Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6486C536C42211EFAC85C05B762E951A.roa
File: 6486C536C42211EFAC85C05B762E951A.roa (raw, json)
Hash identifier: YZJm2sT3r6VObRL843OE8zoV8HAMbyd9XFROhOKhiPg=
Subject key identifier: DA:8A:D8:2F:EC:3E:B6:71:DE:39:45:04:27:2C:65:DD:5F:F3:84:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6486C536C42211EFAC85C05B762E951A.roa
Signing time: Fri 27 Dec 2024 07:15:47 +0000
ROA not before: Fri 27 Dec 2024 07:15:43 +0000
ROA not after: Fri 12 Dec 2025 07:15:43 +0000
asID: 984
IP address blocks: 154.201.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76237 (0x129cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:15:43 2024 GMT
Not After : Dec 12 07:15:43 2025 GMT
Subject: CN=676e5423-bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:0d:2a:a8:b9:1e:03:21:97:06:74:ef:5e:
52:b4:c4:f4:30:54:cc:36:45:71:53:be:69:9c:7c:
1b:18:73:c2:a2:2f:86:34:30:c1:65:3c:cf:3d:df:
9e:c2:41:3a:2d:6a:f2:d7:07:89:f1:14:8a:fd:03:
67:2b:2d:bd:6a:7a:c8:cb:67:37:46:80:9b:34:ad:
19:a3:cb:6f:e8:66:f1:2e:1c:4f:f0:76:f5:42:3e:
62:ef:aa:06:9d:d6:43:7f:90:da:b7:b6:8f:df:c2:
88:e7:4e:c5:e6:d9:ee:51:6a:91:6a:b7:6b:51:aa:
79:b6:90:08:b1:f5:6d:d9:54:b3:e4:ab:47:b0:8a:
98:eb:e3:a6:f7:f3:ec:0b:37:d7:2e:e0:60:cf:aa:
12:22:66:d1:75:76:ed:38:6b:5d:86:44:8e:e1:5c:
35:72:fe:dc:96:99:38:00:90:c3:66:d3:45:9b:99:
7e:b7:08:a0:5b:67:90:82:e9:db:9f:27:a0:2c:56:
4d:82:9c:af:af:c2:9b:47:63:11:4f:5c:61:59:ce:
1a:13:66:11:2f:e6:d7:6d:a1:50:58:5e:87:13:d2:
b1:68:a6:91:26:39:0d:6c:a2:30:ce:a0:58:07:dd:
31:3f:ba:8a:e9:0a:a7:fa:30:c8:c2:11:88:93:04:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:D8:2F:EC:3E:B6:71:DE:39:45:04:27:2C:65:DD:5F:F3:84:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6486C536C42211EFAC85C05B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:24:f2:8b:c6:66:44:63:2b:91:97:5f:d3:8a:4a:05:4e:4d:
6e:7a:8f:3f:81:9f:11:a2:0f:ed:b2:43:66:b0:bd:ea:3b:f7:
af:41:33:94:50:5a:ce:b8:19:4e:05:da:30:d4:e4:23:6f:97:
ec:ba:ba:e5:18:6a:d4:59:1d:4a:9d:91:85:ad:96:91:2d:64:
cd:c2:10:9d:56:cd:c1:3c:89:f6:33:d5:ff:04:e3:b7:37:e1:
f6:11:91:a0:39:9e:0b:07:0e:ba:ba:4d:32:aa:f7:67:81:cc:
b4:f4:cb:1e:49:65:56:ba:7c:f1:da:19:fa:eb:b4:13:f2:44:
e8:fa:de:7e:af:e9:e0:2e:df:75:e1:88:57:5b:b9:8a:b2:c4:
23:c9:94:c5:62:b0:f5:c6:c6:c4:ed:1b:ce:a5:ae:fa:f6:70:
b9:07:46:e1:f3:d1:9b:f2:f2:ed:57:06:7e:bc:6e:b8:f0:00:
24:95:74:42:a2:2d:2f:5d:a1:58:00:aa:00:14:db:5e:bd:54:
45:7f:83:45:fe:d4:a7:51:ed:3c:0f:52:15:01:ce:25:1f:f6:
7a:a2:fa:e4:d5:ca:6c:01:59:1a:b0:ac:a2:d6:59:96:c1:ab:
0f:33:da:09:d3:17:f3:f2:38:51:1a:28:14:38:2a:7a:95:2d:
c3:b5:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:06 2025 by rpki-client