Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602BBA08BE9311EFBF60589F762E951A.roa
File: 602BBA08BE9311EFBF60589F762E951A.roa (raw, json)
Hash identifier: kIDU+MOhefGL/mK8bl3/x/PV22/vqNz8aqalW6Ys7cA=
Subject key identifier: B9:85:F5:DC:23:E0:9F:40:C0:9B:66:E6:2F:DD:43:82:80:50:42:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602BBA08BE9311EFBF60589F762E951A.roa
Signing time: Fri 20 Dec 2024 05:29:25 +0000
ROA not before: Fri 20 Dec 2024 05:29:22 +0000
ROA not after: Wed 10 Dec 2025 05:29:22 +0000
asID: 984
IP address blocks: 154.82.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72748 (0x11c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:29:22 2024 GMT
Not After : Dec 10 05:29:22 2025 GMT
Subject: CN=676500b5-10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:c2:46:88:55:a1:8a:63:40:89:7d:83:19:
83:36:e2:9c:47:b9:aa:76:4c:b5:86:3a:47:9c:16:
0b:6d:48:18:4c:39:06:f6:e8:8f:79:7d:fb:b2:e0:
ed:64:f9:4a:1b:2c:fe:2e:b2:9b:10:a0:46:37:eb:
74:be:cd:27:58:2c:19:b3:5f:a5:66:18:15:92:f4:
b0:9e:00:24:f9:41:54:01:4d:cc:3b:f8:20:49:92:
7c:51:df:85:a0:91:ef:16:35:97:73:80:54:81:99:
09:2a:42:4c:6c:6c:df:78:b3:6c:13:fe:cd:1e:cd:
7d:50:8b:3e:31:97:a4:78:62:56:20:b3:15:c3:0e:
da:ea:22:59:d4:f0:24:1d:8d:f2:31:9c:39:82:d6:
51:1c:b9:24:1b:8d:2c:67:00:43:69:16:92:67:fe:
ca:af:d9:8e:8e:1d:c3:93:ea:06:6f:8d:03:17:31:
c8:1a:61:2d:2b:08:04:93:88:64:75:e9:b5:12:73:
3c:f8:75:3a:b7:13:08:59:f5:ba:a8:8d:94:2d:4b:
2b:9a:7c:c9:d5:7b:cc:82:a9:69:72:1a:8c:f7:76:
67:10:f6:00:63:b7:65:93:06:0d:d2:f8:fc:0c:73:
9f:7c:eb:d6:26:9c:f8:ca:19:76:6c:90:92:5e:db:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:F5:DC:23:E0:9F:40:C0:9B:66:E6:2F:DD:43:82:80:50:42:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/602BBA08BE9311EFBF60589F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:67:2e:98:9f:e9:20:0a:fb:29:c5:e8:01:8a:9b:fd:13:bf:
49:06:fe:d1:18:b0:8b:96:79:96:6f:bb:d6:fb:70:b4:0c:43:
8f:73:ba:02:25:61:67:ac:f4:44:e0:52:22:af:8e:24:a5:8c:
f1:97:55:82:35:4d:b2:93:f3:c1:a8:c0:e6:a5:11:55:b5:c0:
c3:ad:43:f0:d9:ca:f1:11:a7:d3:39:61:d2:db:89:c5:23:24:
fd:99:e6:07:21:37:1c:94:a3:bd:aa:c1:b0:05:b7:d6:a1:2a:
1b:f2:13:e7:39:45:21:79:77:d6:f5:b1:ab:d6:1c:e6:e5:36:
40:98:76:07:c3:d6:2d:9e:b7:06:a4:e1:01:f9:a0:70:d0:d9:
3b:1e:cd:f9:51:ce:fb:0f:c9:9c:7b:b2:d8:7a:56:f5:5a:a2:
7d:ae:c7:20:93:b5:bc:c4:17:ac:04:b7:03:1c:d7:2d:6e:26:
ec:ac:04:a5:d0:83:d5:0d:37:fb:34:d9:56:14:5d:94:4b:b5:
d8:55:1a:a6:b4:6f:24:b0:8c:80:a7:da:81:57:0a:10:28:e1:
fe:37:db:9e:9e:05:5e:ad:f1:f1:b3:6e:29:d5:b1:cf:6e:23:
8d:50:d6:ed:a0:2c:d4:92:f8:85:2f:0d:7a:10:bd:da:dc:30:
2d:2c:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:15 2025 by rpki-client