Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D374A88C52711EFACF6B24A762E951A.roa
File: 6D374A88C52711EFACF6B24A762E951A.roa (raw, json)
Hash identifier: lsz0s2QNnkTTrP9r+xUEESp+E87BexqVcVaXRKTEaeM=
Subject key identifier: 3D:2C:2C:1B:45:15:9E:F5:70:CB:75:76:99:1F:5F:63:4C:1D:40:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D374A88C52711EFACF6B24A762E951A.roa
Signing time: Sat 28 Dec 2024 14:24:20 +0000
ROA not before: Sat 28 Dec 2024 14:24:16 +0000
ROA not after: Fri 12 Dec 2025 14:24:16 +0000
asID: 984
IP address blocks: 154.204.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76691 (0x12b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:24:16 2024 GMT
Not After : Dec 12 14:24:16 2025 GMT
Subject: CN=67700a14-4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:10:85:a8:3f:85:8e:c4:b6:ce:c9:54:f5:
92:57:a1:cb:24:70:64:77:f4:8b:01:26:7f:c3:8e:
a7:c9:42:fb:20:1c:54:7c:37:57:44:95:f4:ce:1e:
22:f3:63:d0:e0:6a:b4:22:66:3c:c3:89:05:37:82:
97:88:64:a7:77:06:60:b6:55:4c:78:8a:1e:43:2c:
9e:1a:de:a0:3a:49:42:c6:bb:53:cd:e2:13:33:7a:
07:3e:4d:a4:4d:bd:83:aa:52:9d:fa:be:9f:73:0a:
63:1e:2c:42:14:6f:ff:07:52:66:23:8c:7c:46:8a:
76:4f:5a:3e:58:2d:34:fa:70:93:a1:6f:9d:55:77:
41:ea:98:1b:cb:37:8e:9a:52:8e:d9:95:4f:5e:3c:
e7:d6:dc:96:0c:50:4a:d9:65:65:5a:27:c7:e8:b7:
ed:a8:d0:32:dd:8d:13:ef:49:4b:66:53:d5:c5:cc:
f9:f2:69:a3:08:fb:f3:15:4d:43:e2:4f:94:29:91:
b1:56:03:40:c9:16:85:d1:86:12:1a:e1:95:10:7e:
b6:41:67:dc:ab:7e:ee:90:34:1d:bb:ef:d3:c3:b8:
69:19:44:27:cf:97:c5:d2:6b:c7:0d:ae:b4:a6:a0:
3b:a0:73:28:81:6f:90:b8:e6:16:43:22:56:8a:e4:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:2C:1B:45:15:9E:F5:70:CB:75:76:99:1F:5F:63:4C:1D:40:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D374A88C52711EFACF6B24A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6e:a6:29:d6:24:a2:f6:dc:e1:4a:27:e1:ac:7d:45:c3:e4:
d4:eb:a3:de:2e:d0:ca:16:52:ab:fc:3b:de:8b:fe:03:d5:07:
10:4e:ab:db:f7:15:d0:4b:86:60:28:db:44:83:b9:89:22:cb:
aa:b4:4c:b3:90:1b:c4:9f:4a:66:35:34:d0:00:35:ac:17:38:
a0:4f:9e:4b:71:61:01:02:9c:1d:2c:15:f1:8d:c9:14:e5:d6:
fd:ae:2e:ec:7d:7d:1f:5b:68:40:f1:b3:bd:e9:31:59:29:e0:
3c:4f:cb:e1:7f:d4:c9:0b:d2:a3:44:be:7d:f0:42:8f:fc:5a:
7e:93:75:0a:d2:7e:e4:b2:15:bd:03:09:fb:ff:1c:eb:5d:34:
fe:73:ec:b5:f9:27:fa:ba:4b:67:28:c8:c9:d3:c9:8f:58:46:
05:3c:e7:39:f4:55:78:56:cf:e5:da:03:29:03:97:f8:f9:43:
8f:98:1f:4f:25:72:65:3f:48:8f:45:9d:6c:37:dd:47:08:85:
f1:21:50:33:af:58:0d:51:bc:92:46:16:ea:64:b3:d1:da:9d:
71:30:86:b6:85:8a:48:0d:59:9f:1d:63:33:78:2d:b9:1b:86:
cf:13:7f:d0:25:82:e7:13:5e:63:48:9c:19:e0:3e:96:df:a4:
9c:a6:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:19:38 2025 by rpki-client