Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D52AA0C1B111EF83D74343762E951A.roa
File: 46D52AA0C1B111EF83D74343762E951A.roa (raw, json)
Hash identifier: JAeIUyhluptKd2Egeg+lShXtatv+xMxe9VDZcWLZNeo=
Subject key identifier: 1C:9C:A5:37:96:C7:85:0D:05:AA:DD:7E:16:E1:31:97:CC:33:58:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012177
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D52AA0C1B111EF83D74343762E951A.roa
Signing time: Tue 24 Dec 2024 04:41:01 +0000
ROA not before: Tue 24 Dec 2024 04:40:58 +0000
ROA not after: Wed 10 Dec 2025 04:40:58 +0000
asID: 984
IP address blocks: 154.193.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74103 (0x12177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:40:58 2024 GMT
Not After : Dec 10 04:40:58 2025 GMT
Subject: CN=676a3b5d-2b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:4b:c3:21:9a:0c:d5:f3:ff:b1:3a:a7:ad:
85:2b:7a:f5:4b:8a:80:0f:9f:4c:66:5d:6b:24:c1:
f0:6c:cd:20:ed:ed:0a:8e:18:d3:9b:30:2e:b4:06:
fc:8e:7c:44:8c:42:ed:68:90:40:e0:02:65:12:f7:
b4:72:0f:58:89:c1:db:40:46:cb:c1:7c:3e:b9:66:
29:55:17:45:36:77:d9:4b:11:f3:26:90:ed:e0:8e:
65:4d:dd:b2:79:99:07:ee:39:0d:64:02:95:7e:d2:
5c:43:08:f2:67:7c:fb:a3:65:26:46:b0:3f:34:e8:
ba:c8:d3:9b:5b:11:bc:af:47:00:54:47:7f:16:74:
95:ad:c8:70:a6:a5:51:9d:3e:9b:70:85:29:4f:b6:
b3:da:bf:48:65:1d:ed:25:d3:c9:bc:f8:7f:3c:71:
78:89:0d:10:72:13:22:1c:ad:a0:a8:dc:0f:4a:5e:
f9:e8:82:68:0d:db:7c:35:d9:9a:4a:91:ee:4f:72:
98:af:29:cb:90:16:7c:de:7f:a9:f9:25:6c:df:b4:
b3:c7:7e:32:97:90:b8:ca:43:fa:6f:30:27:0a:64:
7c:85:df:14:b8:58:b8:cd:e0:e0:23:1b:1a:00:29:
ed:6a:8f:e9:28:5b:98:67:fd:93:ce:01:10:52:d8:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:A5:37:96:C7:85:0D:05:AA:DD:7E:16:E1:31:97:CC:33:58:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D52AA0C1B111EF83D74343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.101.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c2:6a:b2:ed:30:f4:21:f7:c9:e1:3e:5d:58:ff:7e:ba:ca:
7b:d0:c7:26:bf:d3:a5:3a:23:e9:69:bb:77:ae:29:88:c0:b1:
df:df:5f:64:58:53:57:cc:fb:8b:b4:fb:01:f4:17:82:89:d1:
08:25:7a:a0:57:92:49:a9:a6:54:75:65:ab:90:59:82:23:66:
55:9d:f2:ae:58:4a:9b:c1:0f:cd:ec:e0:77:61:b4:df:14:56:
82:e7:a8:9b:b3:8a:9b:6d:56:2c:a5:ee:fc:53:ff:21:f5:93:
35:8a:69:08:ff:7e:02:92:e6:a2:82:c7:44:66:06:00:ba:fc:
d0:19:81:17:77:8e:e9:e5:bb:2b:82:70:c2:b8:86:40:15:c2:
78:d5:73:b9:90:ca:56:f7:2d:bf:59:91:47:c5:ad:92:c8:51:
b1:c3:42:c3:4a:ac:00:05:3d:6d:6a:e6:de:8e:b7:1a:11:08:
79:ed:92:a7:ba:cf:5b:6c:20:77:da:e3:75:c2:ee:bf:b1:ff:
e5:1d:a1:ab:6d:3a:4f:19:d7:7c:25:d4:02:78:2d:28:1a:1e:
7b:03:65:e3:55:1e:37:99:23:4f:b8:4d:5c:58:cd:56:65:26:
7c:99:04:71:91:e3:f9:06:7f:6d:0b:a8:af:c1:67:45:c6:c7:
b3:e4:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client