Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686A288AC3D411EF9943E159762E951A.roa
File: 686A288AC3D411EF9943E159762E951A.roa (raw, json)
Hash identifier: Ie4QLH/TbNKb4PfkqxjFSakxY5UP5xyvy24wLV0fCDI=
Subject key identifier: B5:99:92:AA:CA:1D:C1:59:CB:87:CF:75:CE:22:DE:7F:22:60:38:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012862
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686A288AC3D411EF9943E159762E951A.roa
Signing time: Thu 26 Dec 2024 21:57:32 +0000
ROA not before: Thu 26 Dec 2024 21:57:29 +0000
ROA not after: Fri 12 Dec 2025 21:57:29 +0000
asID: 984
IP address blocks: 154.83.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75874 (0x12862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:57:29 2024 GMT
Not After : Dec 12 21:57:29 2025 GMT
Subject: CN=676dd14c-286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:a8:06:fe:07:91:be:56:3d:4a:90:b0:8b:
01:82:ef:18:db:b9:b0:07:e9:8d:6d:50:e3:8e:bb:
c6:b9:94:9d:3a:a6:36:f9:be:90:e0:83:3e:e2:97:
f1:ef:e6:2e:5d:08:6a:6e:3f:2d:c2:be:0b:05:1d:
12:1b:55:8d:d8:10:89:b4:6b:72:dc:17:e2:c1:16:
2c:75:07:7f:a2:60:a9:86:c5:4d:1d:8f:dd:34:86:
be:18:ff:93:15:2a:c0:2c:03:a8:5e:06:77:32:6a:
56:93:39:2e:54:ad:f1:54:2e:34:77:0f:d4:36:a6:
cb:69:fc:fe:ba:6d:29:5c:a1:9a:3f:12:f0:8b:0f:
87:4b:2b:33:2a:d2:ad:14:f2:58:44:9c:1c:f5:cb:
2f:bc:35:9a:ef:56:d0:91:72:43:4f:a0:2e:84:87:
ed:66:fb:5d:f7:50:2b:28:c6:82:76:3f:d8:85:ab:
9d:9c:fb:9d:11:bd:ae:93:20:82:57:2a:2b:bf:be:
92:55:f7:e3:5c:39:43:cc:0a:66:6c:13:05:f1:ac:
38:ec:5b:fe:f7:9f:40:58:a0:8c:45:67:df:17:8d:
5b:a7:85:50:5a:ad:0b:f0:54:09:93:43:4b:9a:14:
a5:53:ad:7f:b7:53:18:23:52:f8:b0:aa:c9:48:be:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:92:AA:CA:1D:C1:59:CB:87:CF:75:CE:22:DE:7F:22:60:38:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/686A288AC3D411EF9943E159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.243.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f1:a7:bf:e1:67:15:af:f2:bd:c2:dc:d4:2a:7e:79:6f:16:
30:02:68:b8:6f:b7:b0:40:ec:35:99:6b:09:82:28:cf:ac:58:
de:b9:3f:f3:5a:96:d9:50:5f:15:5b:de:58:ab:02:72:ea:bd:
ba:79:c3:70:29:f9:85:e6:a4:ab:49:c4:27:8d:3d:51:2f:0d:
53:c9:2b:70:a7:90:17:6c:2f:cb:75:0f:04:b8:16:39:2c:ff:
65:c9:b3:14:44:58:e2:ce:35:20:1b:99:8b:6e:39:ec:58:13:
fa:9e:a5:19:6f:9d:fd:e4:78:d9:c0:97:00:8e:e0:b1:62:72:
94:4b:a2:4b:94:a1:3c:8a:03:2c:b8:01:77:98:95:a2:c6:68:
ee:10:2b:31:82:a8:c3:de:17:1e:4e:62:dd:23:4f:7a:98:48:
5a:d7:4f:a5:ca:41:6f:56:1e:49:48:5e:4c:1a:51:ad:37:88:
3e:eb:c7:8f:54:1a:c6:d6:9b:8f:63:d3:58:a9:ab:78:97:3b:
36:d6:03:f2:35:e6:6d:ed:5a:17:f4:b9:a6:dd:95:a4:13:0e:
6c:17:a3:c4:7b:87:33:87:fd:66:b8:5e:0f:5c:26:68:cb:ab:
43:6d:ff:e6:92:5e:a0:f3:08:76:47:d4:39:4b:4f:ad:7f:d6:
50:c8:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:44 2025 by rpki-client