Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49CB4F6CC91F11EFB92B5D81762E951A.roa
File: 49CB4F6CC91F11EFB92B5D81762E951A.roa (raw, json)
Hash identifier: fM+2jHIMQqyUqK7/OGYYyKK5UKZlDTCi4BwNvlFxyCQ=
Subject key identifier: 1C:3D:6C:81:8A:0B:0C:DF:A1:56:87:F4:62:89:12:F6:F2:DC:87:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01331D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49CB4F6CC91F11EFB92B5D81762E951A.roa
Signing time: Thu 02 Jan 2025 15:36:09 +0000
ROA not before: Thu 02 Jan 2025 15:36:05 +0000
ROA not after: Sat 13 Dec 2025 15:36:05 +0000
asID: 984
IP address blocks: 154.222.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78621 (0x1331d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:36:05 2025 GMT
Not After : Dec 13 15:36:05 2025 GMT
Subject: CN=6776b269-912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:82:64:db:36:82:59:c2:56:2e:14:39:86:
01:c8:a9:07:ff:ec:e9:80:3b:eb:e6:3c:c0:cb:01:
27:01:bf:80:9e:12:15:97:24:ab:62:d3:c1:6f:ea:
8f:be:7b:1b:5f:bf:01:fe:60:57:d7:66:9b:b1:97:
b7:25:03:db:89:66:33:69:96:45:7a:ba:63:38:8d:
2e:7e:e9:f7:ce:63:ad:02:d5:21:8a:3c:a0:ae:f3:
7f:26:17:ef:23:b2:ed:14:fd:21:db:64:8d:21:c4:
e2:56:8d:dc:69:59:ae:6e:51:2c:54:1d:b5:81:17:
9c:57:0c:f3:1f:00:2b:26:9e:a4:c3:e8:3d:17:ea:
ff:5f:66:24:a8:41:f7:6b:e5:da:0d:34:b0:be:87:
dc:fc:e8:c3:3e:8c:83:a1:c5:f0:3d:e7:32:a9:b7:
bc:ee:2e:9a:c7:9b:c3:5b:e8:3c:6f:21:db:6c:d5:
c4:3a:32:ed:53:bb:0b:1d:8c:1a:5d:a6:9a:7f:cf:
bb:f8:fd:28:b9:fd:6e:66:78:02:6e:a4:ef:44:8b:
04:6c:5c:4d:5d:f6:9e:04:b0:81:3b:c2:bf:70:9d:
fa:fa:23:e6:3d:06:5b:e5:c0:ae:60:af:ec:32:a1:
91:c0:6f:70:a3:99:cf:68:0c:a4:3f:c3:68:5e:d4:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:6C:81:8A:0B:0C:DF:A1:56:87:F4:62:89:12:F6:F2:DC:87:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49CB4F6CC91F11EFB92B5D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:91:5c:52:7b:fb:86:57:67:ce:4b:41:0c:bd:46:0b:15:fb:
d5:cc:d7:e8:50:3d:36:72:51:34:c9:e4:38:e6:7a:2e:86:98:
22:0b:d2:48:06:9a:84:55:d1:ff:f0:a9:3c:3b:db:ba:df:75:
b0:01:38:5e:1e:35:cb:7a:71:59:d1:d0:0a:09:a6:89:31:fb:
4c:32:94:b7:e4:24:a7:a4:42:0e:9c:e4:f1:35:6b:05:97:40:
4b:73:0a:c0:07:71:bc:1c:53:f3:1d:86:7e:b4:d1:08:c3:8b:
6c:7a:17:25:28:2e:d2:0a:fc:7c:91:af:19:52:c3:52:2a:df:
c2:75:0d:73:ea:b4:f8:e6:ee:5e:87:9c:d1:b0:23:57:eb:0b:
cf:f3:6e:aa:43:8b:85:ed:70:5e:ab:da:64:2d:97:73:34:f2:
ba:2b:f1:e5:fa:9d:a4:c1:05:e9:23:14:60:60:e5:22:53:5a:
68:67:de:a7:43:08:ac:3d:0f:2a:14:bb:43:9f:c3:81:3d:8d:
31:fe:87:40:dd:ae:9d:ac:9d:a8:02:25:c9:e0:0f:24:00:0d:
16:cf:87:35:bc:3c:d9:2d:6d:2e:5a:53:ef:75:d1:31:18:c3:
60:a0:b9:65:7b:6f:d9:0d:5a:ce:9d:3e:f8:70:f1:ba:81:c4:
00:00:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:47 2025 by rpki-client