Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466008E8CDC211EF93A55A87762E951A.roa
File: 466008E8CDC211EF93A55A87762E951A.roa (raw, json)
Hash identifier: xR/YaL1fgCcylilOjcpi51mOlKxIpOUEj9G5bWeP+hs=
Subject key identifier: 5E:31:D6:43:D0:AF:D2:32:8A:A2:98:DC:95:BC:55:94:3C:B5:5E:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01371C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466008E8CDC211EF93A55A87762E951A.roa
Signing time: Wed 08 Jan 2025 13:12:56 +0000
ROA not before: Wed 08 Jan 2025 13:12:52 +0000
ROA not after: Tue 16 Dec 2025 13:12:52 +0000
asID: 984
IP address blocks: 154.200.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79644 (0x1371c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:12:52 2025 GMT
Not After : Dec 16 13:12:52 2025 GMT
Subject: CN=677e79d8-fb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:4a:75:a1:64:d3:64:bc:18:49:4a:25:64:
c1:0f:ab:8e:d3:df:6a:87:df:10:f0:c9:35:de:2d:
99:b6:10:64:82:15:1d:94:b3:8e:c8:3a:6e:05:02:
5c:28:37:bd:97:d2:63:e6:48:c8:54:60:26:40:80:
e0:a6:2f:fb:3a:67:a7:20:c7:96:dd:27:b0:42:6b:
8a:a3:ec:d3:d5:2d:db:89:c3:e2:e8:97:06:3c:fd:
bb:c3:bf:4c:8e:41:99:2d:ad:c8:2a:24:a4:71:db:
65:2d:c1:7b:89:be:b8:b6:0a:39:9d:57:04:b7:68:
00:6c:d2:41:db:75:44:c3:0e:a2:fb:69:69:30:99:
f4:18:51:a0:3b:22:e1:73:51:c3:60:c0:2a:b8:8a:
61:7d:5d:8e:94:7f:fb:fe:2b:c8:88:f1:f8:f9:81:
75:06:08:83:5d:65:67:3e:5e:e1:b6:43:49:10:9a:
8d:40:51:58:b7:25:30:9b:89:9a:a4:8e:f2:41:44:
25:6a:f9:03:61:0a:3c:74:c9:07:7a:b1:23:0b:d9:
46:e7:85:53:69:f8:0c:e4:e1:e7:68:79:72:11:c9:
7e:fc:f0:9b:c2:3d:52:95:42:9f:3b:3e:5f:59:28:
68:98:50:0f:93:44:95:5e:83:ff:b9:1b:30:6f:93:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:D6:43:D0:AF:D2:32:8A:A2:98:DC:95:BC:55:94:3C:B5:5E:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/466008E8CDC211EF93A55A87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:82:af:15:94:61:57:83:18:e6:fe:26:42:cf:4f:83:8a:ff:
53:fe:e0:70:22:dc:8f:01:cc:98:00:da:7b:b4:ca:a1:12:0d:
0e:4c:0a:bf:39:09:ba:de:2e:f8:a3:07:fa:50:dc:ec:f6:04:
96:cd:84:0d:0d:0e:f9:35:99:f6:e1:9d:81:dc:a9:9b:33:7d:
57:a6:94:d8:6d:bc:23:79:80:66:d0:34:d7:92:8b:b8:65:8a:
00:aa:f7:76:61:b5:05:6d:01:ce:6c:da:63:8a:51:70:70:fa:
c5:c1:e8:1b:18:2d:30:d6:05:ff:83:26:54:75:ac:00:d9:0a:
e0:16:c5:92:4d:2a:b7:42:6e:40:7c:33:9d:35:1a:e0:67:88:
b0:76:14:61:61:64:51:66:55:76:d8:a7:d7:e9:4f:26:75:5c:
05:25:73:83:b8:39:e6:16:49:db:df:81:0f:07:ee:25:87:69:
09:d6:f3:37:81:97:48:66:81:7c:02:04:91:98:53:82:0a:bd:
18:79:f7:79:ec:55:53:b2:13:f9:29:44:81:85:3a:c3:21:fb:
70:8f:62:98:dc:1f:32:54:76:10:ed:02:24:4d:bf:ad:39:7c:
4a:86:11:27:9c:fe:0f:48:d2:41:a9:5a:b6:70:4a:0a:da:19:
3a:31:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:59:06 2025 by rpki-client