Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C322474C36011EFA25FCA80762E951A.roa
File: 5C322474C36011EFA25FCA80762E951A.roa (raw, json)
Hash identifier: dlwStWZq3zyzKlzaHZMMmOUnU7LGGXsqhTFEZQU+FKE=
Subject key identifier: 9A:24:13:B3:B7:2F:EE:59:3B:DF:63:D7:CA:54:6A:44:2D:B1:E0:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012644
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C322474C36011EFA25FCA80762E951A.roa
Signing time: Thu 26 Dec 2024 08:06:50 +0000
ROA not before: Thu 26 Dec 2024 08:06:46 +0000
ROA not after: Fri 12 Dec 2025 08:06:46 +0000
asID: 984
IP address blocks: 154.91.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75332 (0x12644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:06:46 2024 GMT
Not After : Dec 12 08:06:46 2025 GMT
Subject: CN=676d0e9a-ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:e6:cd:e1:55:9a:8c:fd:49:64:75:d4:98:
b0:9b:94:4b:d6:41:9b:85:55:91:20:8d:2b:da:86:
29:de:f6:22:63:62:5f:e6:44:65:ec:c3:98:32:a7:
5a:fe:6d:19:6e:6e:c1:1c:b2:c5:01:bf:18:c4:42:
e1:2d:ca:5b:13:eb:a3:9d:3b:03:8f:8a:dc:f9:99:
93:81:76:06:dc:0d:52:a5:91:75:f4:12:67:46:a5:
c4:ef:09:e8:a8:72:0e:34:a1:e5:84:db:db:5a:12:
f0:dc:28:86:cc:21:f2:e7:21:ea:74:81:01:d5:03:
0e:2d:c2:47:78:36:72:8f:e6:ae:59:0d:0f:93:69:
25:7a:ed:d4:3b:b1:2b:3d:22:2a:25:ac:1d:0e:a9:
42:7f:18:b6:1d:81:f6:7f:a8:72:e6:7c:d1:36:b5:
6a:b3:21:58:1a:cf:05:22:49:55:4b:d7:c1:1d:5a:
c4:4e:8a:56:30:18:ed:bb:e3:74:fd:c3:11:b7:58:
43:d8:e6:28:35:02:a6:72:89:b0:9b:7e:8b:47:3b:
bb:2a:13:9a:52:91:26:d1:d6:23:13:7d:5b:26:47:
be:e0:c4:c0:a5:9d:b3:8d:d8:ef:77:e3:8e:e1:b1:
38:07:eb:11:79:16:7b:86:5b:7d:fd:c9:1d:cd:6f:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:13:B3:B7:2F:EE:59:3B:DF:63:D7:CA:54:6A:44:2D:B1:E0:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C322474C36011EFA25FCA80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f5:a5:7f:a0:4e:e2:07:1f:de:d7:81:98:51:6d:31:d0:60:
4f:6a:66:c8:eb:93:73:e6:c7:bf:59:ff:da:5f:21:d3:7c:84:
3a:90:55:fe:f2:c2:85:21:63:3f:29:87:9b:49:df:e6:09:0e:
5e:5b:c8:c8:7f:25:0a:32:c3:c3:d9:e8:1c:30:89:c4:c7:b4:
79:36:71:77:25:02:88:78:ab:2c:9f:fe:c5:56:be:8a:38:7f:
f0:7a:d6:45:f4:87:a6:86:49:c8:33:13:45:5b:32:0f:16:81:
a9:8a:cc:ce:09:90:2a:99:50:be:c8:7e:00:02:f6:83:64:86:
dd:ec:33:25:e0:47:19:6a:c0:83:16:81:1c:ab:da:27:7c:08:
8d:f4:49:84:e4:46:4f:4c:d1:52:70:94:ce:07:ea:1a:92:7f:
03:49:12:ff:6f:62:e3:50:e4:d9:40:82:70:e1:36:30:dc:34:
36:04:6d:d8:48:3b:8f:7a:b9:31:78:19:7d:fa:fc:5a:b0:47:
a2:52:93:94:df:6d:bc:3b:82:4c:04:5d:98:a0:e0:0c:b3:88:
e7:94:90:dc:17:0a:08:68:6e:94:44:8e:09:ec:5a:c3:1e:f1:
d6:f0:bf:fa:e9:c0:a3:b0:67:8b:16:94:8f:10:03:e2:24:8d:
06:d3:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client