Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D525CFABE9011EF9AFD538C762E951A.roa
File: 4D525CFABE9011EF9AFD538C762E951A.roa (raw, json)
Hash identifier: /qSHlDT5Tv86ZQwiFMxfGXWxKisbL34XROK7Rkdlo8g=
Subject key identifier: 55:EA:D0:34:97:63:45:92:3E:84:D7:80:8E:A9:49:2C:C1:28:F7:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D525CFABE9011EF9AFD538C762E951A.roa
Signing time: Fri 20 Dec 2024 05:07:25 +0000
ROA not before: Fri 20 Dec 2024 05:07:22 +0000
ROA not after: Wed 10 Dec 2025 05:07:22 +0000
asID: 984
IP address blocks: 154.82.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72706 (0x11c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:07:22 2024 GMT
Not After : Dec 10 05:07:22 2025 GMT
Subject: CN=6764fb8d-83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:97:99:da:44:59:34:76:11:b9:ef:f2:f9:
e4:3c:a0:a1:c0:b9:9e:0e:db:b0:57:c8:21:5b:2d:
5c:7f:2a:e1:9f:42:52:b2:d6:45:a6:2f:a8:eb:bb:
e8:be:a8:88:db:dd:27:f7:52:fa:34:0d:47:88:7c:
8a:f0:2e:d2:46:e7:1a:76:e3:fc:53:7b:1e:b8:38:
dd:1e:7f:98:2b:93:d0:b2:fd:32:39:b9:be:b8:c4:
f6:90:07:6a:2d:55:1f:fe:99:04:5b:2c:5c:a1:63:
06:1e:9b:35:da:54:65:b3:42:e4:da:cc:5b:df:d6:
9f:b5:5c:12:fc:75:87:c9:ad:cd:3b:a1:60:90:92:
3f:13:15:7f:a6:f5:93:ab:8e:df:c7:a9:60:8a:a2:
75:0c:31:0c:20:58:9f:8e:31:52:53:d0:5e:40:62:
04:8b:c8:ad:b7:68:7e:89:5f:6c:7b:23:c1:78:1a:
eb:a8:e3:5b:28:74:bd:9c:cb:72:a4:8a:54:56:6e:
2e:f4:5a:73:5f:44:11:a2:23:16:f8:80:f9:d5:2f:
c6:83:8e:0f:2c:a9:2b:77:c9:f4:c8:49:10:06:0e:
59:35:9f:01:96:ae:c8:fb:e9:ed:6c:a8:17:99:9f:
51:6c:65:00:66:e6:56:e1:66:13:10:7d:c8:24:ae:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:D0:34:97:63:45:92:3E:84:D7:80:8E:A9:49:2C:C1:28:F7:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D525CFABE9011EF9AFD538C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.174.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d7:f9:69:6a:5e:77:b7:8b:8a:a9:0d:99:a8:e2:9a:cc:5f:
71:ec:76:1f:42:e8:e5:3d:53:65:e2:04:c2:a7:99:3e:a3:f7:
90:53:6f:6f:94:93:7d:a2:b8:a9:3c:f8:8a:c2:5f:35:b2:6e:
58:6d:f0:a8:56:d7:0b:1b:2a:76:b8:d0:4e:aa:cc:16:97:c1:
2e:9e:b8:2c:34:fe:29:21:fe:c7:90:bc:db:13:2e:cd:51:fe:
06:70:ca:5c:f2:39:9a:d5:f9:4d:cc:e7:e3:2e:b5:a0:5b:06:
43:a9:06:fa:bd:29:28:40:40:11:a3:58:ce:80:6b:f9:83:f8:
1d:ea:0d:75:85:b5:88:e2:29:da:ab:6d:6e:22:98:46:03:e9:
4c:62:09:22:df:92:57:59:12:ce:55:81:3e:9d:df:6f:05:4b:
3e:68:ca:d3:72:f1:9d:a7:de:7d:bb:34:a9:b8:41:a9:b7:c6:
18:67:12:e6:9b:6e:90:fd:56:4e:f7:17:bb:b4:4a:30:ce:09:
87:99:3d:4f:3b:fe:18:0d:bb:76:9f:64:96:83:16:ed:cd:3c:
28:5b:77:82:a9:cc:b2:4d:56:b7:57:61:ce:0d:ed:dc:5f:37:
10:96:05:4c:19:13:4c:05:71:ee:e9:8e:cc:ec:77:b6:31:6e:
50:76:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:20 2025 by rpki-client