Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/734266DAC1DD11EFA2E82857762E951A.roa
File: 734266DAC1DD11EFA2E82857762E951A.roa (raw, json)
Hash identifier: b21FZRMOujBiE/iAdoPqulkXiwYk73E3aA9NZwCZWFY=
Subject key identifier: D6:C4:12:7B:35:35:19:F3:5A:3D:32:1B:D8:1B:A2:BE:AF:E5:88:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01231D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/734266DAC1DD11EFA2E82857762E951A.roa
Signing time: Tue 24 Dec 2024 09:57:14 +0000
ROA not before: Tue 24 Dec 2024 09:57:10 +0000
ROA not after: Wed 10 Dec 2025 09:57:10 +0000
asID: 984
IP address blocks: 154.199.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74525 (0x1231d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:57:10 2024 GMT
Not After : Dec 10 09:57:10 2025 GMT
Subject: CN=676a857a-0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:25:bf:77:5a:67:9f:de:6a:f5:1a:d5:ff:
d4:90:5d:9c:48:5b:07:f6:11:51:2d:61:bb:45:ff:
a2:32:04:74:e5:f8:32:4f:50:3e:5d:35:04:8f:a0:
46:15:30:f3:3f:9e:66:6e:65:dd:bb:ae:f0:15:24:
e0:c6:75:1d:25:89:fd:d3:34:79:a4:e0:ef:6f:0f:
29:6d:53:75:99:95:f3:7f:c3:8c:a9:4c:1c:8b:a1:
eb:e7:37:63:54:52:1e:b8:35:70:2e:97:85:69:05:
ba:c1:34:2a:00:51:4b:16:0c:18:da:8b:40:1c:a5:
28:4d:30:8d:03:9d:8d:8e:cc:86:b0:01:90:02:40:
12:5b:c5:12:b9:27:b0:66:96:9b:de:9d:6a:4e:02:
cb:b7:b6:83:6a:f3:f9:5d:98:18:e2:0a:4a:c4:f0:
1f:fd:cc:1f:ff:26:42:fd:02:64:d6:89:d9:f4:8b:
ed:fa:a1:17:6b:b1:8c:67:f2:12:86:12:6b:68:b1:
d9:96:98:57:d0:07:5d:97:da:be:ae:20:bc:25:50:
8f:66:7e:75:51:75:1b:ba:b9:25:ba:90:d3:a3:54:
ff:44:22:95:22:2d:4f:c0:5a:4d:9a:51:c0:68:99:
d4:55:46:05:03:11:76:88:1c:ff:b5:2d:a5:3e:b4:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C4:12:7B:35:35:19:F3:5A:3D:32:1B:D8:1B:A2:BE:AF:E5:88:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/734266DAC1DD11EFA2E82857762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
af:97:f8:73:10:c2:ce:4c:91:19:0b:ab:ce:2d:14:07:1c:5f:
f0:2f:84:0a:d8:dd:f0:44:49:ab:97:02:1b:38:b4:5b:5e:7a:
57:db:9f:38:74:5a:48:df:c7:11:9f:31:24:bb:0e:05:f9:db:
ce:e0:45:2c:7c:b0:bb:c2:3a:94:4f:f3:b6:01:8c:9a:ef:10:
95:71:41:6d:88:af:98:7b:33:24:28:16:6a:1a:6c:75:b5:13:
d4:d9:d7:fc:ec:8f:96:68:5d:84:fa:b0:f9:cb:ff:ac:f2:2d:
87:5d:00:e5:65:ed:2f:55:e9:08:8d:21:19:ac:ab:64:65:99:
ed:3c:c9:65:ab:1c:72:f1:4d:70:b6:1f:1f:ba:06:e6:e9:9b:
c0:ae:bc:91:8c:d2:cd:4a:a6:12:83:ee:cd:5a:a2:50:4b:ff:
6f:3b:40:6d:bb:c9:31:4b:c1:f2:24:20:5b:71:ca:3c:f3:1f:
1e:92:a1:88:e0:a6:ca:54:53:2d:de:54:e2:e6:e6:49:13:0a:
fa:7b:ea:22:0b:6f:87:82:ca:cb:cd:ce:b9:c7:8d:fe:8c:8a:
84:95:97:b5:4c:82:4a:77:35:0e:7b:65:5f:02:79:6d:9a:92:
fb:9d:e2:b8:e2:0e:96:a0:f9:e7:d2:50:31:5e:36:11:ab:28:
13:8e:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:56 2025 by rpki-client