Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D849C04C38211EFAB464D58762E951A.roa
File: 5D849C04C38211EFAB464D58762E951A.roa (raw, json)
Hash identifier: Cli3oj3vw10emgPmPWpd3YizLkOCEN6xmGKQwXeHtL4=
Subject key identifier: 28:02:F5:CE:41:FA:B4:40:B5:25:F8:26:29:B9:CD:1A:C8:60:A6:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01276C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D849C04C38211EFAB464D58762E951A.roa
Signing time: Thu 26 Dec 2024 12:10:15 +0000
ROA not before: Thu 26 Dec 2024 12:10:12 +0000
ROA not after: Fri 12 Dec 2025 12:10:12 +0000
asID: 984
IP address blocks: 154.94.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75628 (0x1276c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:10:12 2024 GMT
Not After : Dec 12 12:10:12 2025 GMT
Subject: CN=676d47a7-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:3b:56:b8:3c:2b:d5:8e:b2:db:2d:51:8a:
5b:e1:d5:2d:a0:db:01:a7:b6:5f:04:71:76:71:77:
9d:31:d4:2f:94:b1:9c:df:79:cd:36:b8:ed:be:fa:
e0:6b:31:ad:50:ed:bc:70:1a:83:84:7e:bd:41:3f:
fc:9e:04:e9:dc:45:39:d1:f4:4d:05:29:df:c9:e9:
90:63:b5:01:5c:2e:f0:26:a8:0c:37:94:30:37:e3:
d4:0b:f1:fc:23:c1:b2:4a:a3:dc:23:0b:b0:09:5a:
2b:36:fc:a2:f0:aa:09:e9:b3:89:e8:5d:57:f3:f0:
f0:30:4e:e5:9a:73:02:f9:50:49:36:84:b2:3b:ca:
37:ef:3f:4d:d9:e9:2e:97:25:8b:30:4d:60:e7:b5:
ef:fd:86:35:45:5d:ee:cb:3c:db:8d:7d:92:cc:43:
91:e8:6a:f1:d2:d5:94:37:87:fc:c3:05:a3:10:a0:
ec:fa:78:5f:0d:1a:c7:5e:5a:e5:00:5d:f2:ff:8a:
1d:63:ab:be:7f:3a:17:41:ae:2c:89:0c:5b:fe:e2:
52:43:d7:fa:47:af:4d:a2:dc:ae:91:01:09:69:de:
26:41:32:57:f8:c7:81:85:a0:8a:a8:26:42:6e:0f:
a5:67:54:ea:a6:f6:c6:40:d5:69:3b:01:a7:3b:b2:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:F5:CE:41:FA:B4:40:B5:25:F8:26:29:B9:CD:1A:C8:60:A6:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D849C04C38211EFAB464D58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.205.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5c:f2:2c:1a:d8:d9:d1:d7:2c:8f:64:c5:9e:88:37:12:1d:
43:6b:8e:b0:e2:ae:75:70:c8:ae:76:24:36:eb:be:92:e1:87:
d0:7c:b6:c8:70:1b:82:ef:21:82:af:96:54:32:d2:52:82:88:
c5:e1:8c:31:98:1c:fa:f4:9e:f9:c0:26:40:85:cd:12:e4:ad:
28:3e:4e:47:b1:20:06:ab:5a:88:52:27:58:4b:05:db:31:b5:
d7:cf:d3:d6:43:5f:6e:08:b6:da:bb:c1:e6:af:da:a4:80:b0:
4a:b7:e4:51:db:ca:bc:39:3f:a9:af:11:6e:ca:3e:32:62:ac:
ce:55:9c:3a:ed:bd:51:bc:48:a9:7b:20:cf:0b:b4:5e:f6:02:
c5:20:c3:39:ab:80:0d:07:35:33:6f:a7:0a:98:45:11:7a:1c:
d4:dd:02:bb:75:b7:ba:4b:0f:5e:88:e0:ca:e5:cc:b5:63:67:
48:af:df:60:92:5e:5e:a7:c6:74:1f:2d:94:17:0a:06:32:03:
51:63:8e:b6:7a:74:99:5a:b2:5c:16:2a:9b:8e:57:8c:e8:1d:
d5:0d:ab:f6:d9:76:f3:76:87:90:57:f0:4b:96:55:b3:17:f2:
d7:61:81:e8:a2:d3:52:76:f7:1b:75:59:05:36:8c:44:df:8a:
bd:19:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:05 2025 by rpki-client