Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536BA9C8C63A11EF92489C91762E951A.roa
File: 536BA9C8C63A11EF92489C91762E951A.roa (raw, json)
Hash identifier: l0peOepP1LIy+y+WE8Cn7i9bzU5s9mlqA7OVewtbJZs=
Subject key identifier: 7B:A6:FD:0D:C2:61:AA:70:4A:AC:BF:A5:90:E7:77:FA:96:28:7E:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01303F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536BA9C8C63A11EF92489C91762E951A.roa
Signing time: Sun 29 Dec 2024 23:12:08 +0000
ROA not before: Sun 29 Dec 2024 23:12:04 +0000
ROA not after: Fri 12 Dec 2025 23:12:04 +0000
asID: 984
IP address blocks: 154.218.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77887 (0x1303f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:12:04 2024 GMT
Not After : Dec 12 23:12:04 2025 GMT
Subject: CN=6771d748-1ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:37:80:6c:38:84:cd:c2:a7:3a:bd:be:db:
25:8e:51:80:7e:82:ed:df:25:54:a6:83:fd:3c:23:
62:a8:af:ea:45:b7:ea:be:1c:75:23:8e:1e:fc:3b:
00:d8:34:22:28:b6:38:4d:44:8c:3c:e1:4d:4b:f2:
78:a8:6e:37:61:eb:3e:f5:18:69:20:02:03:e1:12:
e3:d5:6f:6a:c8:c9:45:e6:da:e0:0a:0e:68:30:39:
c0:d9:b9:5c:98:d9:af:d7:8a:88:0d:79:57:9a:57:
bd:06:0d:f7:29:64:99:e1:70:17:9c:d7:48:b7:b4:
ed:67:5a:98:db:3a:62:31:72:2e:e8:8c:b6:c6:93:
6c:2b:81:4b:fc:67:39:08:10:62:04:88:81:66:97:
72:3b:62:54:16:fb:0e:0c:2f:af:99:9c:e0:14:a2:
f3:0a:00:4a:10:b2:c6:75:bd:2e:24:9a:26:a4:31:
75:a3:11:54:ae:ff:2b:b9:1c:2b:5e:93:3a:6e:55:
54:0a:93:38:6d:13:6e:8f:84:fa:89:88:df:3a:c2:
86:f4:18:9a:27:bf:ff:6d:2b:16:c8:60:8b:8e:6c:
bc:8a:d9:d7:af:82:7c:ab:56:fa:60:71:b3:38:d1:
88:59:c8:16:47:5d:44:4b:4c:1b:19:d0:78:75:5b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:FD:0D:C2:61:AA:70:4A:AC:BF:A5:90:E7:77:FA:96:28:7E:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/536BA9C8C63A11EF92489C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.12.0/24
Signature Algorithm: sha256WithRSAEncryption
91:67:cf:35:8f:6f:29:38:e7:97:ce:20:19:d5:aa:93:1e:b7:
06:4a:1a:51:4d:db:d8:66:d7:13:bd:ac:00:c2:c9:27:bf:7c:
b6:9e:00:3e:2a:05:86:03:e0:0d:7b:8a:06:72:df:e6:4a:80:
18:cf:01:3e:5d:0d:d6:f8:46:be:c5:29:24:04:c7:87:1d:ae:
02:72:a7:81:f2:ca:26:5c:37:2d:47:95:94:9c:60:4e:46:d0:
c8:32:74:07:bf:f6:02:64:33:ea:05:34:db:30:1d:40:a3:97:
b7:32:21:3d:93:97:17:04:c0:4e:4a:da:92:4b:69:56:53:c8:
ad:93:fb:bc:52:ae:79:e4:fe:6c:ef:2c:59:bd:34:0a:68:00:
82:63:58:d5:5d:7e:1b:57:5d:8f:be:b9:e1:0a:99:ac:eb:a4:
6d:92:ec:7d:c2:17:ee:7d:53:0f:99:d1:cc:79:e5:39:a1:40:
3e:2f:08:e1:48:30:4b:bd:53:06:84:aa:30:c8:d6:42:3b:e7:
48:b0:62:ca:d9:9a:4f:78:8e:3e:49:a2:0d:5f:fe:db:32:f5:
7c:00:a1:d1:48:47:f9:c5:02:b0:c4:0e:02:84:7b:bc:8d:65:
80:12:e7:1c:ef:a2:55:8e:da:66:4f:bf:6d:07:dd:cd:d1:8b:
03:e3:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:53 2025 by rpki-client