Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558C9998C1A711EFB09D5784762E951A.roa
File: 558C9998C1A711EFB09D5784762E951A.roa (raw, json)
Hash identifier: E5ReVJsvZi6UNdCxeL1FbG7qxknxyEA5+DW3rrusqGo=
Subject key identifier: E4:81:C9:F5:C3:60:0F:00:EC:7F:20:C5:26:E4:34:B2:88:1E:0D:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558C9998C1A711EFB09D5784762E951A.roa
Signing time: Tue 24 Dec 2024 03:29:51 +0000
ROA not before: Tue 24 Dec 2024 03:29:47 +0000
ROA not after: Wed 10 Dec 2025 03:29:47 +0000
asID: 984
IP address blocks: 154.92.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73983 (0x120ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:29:47 2024 GMT
Not After : Dec 10 03:29:47 2025 GMT
Subject: CN=676a2aaf-b00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:7b:66:62:e7:78:c8:69:84:6d:a2:21:d6:
4f:ff:6e:df:bd:40:ed:f4:63:c4:e1:75:4a:07:89:
ad:d4:67:0e:25:4d:29:7d:43:89:97:c6:a4:ad:6d:
e9:78:da:15:94:4b:34:9d:20:99:48:3a:cf:41:99:
47:9b:e2:5b:f9:63:60:7e:3e:0c:70:df:c6:8a:98:
10:ed:31:d1:4d:ef:45:ea:86:30:52:16:6c:79:c8:
f8:ed:0a:fe:2a:ba:98:3d:c1:0a:a4:e3:c5:84:3f:
4f:58:86:1c:ba:87:c2:4b:2e:26:13:29:bb:fd:d8:
25:43:39:c2:c8:c6:a7:d9:05:40:39:3e:a2:68:f9:
45:8f:03:5e:fa:12:fd:aa:75:d3:18:c7:84:ec:0e:
69:72:b9:47:8a:24:b1:2b:db:0d:54:be:e6:b6:94:
1a:81:93:99:3c:61:a1:21:30:79:0b:60:60:e9:d8:
86:fd:6b:48:a8:1d:14:c9:c0:19:b2:4b:69:b8:26:
2d:d2:05:30:6d:0f:9f:c5:b3:4e:81:d5:f5:2f:4f:
99:b4:1b:54:96:d3:54:f1:a6:a2:4b:8c:8d:c4:ca:
4e:85:75:fe:3a:01:bb:6a:16:40:99:22:6b:00:5d:
c1:14:bb:7c:13:40:c3:de:c1:9b:8e:93:68:f0:17:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:C9:F5:C3:60:0F:00:EC:7F:20:C5:26:E4:34:B2:88:1E:0D:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558C9998C1A711EFB09D5784762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9d:af:2a:6e:fd:88:ae:05:cb:3b:07:a6:0f:74:ef:8b:5d:
48:2d:94:eb:97:60:5c:7c:72:ae:df:49:0f:de:6f:6a:85:1a:
ac:0d:21:62:33:79:79:89:35:d1:a7:f1:ee:f2:4d:b5:23:a3:
ad:18:11:df:72:19:41:c3:7c:88:36:9c:8f:a4:8c:77:c8:b8:
a6:52:38:2b:a9:e7:30:e0:92:77:ba:94:c5:4e:68:95:bd:c6:
d0:d4:7e:38:05:b1:7b:eb:bc:e3:60:19:ad:3f:fc:3e:5c:2e:
5b:f0:1d:7e:46:33:f7:72:ba:bb:db:2a:b5:10:54:03:0f:52:
fd:ff:19:93:4a:bc:63:50:bd:31:b9:35:81:fb:c8:9a:f0:89:
fb:e8:45:59:d1:35:12:a6:71:26:6d:d4:d0:e2:b1:4a:3d:4d:
73:50:57:0b:64:82:75:80:9f:a0:7e:1d:a4:59:60:55:48:9f:
53:c9:8a:53:5e:29:62:10:ff:10:63:e9:34:30:d4:30:aa:4d:
b0:0e:2d:5f:5d:60:43:37:43:5a:06:76:b7:08:67:43:f1:ea:
22:86:d1:1d:63:de:e4:08:64:f1:a5:4b:13:73:b7:a4:66:1a:
a9:84:05:75:1f:40:d2:47:ed:56:70:76:c7:94:f0:cf:ce:84:
fd:8f:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:03:51 2025 by rpki-client