Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593F3C34C1BC11EFBB59EC87762E951A.roa
File: 593F3C34C1BC11EFBB59EC87762E951A.roa (raw, json)
Hash identifier: qZxivbogpBX7if7Qpqa4/0GmqxKnKa9shyrNpJGtTfs=
Subject key identifier: D4:1C:6D:E8:6A:EC:CB:2C:CC:36:4B:21:8E:74:72:93:D0:4B:FF:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593F3C34C1BC11EFBB59EC87762E951A.roa
Signing time: Tue 24 Dec 2024 06:00:17 +0000
ROA not before: Tue 24 Dec 2024 06:00:13 +0000
ROA not after: Wed 10 Dec 2025 06:00:13 +0000
asID: 984
IP address blocks: 154.193.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74235 (0x121fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:00:13 2024 GMT
Not After : Dec 10 06:00:13 2025 GMT
Subject: CN=676a4df1-fa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:a5:c6:a2:cc:b3:72:d2:b2:5c:a0:b5:40:
8c:f2:67:a8:f8:fc:8f:d5:cf:06:82:cb:b4:73:c9:
dd:b8:bf:68:5e:27:9f:76:1b:47:e0:1b:26:4b:4b:
6e:3c:f8:3f:aa:55:29:30:16:95:0e:64:9f:76:15:
ec:b3:2b:fe:59:ea:d1:70:98:4c:28:2a:06:41:ae:
f6:45:da:6d:c6:94:68:3f:ff:2d:a4:3f:1b:97:77:
8e:78:67:8f:4e:a5:a2:86:dd:3f:5e:2d:d0:08:1e:
34:c3:cb:4b:9b:00:44:3e:0a:3f:cf:7b:1f:f7:4d:
7f:62:db:58:16:b3:9a:a9:86:4c:88:0a:9f:16:35:
1c:82:68:d6:cd:51:03:07:8e:48:09:76:06:89:fc:
df:93:0e:55:ce:cf:3c:72:99:57:7b:b6:55:02:fc:
56:46:2b:20:2a:ce:22:c8:5d:e2:56:ef:53:48:15:
d5:51:c4:6b:9a:b5:40:70:c1:11:77:bf:1a:60:19:
42:fc:82:87:b5:28:1a:74:4d:9e:1a:a5:68:ba:b3:
64:b7:85:bd:34:5a:29:d0:70:27:5e:d4:3d:8c:c0:
fa:45:30:fd:61:84:41:bc:d2:24:bf:37:f2:2c:28:
69:ee:b3:22:3d:36:f3:9d:19:c2:84:46:b6:68:4b:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:6D:E8:6A:EC:CB:2C:CC:36:4B:21:8E:74:72:93:D0:4B:FF:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593F3C34C1BC11EFBB59EC87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.183.0/24
Signature Algorithm: sha256WithRSAEncryption
39:34:c8:8a:1b:65:e9:53:44:2c:3d:aa:39:64:62:7d:b9:21:
f0:25:23:6a:74:38:4f:2e:11:87:28:a6:29:be:01:79:55:43:
b1:82:6d:26:46:7f:37:98:21:85:d3:dd:b8:77:89:0f:25:0b:
68:a0:93:a9:ac:e9:ab:7d:1b:46:aa:40:b3:bb:93:cd:97:58:
98:04:8e:91:a8:06:d8:8a:25:74:52:d3:98:c9:6b:39:95:6c:
51:ba:f0:72:76:5c:61:df:8a:52:94:62:71:3a:fd:64:e5:35:
d6:e8:2c:cb:18:b7:7e:e2:15:4a:e0:c4:42:1e:c4:36:63:c7:
f4:62:46:f0:a3:97:14:bd:77:57:ab:8f:88:27:91:ec:33:87:
25:84:2c:fa:dd:f1:51:9f:73:63:5f:f4:02:39:1f:36:10:5f:
fc:e4:c0:ce:3b:bf:ac:02:99:d8:dc:4c:fd:a8:e5:b2:72:9c:
18:92:34:ee:bb:4b:e5:d5:30:22:cc:74:81:fb:83:80:ff:e3:
a5:53:8d:17:97:34:2f:36:15:93:a9:cc:d1:3d:fa:75:d4:f4:
5e:17:3c:64:b5:4d:a1:90:bd:1f:11:64:4a:57:f3:73:8b:d3:
fa:e7:52:7b:10:e8:d4:04:ef:1c:04:7e:44:36:0c:db:3d:39:
c0:3b:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:40 2025 by rpki-client