Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D537DF4C1AB11EFB41D3E9C762E951A.roa
File: 6D537DF4C1AB11EFB41D3E9C762E951A.roa (raw, json)
Hash identifier: 7J3WrTp9XnGkMPB3hH3FRnqlBwlPfK0qmqQqvu065Sw=
Subject key identifier: 81:AC:D2:4D:69:2A:52:A1:38:87:4B:88:B9:F4:AC:4B:82:A9:37:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012131
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D537DF4C1AB11EFB41D3E9C762E951A.roa
Signing time: Tue 24 Dec 2024 03:59:09 +0000
ROA not before: Tue 24 Dec 2024 03:59:05 +0000
ROA not after: Wed 10 Dec 2025 03:59:05 +0000
asID: 984
IP address blocks: 154.92.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74033 (0x12131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:59:05 2024 GMT
Not After : Dec 10 03:59:05 2025 GMT
Subject: CN=676a318d-cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:7b:88:f4:d3:35:b1:fd:1e:fc:0b:99:fa:
0f:4b:b9:70:a6:34:c9:90:3d:cd:57:b3:ad:54:9e:
65:b2:ed:48:f9:14:2a:59:df:1c:d1:e9:de:af:fd:
83:d6:13:60:28:45:6d:4b:b8:1a:a7:b6:24:76:2e:
7c:f7:af:82:66:d3:a8:59:e8:f3:a3:36:05:4a:eb:
74:b5:60:70:a4:76:2e:0f:49:1a:4d:7d:92:af:5d:
c3:e8:3b:f9:31:9e:f1:a7:db:2b:5e:2c:79:22:47:
d9:c1:d8:da:99:fb:5e:a5:f2:a4:5d:7d:3e:f9:f3:
4e:8a:f2:a1:f0:b3:31:f5:70:44:5d:2e:d5:46:34:
75:89:52:ff:6a:a6:ea:2d:8f:1c:d5:5c:09:6f:74:
52:7a:b9:6a:e5:56:2f:a8:2e:c1:1c:a2:ac:16:58:
fc:df:b8:a6:28:b3:0a:61:2b:ef:22:1b:f1:fc:4a:
17:65:89:4e:05:64:69:4b:5b:7d:de:99:38:c1:12:
38:be:4f:f2:68:c9:f9:2a:8b:b6:19:61:e3:a1:b1:
c8:92:c3:16:65:3d:37:95:e4:a4:b1:39:3c:8f:e5:
72:6a:a2:11:ce:70:e8:08:27:fb:da:79:4d:4d:6e:
fd:77:bd:b6:53:e9:48:4b:6c:78:b4:1e:cc:7e:07:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:D2:4D:69:2A:52:A1:38:87:4B:88:B9:F4:AC:4B:82:A9:37:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D537DF4C1AB11EFB41D3E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.246.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:cf:8e:14:c4:96:bd:56:94:75:88:7f:25:0b:01:1e:e6:
00:6c:7e:8a:5a:c2:06:76:b9:5d:47:e2:d1:8d:12:82:e5:63:
66:50:76:0e:44:8d:0d:69:75:91:e8:be:6e:54:a2:a2:13:64:
1d:7e:07:78:0c:a1:36:25:ed:73:4b:71:ae:8b:75:71:e2:f5:
28:a4:af:94:bc:08:0c:74:88:e0:9f:42:a8:88:ac:63:5d:a8:
b2:73:35:8d:d1:02:26:36:19:53:df:70:e8:d2:3f:a7:0e:af:
9e:8b:7a:b6:9b:6b:55:ea:8a:5d:0e:ed:e8:78:cf:6f:31:65:
6b:f0:01:be:67:4c:96:85:c9:6d:c4:5e:cd:56:98:ee:d5:fd:
cf:73:c9:61:93:31:67:91:ec:dd:a5:6a:05:97:cf:30:69:ec:
41:ff:f0:5e:9e:2b:d0:65:e6:9f:90:c0:a7:59:7c:e8:4d:af:
f1:3e:70:2b:0e:79:1f:8f:90:f5:e6:10:bf:ac:37:53:a5:a0:
42:33:cb:98:f5:2f:97:7d:4f:bd:14:c7:49:d0:f1:ae:2c:c8:
c5:92:25:99:3c:b6:43:6f:54:68:cf:d9:80:da:42:da:0a:df:
00:60:49:78:61:07:23:6c:0d:e9:3d:f3:71:51:a0:b3:3e:6f:
46:8e:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:40 2025 by rpki-client