Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4DAF0C26611EF9132B449762E951A.roa
File: 6CE4DAF0C26611EF9132B449762E951A.roa (raw, json)
Hash identifier: s7iL9KNbN6enRxL9NTYVzBBvx8ig2C4ZVMEXrqjFs5w=
Subject key identifier: 5B:88:02:ED:A0:0D:3B:B2:9A:2A:A9:0C:61:5D:6D:27:29:6B:8F:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4DAF0C26611EF9132B449762E951A.roa
Signing time: Wed 25 Dec 2024 02:17:44 +0000
ROA not before: Wed 25 Dec 2024 02:17:40 +0000
ROA not after: Wed 10 Dec 2025 02:17:40 +0000
asID: 984
IP address blocks: 154.199.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74734 (0x123ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:17:40 2024 GMT
Not After : Dec 10 02:17:40 2025 GMT
Subject: CN=676b6b48-613b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:a5:13:5a:7e:be:79:be:c0:63:a7:a5:95:
02:b7:68:14:f7:5b:e3:8a:c4:74:27:c1:5c:19:e2:
2a:9e:8c:0d:3c:22:3c:59:07:3d:da:22:80:e5:b5:
9a:86:29:46:2a:40:7b:f2:23:bf:cc:26:94:9a:2f:
11:cd:e1:33:56:2a:0a:1d:8d:25:96:91:9e:69:19:
5b:c0:22:e3:bf:67:cd:d1:57:03:51:20:4a:fd:30:
42:07:6d:ad:18:49:34:62:41:68:54:1f:7c:45:8f:
8a:23:34:19:0b:28:f4:33:ae:93:e5:0d:cc:27:e6:
15:b4:f3:3e:7f:e8:9c:c9:c5:91:53:b9:4d:1f:f3:
63:d1:d5:8b:d9:6a:33:a7:df:e9:2c:b4:36:b3:15:
5f:89:61:b0:0d:f2:d0:e9:b8:99:12:ae:27:6c:10:
b8:7f:aa:55:da:c5:70:f7:b2:dc:09:4c:ea:6d:a3:
10:cc:1f:f9:8b:b5:db:df:1b:d0:81:ed:86:e7:6c:
65:e3:ef:10:2e:a4:02:bb:11:b3:a4:73:c8:6d:1b:
07:f7:d0:c8:06:50:2f:e1:00:d0:f8:20:2e:a2:97:
a1:f4:a6:9a:14:ac:fc:6f:f6:d8:f3:6a:bf:4d:d2:
5b:e8:af:e5:b4:fb:b8:e3:db:e8:61:54:4e:53:02:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:02:ED:A0:0D:3B:B2:9A:2A:A9:0C:61:5D:6D:27:29:6B:8F:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE4DAF0C26611EF9132B449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f6:8e:2f:c7:ab:26:d7:ec:58:02:8c:e6:14:c2:f0:65:5c:
82:fb:97:08:b3:42:33:27:02:d5:43:1c:67:ec:9b:59:e7:5f:
70:16:0d:41:f1:e5:8d:17:12:39:d3:42:d8:b1:e9:e7:06:fc:
d9:ab:0b:74:dd:9e:ff:19:0f:aa:8b:3c:0f:c1:2a:87:a7:17:
18:c2:c8:29:e5:0d:51:73:8e:62:2c:91:c3:51:6d:d2:b5:2a:
ec:bc:44:2f:b8:00:c5:8a:8b:2d:12:5d:ae:41:0f:6a:a9:dd:
80:40:fa:ac:ba:ae:31:5a:7a:a1:f3:95:89:c4:42:a6:fc:ee:
fd:3e:7f:51:46:08:bd:a2:f5:b5:17:02:44:a5:b4:1d:dc:dd:
9f:f5:81:4a:47:7f:1a:d8:45:b9:a2:88:94:13:71:ed:46:3d:
14:24:c9:5e:8e:5a:07:95:69:11:db:5e:f1:f4:26:8a:12:cb:
42:3c:77:c7:29:54:2f:8a:b4:39:1e:a8:8e:83:51:28:bf:e9:
0d:9f:14:cb:86:1c:72:eb:e4:94:de:2e:5b:db:d4:51:ec:c0:
91:da:22:77:05:fb:d2:25:f9:87:95:09:c8:ac:8a:d9:dc:66:
6a:7e:cd:e8:93:5d:ac:86:bf:77:dc:eb:7f:39:cd:db:cd:dc:
a1:f7:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client