Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E13F0BCC1AF11EFB95C28B5762E951A.roa
File: 6E13F0BCC1AF11EFB95C28B5762E951A.roa (raw, json)
Hash identifier: 3afhLESRDxpPSChgXXDHAOyEmR0nmwPFZZY3O6c/T5E=
Subject key identifier: CC:72:DC:A0:3D:FD:E0:F1:18:D4:A2:B0:0F:88:92:0D:A4:2F:F6:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012161
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E13F0BCC1AF11EFB95C28B5762E951A.roa
Signing time: Tue 24 Dec 2024 04:27:48 +0000
ROA not before: Tue 24 Dec 2024 04:27:44 +0000
ROA not after: Wed 10 Dec 2025 04:27:44 +0000
asID: 984
IP address blocks: 154.193.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74081 (0x12161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:27:44 2024 GMT
Not After : Dec 10 04:27:44 2025 GMT
Subject: CN=676a3844-2e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:60:ce:a5:fa:22:c9:88:2e:19:21:24:c7:
81:14:f5:7e:51:ca:78:1e:1f:2c:0d:ee:9e:93:0a:
af:6f:cd:e9:5c:da:d8:11:d2:4a:02:c0:07:0b:1e:
d0:5d:99:8c:bb:61:4e:e8:cc:6a:e7:b9:6d:21:ac:
11:7e:7b:46:09:2c:55:7e:35:0f:54:7e:3b:ad:13:
db:74:b3:5b:13:18:ca:21:4e:b8:fe:60:cb:fb:69:
74:27:e2:b0:30:02:b6:51:b2:05:e0:51:74:13:42:
9f:e7:a0:3f:a5:3c:31:11:3a:e6:0c:4b:65:ef:71:
1d:b9:14:5c:5a:3b:ab:1a:36:ab:d8:3e:d1:51:7d:
7a:69:94:9a:a0:e2:36:d9:6c:9d:a2:0f:e6:7f:9d:
ad:c8:f6:18:e3:e8:04:b8:a5:ff:c7:9c:22:f1:72:
89:b2:12:4b:c6:8f:c9:84:b2:67:7f:4d:4d:67:03:
6a:1a:a1:bb:96:f8:45:e4:be:d6:1e:53:b7:76:29:
69:c9:64:ae:3b:dd:8c:18:93:13:e8:51:ce:ba:96:
38:3f:26:bc:8b:da:f8:67:e5:37:fc:c1:92:99:e6:
b0:d1:34:d2:75:99:a2:fd:41:8e:57:71:d0:b2:f7:
53:19:41:8d:f4:65:8b:86:4f:87:49:cf:12:c3:89:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:DC:A0:3D:FD:E0:F1:18:D4:A2:B0:0F:88:92:0D:A4:2F:F6:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E13F0BCC1AF11EFB95C28B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:33:21:5a:14:f7:20:67:f5:44:51:2a:9f:bd:45:a4:f8:58:
54:49:c0:37:51:f5:22:19:fe:87:80:43:ad:01:01:23:01:1d:
8a:df:89:e5:7f:39:73:50:cd:ac:91:4c:97:5b:b0:f5:94:4c:
13:ab:06:9c:25:20:cd:2c:ac:5e:c0:47:53:02:52:d7:29:ea:
6f:9f:f5:ff:45:7b:8d:b4:aa:af:19:4e:29:39:bd:48:1c:23:
48:1a:5a:a5:70:9a:b3:7b:0b:b3:49:75:ab:5c:1f:8d:a5:fb:
c5:f5:01:9e:f1:1c:27:8c:73:4c:61:e8:d6:30:7e:44:a2:a2:
d6:3f:02:20:52:84:9b:dd:0c:6f:5e:de:43:34:d3:36:7c:ca:
da:49:ed:1a:0e:4c:10:26:36:e8:1d:75:66:c8:a7:1c:71:7f:
a5:c1:0b:91:1e:30:d7:93:d1:95:c5:16:49:77:14:eb:f9:83:
68:74:3d:5b:cd:82:23:99:24:27:f1:79:1a:6e:05:94:0d:4f:
74:4c:d1:fb:04:0d:72:64:bb:55:1a:ab:ee:6d:ac:76:01:89:
94:5a:17:29:1e:3b:da:32:66:28:48:89:50:9f:33:79:a4:5d:
b4:ab:69:7f:df:78:ee:57:3e:b3:b6:5e:e1:15:b5:b5:f3:e0:
17:51:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client