Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5F3EC54311EF9BC8DC7A762E951A.roa
File: 748F5F3EC54311EF9BC8DC7A762E951A.roa (raw, json)
Hash identifier: jQmfzDokmxHzZuS6NDLn/NgKLEok84KLku/RHDdzfFE=
Subject key identifier: ED:7F:21:00:E0:A2:DA:7C:D4:96:F5:D3:93:8F:32:FA:C1:05:9E:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5F3EC54311EF9BC8DC7A762E951A.roa
Signing time: Sat 28 Dec 2024 17:44:58 +0000
ROA not before: Sat 28 Dec 2024 17:44:54 +0000
ROA not after: Fri 12 Dec 2025 17:44:54 +0000
asID: 984
IP address blocks: 154.207.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76947 (0x12c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:44:54 2024 GMT
Not After : Dec 12 17:44:54 2025 GMT
Subject: CN=6770391a-7492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:d2:e7:6f:62:fc:d7:b4:19:32:40:79:c4:
cd:ca:97:0c:47:59:d9:68:15:44:6d:2b:8f:92:d7:
b8:64:31:cc:de:27:d8:1e:67:ad:4b:45:60:83:f5:
2b:35:ed:d0:6f:2e:16:b4:00:b6:bc:ad:70:a7:59:
7c:86:31:85:79:f3:a3:f4:f3:a8:62:a4:d4:d3:d1:
3a:6e:a6:3e:3c:2a:40:cf:4f:eb:db:8a:99:3b:f7:
aa:53:23:48:af:d1:8e:20:fe:d5:2b:22:c0:4c:5c:
fb:d4:1b:10:98:11:e6:90:c5:d2:da:b8:7c:e6:eb:
c4:af:56:1b:f1:01:73:5e:9d:fb:97:7e:f1:b4:9d:
b5:d3:28:5e:35:b3:61:fd:00:b3:7b:1c:c2:b2:fe:
6f:a0:b9:aa:65:31:ed:43:da:bc:29:bc:7a:e4:da:
97:16:99:26:78:d0:47:01:81:fb:50:5f:1b:d1:94:
54:19:5a:9d:b8:9c:b7:5d:7d:c6:f6:2a:ad:3e:97:
5a:fa:1d:fc:aa:f5:32:dd:6b:53:77:c0:1a:e7:e2:
5f:78:e8:13:86:af:28:b3:82:27:84:f0:6d:32:04:
3d:46:19:df:10:3f:b1:ab:cc:6a:21:4e:0f:6f:e0:
3a:cb:bf:a1:8b:63:e3:89:da:6e:68:37:b7:49:ba:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:21:00:E0:A2:DA:7C:D4:96:F5:D3:93:8F:32:FA:C1:05:9E:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5F3EC54311EF9BC8DC7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.92.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b3:ca:f3:85:7d:fb:a9:ec:f1:da:18:21:40:b9:78:03:4b:
98:d8:0d:a2:65:e5:55:c7:a8:60:c2:1c:ce:3c:08:40:0d:91:
5c:f6:01:5c:9d:03:0a:7a:a1:7f:a5:64:3e:66:0f:c3:bf:dc:
ce:0e:cf:fe:f5:a2:09:33:13:79:bb:0d:0c:61:00:89:3f:28:
70:40:6f:3a:44:83:04:57:1d:ea:f5:6e:53:51:35:2b:55:3d:
8d:12:3b:64:ca:f0:6e:a8:07:c1:c7:1b:ca:4c:77:10:38:01:
ef:7e:9c:f3:eb:5e:fe:fd:49:81:0e:20:ee:3a:3c:34:cf:43:
41:d7:de:03:6b:7b:da:fc:86:43:85:e6:30:c8:86:01:82:c6:
af:d0:2e:b1:97:c1:2e:14:b7:44:25:4b:23:ab:5b:7a:92:44:
0d:b5:a3:ff:98:ea:2e:b5:19:4c:70:4f:a0:11:07:dc:ce:e9:
02:cf:d7:72:8b:aa:80:8c:b2:24:3a:21:ca:44:66:77:25:16:
27:8f:40:70:8d:56:d3:fd:c7:7b:6f:49:64:4b:c6:6e:a3:7b:
e6:bd:ab:22:c2:4c:5f:12:aa:ea:7d:1d:68:3b:f2:94:54:68:
7a:d5:35:c3:2c:bf:3e:91:38:0e:5a:51:79:ad:dd:1b:71:c5:
7f:c1:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client