Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D51C6F2C1A911EF8068648F762E951A.roa
File: 4D51C6F2C1A911EF8068648F762E951A.roa (raw, json)
Hash identifier: qtUs7QorA2FjCJYF1HrWMaYWDGiAynH+Bv1OYuRo0C4=
Subject key identifier: 44:7B:3E:62:6B:E9:A9:DF:96:29:D0:DD:90:1C:12:55:43:65:9B:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012117
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D51C6F2C1A911EF8068648F762E951A.roa
Signing time: Tue 24 Dec 2024 03:43:56 +0000
ROA not before: Tue 24 Dec 2024 03:43:53 +0000
ROA not after: Wed 10 Dec 2025 03:43:53 +0000
asID: 984
IP address blocks: 154.92.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74007 (0x12117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:43:53 2024 GMT
Not After : Dec 10 03:43:53 2025 GMT
Subject: CN=676a2dfc-c582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:c9:40:4b:95:d1:6d:0a:88:76:a2:a6:18:
6a:3c:7d:e7:b1:19:5c:4a:2b:25:d5:0f:19:5e:38:
12:c5:fe:61:1d:01:c5:37:27:80:09:17:75:8e:35:
b8:97:41:3e:ab:29:b8:d3:6a:79:34:51:72:86:30:
cf:d5:fd:f6:26:e4:a1:30:62:3e:dd:2e:8d:14:2b:
07:5c:eb:cb:04:89:c6:3d:70:ea:f5:06:2c:0a:ab:
ae:c8:22:b2:ff:31:94:b4:c2:97:91:a2:b1:00:63:
0b:1b:a5:7b:b1:3a:13:2c:4d:e4:53:02:b7:51:29:
58:ad:8d:f3:f2:2d:7e:96:7e:5b:67:e1:be:8a:e5:
b2:64:5e:eb:a3:01:05:0c:02:59:0f:ad:ec:fa:6b:
41:ed:3d:59:65:09:d7:21:4b:68:19:71:08:4a:0f:
37:3f:42:84:8b:9f:4e:23:15:49:64:c0:c3:db:41:
84:be:9c:d4:2e:5d:18:74:fb:91:5d:a0:ce:4c:6c:
75:e8:cd:77:3d:2b:66:49:dc:36:8b:60:42:8e:18:
52:e0:39:5d:46:0c:97:1e:c7:9b:37:08:0c:02:b5:
c0:fd:75:cf:8f:6d:40:59:3b:ea:3c:15:cc:b0:41:
db:3d:ab:ed:96:ce:3b:bb:5f:a1:1a:3d:04:5a:bf:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:3E:62:6B:E9:A9:DF:96:29:D0:DD:90:1C:12:55:43:65:9B:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D51C6F2C1A911EF8068648F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.211.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f7:9c:b4:98:82:e2:49:57:fb:b8:7c:c8:c9:3a:11:ac:53:
82:01:ed:ea:bc:bb:44:8e:1e:30:e9:2e:c7:00:1d:8e:46:19:
cf:8a:60:f3:ce:83:f5:51:31:ba:4b:01:36:9a:9e:3c:8c:f9:
5c:2c:04:40:65:b8:0a:1a:c6:27:3f:96:fe:26:a7:e9:9f:00:
50:88:02:85:61:95:87:2a:9a:e0:29:ca:cb:18:c6:ad:1c:0d:
aa:51:c6:01:fc:4f:82:11:a5:d2:22:d3:6d:d5:3e:b7:16:00:
d9:82:5b:41:59:c4:de:64:d5:e9:0f:79:cc:c9:4f:c0:30:a5:
13:a5:e3:e7:e0:56:18:73:13:03:8a:1b:ec:32:d0:99:b8:e6:
54:cf:da:32:d0:57:47:3d:09:84:01:a6:89:52:33:88:80:9d:
d7:e1:1f:8d:e8:74:72:ef:b1:81:8b:62:84:cf:d3:22:02:77:
f2:26:28:60:36:f6:06:c6:e4:f1:98:aa:06:cb:ca:91:ab:30:
94:e0:4b:83:bd:d4:9b:c0:5b:fd:c9:9c:12:7a:c3:10:f9:51:
5b:dc:0a:96:16:4b:ab:e0:4b:7d:09:7f:d5:85:22:6d:f3:aa:
71:90:74:fb:fc:8f:f0:e8:ef:96:5e:d9:82:09:0e:e6:32:d7:
ba:ed:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:02 2025 by rpki-client