Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620DC6A8C42011EFAB9CFC4E762E951A.roa
File: 620DC6A8C42011EFAB9CFC4E762E951A.roa (raw, json)
Hash identifier: sbOofVR1DdbWHMS7yn1G+Wen6xMKpLNDfmQMFFMfvQ4=
Subject key identifier: 13:7B:BF:A1:75:D1:60:BF:4A:68:59:4A:C6:67:58:31:3D:91:D6:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620DC6A8C42011EFAB9CFC4E762E951A.roa
Signing time: Fri 27 Dec 2024 07:01:23 +0000
ROA not before: Fri 27 Dec 2024 07:01:20 +0000
ROA not after: Fri 12 Dec 2025 07:01:20 +0000
asID: 984
IP address blocks: 154.201.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76217 (0x129b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:01:20 2024 GMT
Not After : Dec 12 07:01:20 2025 GMT
Subject: CN=676e50c3-839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:7b:53:29:19:61:3d:f1:b4:7a:37:5f:d9:
52:8a:fb:6e:e9:67:f1:87:28:2d:a5:f4:08:02:82:
5b:28:ce:8b:1b:0b:e8:9e:06:80:3d:ef:02:03:b2:
ed:dd:e8:7f:cd:8a:dd:14:22:f0:4c:c4:70:0a:b9:
f9:31:f7:91:7a:41:3d:2c:ab:23:f1:a6:d6:9e:30:
68:14:39:8d:5e:6c:c4:82:31:06:15:e9:1c:91:9e:
dc:96:a4:29:c2:a4:27:42:96:c7:ec:41:57:3c:13:
19:a1:56:ae:31:26:37:02:73:e6:96:19:44:c6:27:
f5:d8:44:3b:b9:59:08:d1:e4:c2:94:ff:44:5d:19:
a7:8f:28:8c:c6:77:a5:5a:5a:db:df:59:62:52:ea:
c9:4b:e5:a3:74:c5:1d:a1:1b:f4:6e:e8:06:af:ff:
d0:d2:3f:78:66:4d:04:4e:e1:17:de:53:cc:ee:1c:
2f:3a:1b:b0:dc:a7:64:72:78:4d:5d:8b:87:49:9c:
a7:68:58:03:3e:f6:27:97:ab:30:75:7e:83:5b:9e:
93:c3:bd:09:a7:4b:19:ba:a8:4c:78:e4:24:e8:c6:
4c:b2:c3:82:ae:8c:9b:12:91:fc:c5:da:f1:f5:c6:
f3:90:17:00:49:63:85:00:5a:4d:d3:bb:c0:86:6c:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:BF:A1:75:D1:60:BF:4A:68:59:4A:C6:67:58:31:3D:91:D6:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620DC6A8C42011EFAB9CFC4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4d:30:20:ca:7e:5b:54:99:81:68:e9:d3:d6:97:d7:2e:b1:
84:42:96:0a:60:23:32:de:37:3f:cc:e8:46:08:20:18:18:ca:
cf:38:ce:ae:c1:0d:e4:4c:9d:38:bf:83:8a:fb:02:03:93:d4:
51:a9:c4:b1:5f:bc:bb:5f:c3:8e:36:f1:cf:0e:05:ca:e7:7f:
a8:e6:dc:b3:5c:1d:fc:34:c7:d1:c5:6d:7a:6f:0e:c2:83:e1:
ed:28:9a:0b:dc:72:37:0d:12:c6:6a:d4:e7:4c:9c:c7:ad:9d:
c4:a8:4e:ce:e7:cb:a8:c9:c3:72:02:fd:03:06:35:22:5d:37:
1e:20:f7:18:23:e2:c8:71:e8:14:33:54:e8:9e:ac:b8:50:92:
44:23:72:25:aa:e7:2a:fe:be:e0:98:c1:d4:cf:e5:dc:f8:d4:
7d:7c:5c:eb:cc:a9:71:59:df:ab:36:a4:3b:f4:25:b1:0b:c8:
6e:bc:67:c3:ea:16:67:55:20:08:a9:d8:26:d8:f8:e9:22:42:
67:37:bb:9a:93:3c:36:8a:c6:ea:26:f6:db:57:d8:d5:d2:49:
39:9d:56:98:b3:aa:23:d6:de:4b:f0:a3:bc:05:a4:85:78:19:
f4:36:39:52:30:83:89:3f:8d:0e:cf:ad:26:d9:ae:3c:0a:68:
e3:7d:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:54:54 2025 by rpki-client