Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48148938C36411EFB1559F9A762E951A.roa
File: 48148938C36411EFB1559F9A762E951A.roa (raw, json)
Hash identifier: 750X8scGvN9GgnZiHoP32PiYv7qtgzxyS7+PgLQ+kz0=
Subject key identifier: 2E:AB:E4:63:F7:5E:F7:12:D8:A5:0A:D6:35:5D:30:BC:1A:6E:B9:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012692
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48148938C36411EFB1559F9A762E951A.roa
Signing time: Thu 26 Dec 2024 08:34:54 +0000
ROA not before: Thu 26 Dec 2024 08:34:51 +0000
ROA not after: Sun 12 Dec 2027 08:34:51 +0000
asID: 17561
IP address blocks: 154.93.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75410 (0x12692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:34:51 2024 GMT
Not After : Dec 12 08:34:51 2027 GMT
Subject: CN=676d152e-558f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:e6:90:03:b5:db:9e:32:03:95:b9:9b:2e:
45:c1:d0:18:02:44:a4:01:ed:d0:53:0d:e6:30:c1:
80:29:05:c6:9c:1f:c9:30:48:33:eb:e4:ad:96:c3:
d0:a4:7b:32:30:2d:91:d8:e7:b3:e6:07:c9:03:1b:
a3:d8:68:8a:fb:72:c4:6d:ec:f2:b8:3c:96:c5:2b:
92:c9:bf:9b:ce:47:91:7a:82:e3:78:b6:91:b5:5e:
e2:6e:5c:0e:45:85:23:93:80:b2:e2:b1:53:6b:c6:
c1:03:bf:52:8f:df:6d:f1:b8:08:3b:74:1f:3e:12:
84:54:e5:c6:e8:c9:f7:67:86:40:c1:86:66:3a:b0:
61:27:93:93:56:f9:de:64:f8:18:6b:9a:d6:04:0c:
3d:2f:87:fa:3d:69:e6:3d:1d:6b:90:33:55:ec:e8:
3d:0f:5d:ca:29:e3:c9:e3:53:07:98:41:c9:4c:cb:
2f:47:f9:7b:25:c4:d2:71:a1:6c:46:0c:e3:c4:82:
56:8b:ba:f0:7b:c0:a5:61:f7:02:de:28:16:49:bd:
b1:97:c5:a0:74:c3:31:e9:9c:90:60:aa:87:6e:a9:
66:13:19:df:b6:0e:8f:8e:63:78:17:b3:d0:c5:32:
0c:26:75:1f:f4:39:26:84:e5:8f:76:b2:40:85:3e:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:E4:63:F7:5E:F7:12:D8:A5:0A:D6:35:5D:30:BC:1A:6E:B9:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48148938C36411EFB1559F9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.26.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:b1:cf:ae:5f:89:4c:32:dc:90:91:fe:26:b4:d7:ed:c1:
45:99:7d:26:28:8c:f7:44:88:fd:a6:df:83:10:27:b7:9e:97:
6d:27:4e:a8:fa:41:62:5a:9f:52:4b:4a:72:0f:c8:d5:e5:e8:
ec:66:89:d7:e1:dc:8f:64:5d:17:ad:20:51:b9:55:3b:31:5d:
60:6d:02:03:0b:cf:d2:ea:74:f8:06:7e:40:f8:96:7f:5f:45:
08:b5:d6:68:1c:92:70:c0:ee:49:0b:ef:94:7f:a3:68:4a:7a:
87:30:09:c1:02:9b:df:d2:36:16:94:12:0a:ec:54:69:f9:80:
e9:ba:fd:d3:37:14:6a:1a:e1:d6:43:19:49:95:44:c3:de:18:
5b:a7:2d:ca:03:ff:56:37:50:f2:f7:da:4a:18:73:a9:2b:7e:
a1:85:5f:19:e8:61:28:32:35:85:3c:92:1f:e5:95:7d:bf:41:
ba:60:5c:4f:27:c0:19:da:1c:0c:1e:bf:95:8b:c9:3a:cf:6f:
b6:a3:ce:4a:06:27:6b:0f:5a:34:6b:b5:fd:de:a2:a5:8f:0a:
e0:cc:17:8d:a4:e7:46:4d:48:87:3f:8f:5a:6b:96:0a:32:2a:
5e:b1:96:93:50:a3:db:60:12:8c:7e:5e:22:11:44:1b:78:bb:
07:29:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:01 2025 by rpki-client