Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFE9814C94011EF980D0651762E951A.roa
File: 4AFE9814C94011EF980D0651762E951A.roa (raw, json)
Hash identifier: ka6JORvpwdxECm53nCFAbtu1qLsMXrOC5rA09L6G9jA=
Subject key identifier: 16:49:34:FE:9B:7D:1B:EE:81:88:85:1B:F3:CF:9A:68:17:7B:F3:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013423
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFE9814C94011EF980D0651762E951A.roa
Signing time: Thu 02 Jan 2025 19:32:25 +0000
ROA not before: Thu 02 Jan 2025 19:32:21 +0000
ROA not after: Sat 13 Dec 2025 19:32:21 +0000
asID: 984
IP address blocks: 154.223.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78883 (0x13423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:32:21 2025 GMT
Not After : Dec 13 19:32:21 2025 GMT
Subject: CN=6776e9c8-d426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:04:f6:b1:02:1f:3f:a0:37:c6:45:67:5b:
54:ee:df:7c:21:b9:52:de:24:81:74:f0:09:c0:34:
21:f4:23:57:d0:c3:43:e0:e1:7c:eb:88:a0:09:cb:
b4:5f:38:f7:bf:c5:03:89:df:01:97:fa:7f:e7:3c:
82:23:80:b3:2a:78:60:f3:30:2c:d6:3f:b8:82:21:
c0:a1:e6:2e:6b:b3:3b:9d:dc:23:7b:3f:ef:aa:78:
a6:08:d9:20:db:6f:af:00:6d:bb:03:56:d9:c8:92:
55:59:88:6e:fc:40:79:01:18:57:bd:f7:26:35:b9:
76:c4:4a:3d:a2:e0:fd:7f:46:77:ab:54:4b:ee:c9:
75:36:80:6e:29:47:05:01:65:86:95:a7:f8:5b:15:
e2:94:a0:c7:97:66:18:fb:eb:37:2c:7c:19:23:62:
6c:37:47:36:31:82:a2:c5:8f:b4:83:fb:45:23:06:
74:a7:03:9b:75:bc:65:f6:63:8c:40:c7:cd:ba:3a:
32:43:20:a4:09:39:48:e1:07:e4:31:0c:73:33:c6:
55:4b:00:2d:4d:95:c9:50:a3:ff:cf:65:0b:3e:fe:
41:7b:2d:b6:52:c8:43:fd:fc:4f:e4:16:5e:e1:bb:
59:34:c0:3c:6e:71:6e:ae:c1:c3:1a:e0:57:d2:47:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:34:FE:9B:7D:1B:EE:81:88:85:1B:F3:CF:9A:68:17:7B:F3:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFE9814C94011EF980D0651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:db:0e:56:07:de:90:6d:ed:e2:ee:55:71:d5:af:3c:5a:58:
1c:ff:d7:a8:86:92:72:4b:a6:f4:a6:c5:75:1f:95:bb:3b:42:
16:f8:fd:03:5d:d0:43:05:30:62:3f:f1:af:81:47:12:68:cd:
63:4d:fa:75:28:bf:7e:8d:8e:08:05:43:01:8f:0d:4b:2e:fc:
ca:46:b8:c5:9f:0a:11:9c:1b:fb:dd:8a:32:5b:54:7f:3f:4b:
82:02:4d:fe:68:63:47:95:36:9f:18:9f:40:12:d5:f4:97:a8:
d6:b0:35:5c:71:ce:02:9b:42:a3:a2:41:f9:74:28:61:a6:ce:
9d:ac:32:51:dc:a6:2d:72:2b:09:fb:30:f4:8b:41:4a:d8:87:
1a:1f:99:54:0c:e8:fc:08:ad:92:72:1d:dc:e3:05:0e:3e:d7:
49:8f:fa:4a:d7:cb:bc:37:21:3a:d8:3c:11:46:b8:c4:3e:7d:
2f:a8:29:61:08:3a:b6:38:b5:fa:cc:99:03:24:20:45:82:6b:
0f:c7:44:16:17:c1:2f:c8:c4:2f:fd:27:3e:18:25:57:4a:7d:
b6:54:bc:63:4d:2f:37:2f:79:48:ee:05:56:cb:f5:f4:ed:44:
95:03:25:62:01:09:96:79:1f:c9:4e:7e:0d:e2:c7:0e:35:c9:
fe:fb:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client