Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56391E10C1A311EF8C36E267762E951A.roa
File: 56391E10C1A311EF8C36E267762E951A.roa (raw, json)
Hash identifier: uS5gIwbN4LlIdnF8JH27Dkhb/JMxstLcFZKQq+vKNi4=
Subject key identifier: EF:62:36:17:CA:E6:F2:B4:D2:58:C9:08:0B:28:C5:6C:03:49:DF:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56391E10C1A311EF8C36E267762E951A.roa
Signing time: Tue 24 Dec 2024 03:01:14 +0000
ROA not before: Tue 24 Dec 2024 03:01:10 +0000
ROA not after: Wed 10 Dec 2025 03:01:10 +0000
asID: 984
IP address blocks: 154.92.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73935 (0x120cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:01:10 2024 GMT
Not After : Dec 10 03:01:10 2025 GMT
Subject: CN=676a23fa-8f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:fa:9e:8c:44:98:55:b9:dc:ee:ea:26:d3:
c4:e9:43:b0:88:b0:64:df:d5:40:7f:c0:8c:fa:e6:
34:df:07:af:cd:16:cf:78:52:3b:1f:30:86:78:63:
62:fb:66:48:8e:b1:85:85:1d:06:94:02:54:fe:13:
ad:8b:c5:a3:36:d3:df:d4:bf:12:9a:ff:45:45:5e:
b3:bd:3a:a4:34:28:a8:88:d8:e0:95:dd:34:93:1b:
d3:14:10:53:c3:c7:80:d1:30:21:01:d0:06:bb:a2:
a5:8b:b3:fc:31:dd:c7:4d:e4:e0:49:17:e1:7d:35:
48:a6:2c:31:60:f8:6b:b0:c4:7d:29:a5:fa:23:ed:
bf:9c:06:e3:c3:a8:3b:1d:a2:c7:7a:f1:f3:48:6a:
af:2e:d0:4a:72:6b:c5:9c:4a:95:20:6e:2f:61:78:
57:a7:b3:7e:1a:fe:91:c5:fc:e6:d8:8a:41:6a:2c:
c6:f8:23:22:13:72:d7:89:71:d1:a5:d6:dc:c5:d1:
c5:30:30:bc:8e:d4:ca:7f:e6:e9:3f:9c:0e:c2:0d:
98:73:2e:be:2b:0c:ec:84:0c:57:61:d7:c7:32:f9:
ec:8b:91:7d:4f:56:ff:67:51:e5:26:45:60:0f:aa:
36:0b:f0:b6:88:d1:01:ac:d1:74:57:f1:84:18:2d:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:36:17:CA:E6:F2:B4:D2:58:C9:08:0B:28:C5:6C:03:49:DF:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56391E10C1A311EF8C36E267762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c9:f5:66:31:53:64:da:19:7e:83:36:6f:d9:4d:68:1e:2b:
f4:ec:06:72:6a:ea:27:a8:6c:9e:d3:61:56:3a:5f:cb:49:90:
7e:a8:73:38:19:65:c7:d8:49:cd:47:2e:b5:1d:05:7c:62:bd:
9f:17:b9:ed:e3:10:fd:8b:b1:75:61:e5:07:06:2b:70:01:2f:
88:90:df:a4:ec:92:ba:c4:36:3a:e7:8f:cb:c4:37:15:64:2b:
47:51:e6:b0:eb:5d:72:06:8a:c8:7d:35:7c:5b:48:2a:e4:f1:
95:e3:6e:72:f1:2c:7a:fc:73:1c:09:2c:ad:22:82:85:4a:62:
86:e6:2f:fe:02:0e:65:07:a9:e1:83:e8:36:de:57:e9:89:22:
2f:de:d2:4f:14:36:67:fd:d6:ee:71:e0:da:44:c1:4d:10:a4:
f1:0e:09:46:67:15:ce:d2:85:d6:f6:cc:80:15:1b:8d:9b:3c:
de:95:44:8d:7c:fd:44:db:e0:23:a2:9f:d4:ce:b6:e9:b5:ce:
36:14:68:78:b2:78:ed:bf:9e:10:c3:bf:22:09:e8:ce:ad:72:
9a:85:fd:f6:7d:7d:ed:fa:73:fe:63:d0:78:05:1a:b7:48:22:
50:b3:72:fc:c6:23:39:b5:9b:f5:af:f9:47:18:e6:03:d1:8a:
d6:46:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:45 2025 by rpki-client