Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D68BB76C25F11EF94C3F293762E951A.roa
File: 4D68BB76C25F11EF94C3F293762E951A.roa (raw, json)
Hash identifier: QZUC7oo2FQxRDreQCwIUjPKv/bFbwJUwTIHIJ8P0NA4=
Subject key identifier: 63:DB:E2:71:62:7D:67:32:AF:CC:6F:37:D5:DD:56:77:9C:49:63:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01239E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D68BB76C25F11EF94C3F293762E951A.roa
Signing time: Wed 25 Dec 2024 01:26:45 +0000
ROA not before: Wed 25 Dec 2024 01:26:41 +0000
ROA not after: Wed 10 Dec 2025 01:26:41 +0000
asID: 984
IP address blocks: 154.199.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74654 (0x1239e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:26:41 2024 GMT
Not After : Dec 10 01:26:41 2025 GMT
Subject: CN=676b5f55-633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:4b:95:9e:81:f9:77:03:66:57:a1:31:1d:
d2:cf:92:05:75:77:9d:6b:81:9c:cd:99:87:fe:f9:
c9:87:65:d6:a3:ac:5c:c5:5a:8d:76:7f:50:2d:9a:
9c:44:04:c2:bb:65:93:de:e6:6e:55:54:2b:9a:22:
b0:fb:bb:eb:52:b6:90:e0:52:f8:ab:bc:ae:90:50:
ec:2a:f4:80:a9:0b:37:b4:c6:59:1f:2a:b9:00:fb:
eb:96:b9:0d:d5:ed:0e:0d:68:3b:90:4b:8d:be:8b:
e7:d0:87:c8:29:14:3e:fc:ea:21:8a:e2:1a:a0:e0:
10:28:6d:9e:79:cf:84:2a:58:03:f8:f2:9d:92:06:
d6:ba:56:0b:8a:a6:db:6c:5e:fb:10:21:b0:4d:ae:
a7:50:32:c2:d9:b7:c8:b0:eb:95:5e:af:4a:72:ef:
31:03:1f:4d:43:f6:8e:0c:1a:da:e3:37:2a:1a:f1:
83:24:cd:96:f0:05:ed:a7:b4:74:7f:f9:bc:1e:80:
fb:57:bf:d3:f7:fb:3c:7d:67:8c:0a:05:6a:66:11:
08:e8:f4:09:00:6c:8d:f0:b9:80:ac:71:e9:5f:43:
b3:3a:ff:b0:2d:24:11:3f:56:50:0f:9a:f0:58:32:
40:b0:30:60:8e:cc:15:18:02:e1:6f:0c:8c:15:c7:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:E2:71:62:7D:67:32:AF:CC:6F:37:D5:DD:56:77:9C:49:63:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D68BB76C25F11EF94C3F293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.92.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2a:5c:9f:c4:72:ef:da:3c:be:9b:36:38:38:50:f2:21:dc:
36:59:cf:c4:71:28:b2:20:2f:f4:99:d9:58:96:28:45:15:00:
f0:29:ec:fe:37:b2:c8:aa:02:97:60:be:25:92:70:ef:89:6d:
93:b3:71:fa:94:1b:56:1e:e3:df:a8:a8:1d:e9:dc:96:9a:0f:
70:83:e8:ba:bc:7a:40:e6:0d:5c:f7:84:df:c9:7e:09:bd:51:
88:07:76:25:87:fb:68:ea:61:55:20:bc:a9:13:8e:3e:ec:7b:
18:9e:1b:74:1d:c8:9f:d3:0c:1f:7e:90:cb:c7:73:ca:f9:2d:
53:09:fe:fc:12:79:ea:d2:87:5e:c7:c8:3a:93:a0:2a:3b:26:
20:cd:f3:ac:86:96:ff:f2:b7:fc:fd:10:a1:94:bd:36:f1:09:
ef:d4:f0:19:4b:cd:e1:bb:2a:3c:42:e1:b6:95:a7:a9:01:38:
ea:10:6b:72:70:94:3a:c6:bc:00:8c:bf:4d:88:9e:88:0b:7a:
f3:3d:ac:2b:77:34:99:7f:27:9c:bc:97:ce:2d:71:da:a1:a1:
a8:d7:3c:9a:e6:92:46:5a:50:93:2c:c7:33:13:92:ee:8e:62:
ce:c3:c0:ef:f2:fe:19:11:9d:34:3a:cd:bd:b1:5c:d5:87:2e:
8f:97:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:32 2025 by rpki-client