Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF856C1AB11EF9212699A762E951A.roa
File: 428DF856C1AB11EF9212699A762E951A.roa (raw, json)
Hash identifier: ibW8nqdkjYbbblP4PXH3mIkJ8qeaTL5aqYaRZMFNHqQ=
Subject key identifier: 4E:75:EF:13:0D:3B:85:6D:4C:68:D4:27:F8:85:17:AE:3F:78:FB:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01212F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF856C1AB11EF9212699A762E951A.roa
Signing time: Tue 24 Dec 2024 03:57:57 +0000
ROA not before: Tue 24 Dec 2024 03:57:54 +0000
ROA not after: Wed 10 Dec 2025 03:57:54 +0000
asID: 984
IP address blocks: 154.92.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74031 (0x1212f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:57:54 2024 GMT
Not After : Dec 10 03:57:54 2025 GMT
Subject: CN=676a3145-141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:f5:9b:91:98:2c:bb:2f:97:a5:d0:44:d0:
88:86:27:a9:4b:3b:9d:77:f4:97:ba:45:55:d5:12:
af:de:05:ab:f2:36:b5:f1:50:b6:5b:0e:09:f8:a6:
6c:e5:57:e2:77:91:67:55:f4:3c:83:38:60:27:41:
54:4b:ac:3e:2f:f3:23:83:aa:36:4f:80:7f:60:9d:
0d:7a:e2:55:92:73:f6:60:eb:06:62:cc:cb:bf:9a:
e7:f6:c0:f2:ed:f3:bd:90:56:1f:4e:57:41:17:e5:
82:20:47:bc:26:34:02:4d:62:c6:d0:71:a8:97:97:
0c:db:0a:69:72:86:6b:a8:6c:77:dc:b2:e7:52:96:
62:e1:76:38:78:a7:1f:c1:e0:28:36:6b:de:e6:22:
a9:0f:c4:b7:63:da:45:e8:f4:7c:72:b5:62:b5:d5:
e9:18:72:76:f0:93:44:70:e7:8b:b5:8e:e4:d7:db:
b7:f5:be:c4:02:b6:30:5a:16:34:2e:c1:06:53:7b:
b6:06:cd:ea:73:79:dd:8e:f3:fa:ab:4b:0d:40:71:
b8:6b:63:72:f4:dd:76:6e:fe:42:fc:68:bc:32:4f:
7b:39:c9:d1:25:d1:67:75:1d:58:da:59:00:5d:73:
b5:10:d9:7a:d7:f8:61:08:35:b3:65:7a:00:51:31:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:EF:13:0D:3B:85:6D:4C:68:D4:27:F8:85:17:AE:3F:78:FB:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF856C1AB11EF9212699A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:48:ca:f0:50:08:ed:f7:8e:19:39:a6:ae:9a:4e:eb:cb:0d:
dd:9d:c5:1e:b6:ec:e4:84:e1:6f:d4:e4:19:24:8e:f6:06:6e:
0e:e4:d3:d1:7f:b3:6b:5b:d2:f5:7b:70:ec:98:e7:93:28:e1:
e8:ec:2f:6d:29:04:f1:11:31:a1:48:62:52:ad:e7:33:b6:ec:
99:52:fd:09:10:cb:3f:c3:cb:27:bc:a4:1c:25:a1:55:e1:bb:
92:6f:58:38:35:f8:43:da:b8:7a:ab:b0:ae:8e:a6:f6:2a:12:
29:6e:c5:b3:71:e9:2b:3b:54:e7:40:43:b1:5f:fa:be:d1:5c:
43:5a:8a:a5:ba:87:b1:38:af:d3:50:66:3a:2c:21:91:61:28:
28:d1:c8:0f:0a:8b:aa:ce:a4:ac:ad:b9:26:8f:27:a5:e3:9f:
d7:ed:f7:56:20:0b:b0:a5:52:5a:59:dd:9e:7f:25:48:19:c3:
9d:ad:18:f1:cc:3b:8e:69:ac:2d:bd:1c:d5:c2:0e:75:51:d7:
3e:48:ad:57:fa:27:87:90:5e:be:7b:bf:0b:f0:ab:b6:90:1f:
f1:fa:df:85:78:f8:17:b8:83:ef:51:ab:b2:b4:51:3b:d8:7c:
94:76:0b:b4:78:bf:1a:33:54:62:5c:39:09:2e:9f:56:07:2a:
69:ea:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:22:05 2025 by rpki-client