B19F747762E951A.roa (raw, json)
Hash identifier: cfM3HMgtFqWeg5Jl1UjTIg5pjvLyI9KwChaJT99sf50=
Subject key identifier: 98:58:D5:8A:27:8B:DD:9D:EA:6C:B7:19:D0:7D:14:F9:D3:8A:C4:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012842
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/423FB4E8C3D111EF8B19F747762E951A.roa
Signing time: Thu 26 Dec 2024 21:35:00 +0000
ROA not before: Thu 26 Dec 2024 21:34:56 +0000
ROA not after: Sun 12 Dec 2027 21:34:56 +0000
asID: 17561
IP address blocks: 154.83.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75842 (0x12842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:34:56 2024 GMT
Not After : Dec 12 21:34:56 2027 GMT
Subject: CN=676dcc04-b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:46:59:d0:22:c7:4b:4f:93:04:26:b5:00:
4c:19:17:9e:37:7d:76:dd:20:ba:76:02:b4:59:01:
68:61:3b:d7:f3:e4:a5:28:87:60:81:fa:cf:b2:03:
c1:40:38:dd:dd:02:b2:85:b9:bc:b8:9c:5a:10:f7:
05:aa:6c:86:0c:99:08:86:0c:d2:b7:c4:91:f7:cc:
93:8c:96:b5:11:3f:63:c6:bf:33:ef:57:bb:bd:36:
b1:85:75:2d:e2:27:0b:00:ad:42:41:0c:19:75:13:
33:92:35:94:53:c0:4a:8c:ee:37:82:95:f7:60:3b:
d2:be:71:3a:f8:10:1b:3f:7a:e0:fa:4a:a4:91:c1:
98:76:68:0e:87:93:4d:7f:f1:6b:7c:be:62:20:f3:
f7:ef:8b:74:f8:91:db:d8:84:44:d6:98:91:bc:86:
21:0e:db:e1:32:c5:6f:55:8d:8d:38:15:ff:69:ea:
c0:49:4c:84:8a:fd:eb:e7:5e:bb:e1:e5:33:fa:4e:
d4:17:fd:b9:70:5d:29:7c:d7:25:e6:6d:92:85:90:
78:04:9c:c8:8e:f5:dc:8e:8d:2a:ec:1e:79:72:10:
79:b7:6f:c8:96:55:84:ff:c3:8b:00:13:f4:39:90:
84:45:ec:6c:5d:4b:4a:b0:7b:26:a8:ba:1b:68:61:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:D5:8A:27:8B:DD:9D:EA:6C:B7:19:D0:7D:14:F9:D3:8A:C4:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/423FB4E8C3D111EF8B19F747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e3:8d:fe:47:5d:6b:25:72:fd:7e:3f:ee:33:32:ba:80:1d:
85:b1:cb:80:e3:e2:17:27:77:27:f0:5f:72:15:28:36:d9:08:
46:e4:ce:a5:ce:d1:61:04:19:55:8a:92:8e:27:3f:cd:cc:08:
d4:25:99:db:56:21:bf:2b:98:e0:c8:b7:bf:31:32:f9:bb:6e:
53:71:ae:ec:9d:96:2f:1a:80:27:4e:d1:de:2b:ab:dc:66:a8:
0f:35:41:44:d1:60:4d:6b:7f:d6:a5:6a:17:a2:be:88:98:23:
48:93:b1:6c:cf:58:33:f1:7c:0d:fa:1b:79:bd:e9:1d:12:06:
2d:f1:e6:9e:53:28:66:a2:cb:8a:b0:2f:44:fa:ea:92:b8:d8:
7f:88:3a:80:d1:d6:e7:44:d5:ed:18:80:a8:e5:f1:35:e4:1d:
f6:9e:00:77:13:14:c0:0d:2f:b8:ad:15:9f:fc:a7:4a:03:99:
6f:0c:79:f8:ef:fb:39:2c:23:59:72:42:3d:8a:0f:73:cc:07:
40:01:44:b1:4e:78:8e:22:b3:d5:85:ec:a3:65:8c:d7:b1:af:
c7:3c:aa:84:50:b6:16:72:c5:ad:b8:16:21:cd:96:5b:70:77:
6a:69:d1:a1:d3:9c:2f:f9:85:dc:bf:0a:51:37:1e:73:5f:5f:
9d:7c:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:55 2025 by rpki-client