Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C86EC48C1B311EF99B25450762E951A.roa
File: 4C86EC48C1B311EF99B25450762E951A.roa (raw, json)
Hash identifier: KJfBO9Cn0AWupAeqOhx7pElmenkhnkJbbMJjsCnZukY=
Subject key identifier: B0:A8:89:D1:F4:04:D2:5D:85:DD:99:CD:9A:86:4E:57:C9:C6:40:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01218F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C86EC48C1B311EF99B25450762E951A.roa
Signing time: Tue 24 Dec 2024 04:55:30 +0000
ROA not before: Tue 24 Dec 2024 04:55:26 +0000
ROA not after: Wed 10 Dec 2025 04:55:26 +0000
asID: 984
IP address blocks: 154.193.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74127 (0x1218f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:55:26 2024 GMT
Not After : Dec 10 04:55:26 2025 GMT
Subject: CN=676a3ec2-4f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:c8:2e:56:27:43:1d:5d:f4:f9:08:7e:73:
f0:53:b3:da:4a:a0:d6:74:05:90:f9:39:d9:3d:c8:
13:f2:98:31:7a:b5:ad:28:d8:31:85:8f:9e:c3:a8:
1f:6a:fd:9e:cf:17:f5:12:8a:b5:fa:60:4b:e0:7f:
e5:04:05:cb:a7:42:85:ff:e1:a7:1c:b1:30:fd:61:
aa:9d:15:fd:43:3c:b4:dd:42:e5:73:d5:cb:69:83:
f6:e7:a9:e1:e3:e8:8a:d8:d4:f6:8f:8e:65:f2:0f:
5f:7a:e9:c4:69:4d:f6:0e:89:97:77:96:6d:a5:09:
51:59:da:52:77:e0:f7:aa:46:63:07:57:10:8e:8b:
4e:e1:6e:e2:6d:ad:13:0b:b3:53:b7:62:84:7f:0c:
67:54:84:b7:4f:c3:a3:71:85:17:e5:31:d1:ed:4f:
e0:af:61:c4:7c:39:bb:db:7f:13:92:26:1a:d6:3e:
5a:f5:9f:f0:48:92:5a:b6:29:18:82:75:d1:64:b2:
e4:0b:d2:fa:b7:fe:49:df:e5:80:70:66:77:b4:5d:
3a:1f:9e:69:2c:17:0d:ee:74:19:c6:75:9b:f4:3d:
d8:03:48:9e:8b:6d:83:5f:4a:dd:b5:25:02:ad:50:
ba:30:1e:ad:2e:fa:57:e3:e5:9f:1f:62:0d:99:33:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:89:D1:F4:04:D2:5D:85:DD:99:CD:9A:86:4E:57:C9:C6:40:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C86EC48C1B311EF99B25450762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a7:71:82:d8:69:0b:7c:17:b5:1f:13:e7:0d:3f:24:db:cc:
47:28:e6:8e:2d:18:25:6f:36:21:e2:e1:a8:57:00:e5:f0:6a:
97:41:5d:84:a5:f1:b4:7a:2b:0e:71:1d:9b:bc:02:89:2f:b7:
20:4a:26:89:15:93:91:20:6b:9a:aa:5b:2b:91:05:a9:fc:64:
11:46:85:8f:88:b2:39:84:f1:ab:83:50:f4:d3:49:b8:cd:7d:
59:84:a2:28:21:9a:8a:9b:71:68:dc:e4:01:e6:32:d5:6c:2a:
59:30:cb:c0:68:ad:10:6f:d0:42:12:49:77:f0:ca:72:81:7e:
25:8d:ba:ec:8d:a5:79:8c:27:6c:8d:fc:45:8e:43:20:f9:5d:
ba:80:14:64:53:ad:47:8c:59:7f:93:a1:aa:95:13:ad:27:4b:
fc:68:c6:21:d0:9d:bb:16:c2:b1:1a:45:61:6a:5a:5d:2c:fa:
e2:5c:17:1a:a1:37:7c:97:7b:fa:c6:62:bb:2f:45:c6:89:0b:
08:d1:a7:8a:53:cf:35:e6:a3:d4:5b:75:2f:e9:22:d1:1f:97:
86:2c:04:a9:07:3d:9a:1a:e8:72:22:03:09:07:d7:92:e0:24:
40:05:9e:99:e7:fb:12:f2:60:3f:2a:e6:9f:47:5c:99:2e:01:
c1:a0:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:21 2025 by rpki-client