Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579947B2BE9211EFBCB22599762E951A.roa
File: 579947B2BE9211EFBCB22599762E951A.roa (raw, json)
Hash identifier: mB2KgDeMp3Ah0QVoyYvaxwps3aAPNTTJbm41uPiZQ6c=
Subject key identifier: A3:A5:14:77:C8:59:D8:E1:EA:58:F2:3A:56:EC:47:11:7A:28:AA:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579947B2BE9211EFBCB22599762E951A.roa
Signing time: Fri 20 Dec 2024 05:22:02 +0000
ROA not before: Fri 20 Dec 2024 05:21:58 +0000
ROA not after: Wed 10 Dec 2025 05:21:58 +0000
asID: 984
IP address blocks: 154.82.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72734 (0x11c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:21:58 2024 GMT
Not After : Dec 10 05:21:58 2025 GMT
Subject: CN=6764fef9-689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:10:6b:c3:75:6f:94:af:08:cf:49:13:db:
1c:30:84:42:4c:45:44:37:88:a5:d6:b1:8c:b2:e8:
c1:42:59:2b:b6:a9:7e:a6:44:06:68:f3:d9:02:c1:
03:97:c9:8e:4f:26:81:bb:32:3f:e0:7d:bb:72:00:
47:f7:48:07:d9:94:a5:8d:2f:73:99:e9:ea:ed:53:
fd:a1:cf:97:32:d8:ab:f4:83:d0:f5:d7:ce:ba:6a:
04:ad:c9:7f:b6:16:8f:3f:10:88:c6:43:ef:ea:67:
01:28:f9:30:dd:cc:65:49:77:f3:78:0f:57:b8:4c:
8c:37:1b:db:70:3e:21:11:47:ee:19:bc:35:66:e3:
17:78:d4:e6:0c:8b:7e:a4:34:90:d4:0e:a6:93:f4:
00:24:18:a2:5d:b7:b0:43:ff:81:50:2d:1b:9b:70:
54:f4:cd:6d:dd:18:0a:bb:c4:84:df:2a:3c:66:8d:
13:67:32:2b:ba:ef:b2:8e:10:eb:14:0d:1e:4f:1d:
bc:c9:f2:2f:9f:c6:2b:8b:a7:55:56:9f:30:fa:d4:
c4:f2:c3:f2:ad:bc:22:b2:b4:db:80:4e:2d:4d:a7:
ed:73:14:f9:a5:18:ac:c0:c8:69:c4:56:20:6b:25:
2e:99:55:18:5c:7d:59:ce:6a:24:9f:0a:a3:3f:73:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:14:77:C8:59:D8:E1:EA:58:F2:3A:56:EC:47:11:7A:28:AA:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579947B2BE9211EFBCB22599762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6e:37:29:6c:00:59:5d:af:d9:61:f1:b9:b2:af:02:47:b5:
5c:8f:36:b8:c9:65:90:b6:b8:80:63:5c:01:1f:00:6b:51:4d:
c2:6d:c9:61:c6:a5:f8:b5:2c:7c:2d:73:77:50:1a:54:12:c2:
b9:0f:e2:1f:e4:0e:05:24:70:d6:59:b3:f8:20:8f:8a:4c:93:
b1:a7:13:ff:86:41:d2:43:a7:0d:2a:45:db:77:72:d8:a0:f4:
c9:42:21:4f:31:2e:dd:f5:6d:04:3e:73:3a:da:1e:62:b2:b3:
93:84:a1:22:c2:5c:43:9c:c0:e4:86:20:a1:41:66:45:d9:8b:
23:7c:2a:c5:92:d9:d0:b7:81:e6:32:7b:ed:85:a5:ca:d6:85:
ec:0b:e8:c2:5f:a8:41:5c:35:0f:50:7d:17:c8:7b:39:5b:5c:
6c:26:ec:29:48:60:97:ea:2b:c0:97:38:61:91:f4:1e:a6:59:
06:3e:48:f9:8f:9a:d3:9f:60:95:b9:cf:00:2f:3c:ea:bf:2d:
ec:7e:7f:f5:a1:c4:46:b3:19:a9:e1:07:de:0d:c3:3b:97:0b:
06:bb:fa:83:c8:6c:4e:63:16:10:89:47:2c:82:3c:71:85:71:
fe:d3:1b:d0:2c:e1:9b:fb:19:ae:4e:9c:66:b0:07:67:f9:3a:
c6:05:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:28:10 2025 by rpki-client