Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D0250EC40E11EF81842A5F762E951A.roa
File: 74D0250EC40E11EF81842A5F762E951A.roa (raw, json)
Hash identifier: pPegMb4V3bNomWILibkL5bz+ym1Fs3wZOEVHubL5mvs=
Subject key identifier: 6D:EB:F8:50:3B:96:B9:F4:B8:3C:DB:00:12:5C:77:5D:D0:74:AC:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012937
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D0250EC40E11EF81842A5F762E951A.roa
Signing time: Fri 27 Dec 2024 04:53:04 +0000
ROA not before: Fri 27 Dec 2024 04:53:00 +0000
ROA not after: Fri 12 Dec 2025 04:53:00 +0000
asID: 984
IP address blocks: 154.196.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76087 (0x12937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:53:00 2024 GMT
Not After : Dec 12 04:53:00 2025 GMT
Subject: CN=676e32b0-2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:d1:bf:3f:c5:2d:5a:b1:43:e8:f3:e3:8b:
f3:76:16:9d:e4:b2:0f:9c:df:f9:f1:ee:98:3c:53:
68:23:7b:4a:91:3a:c7:f2:ef:66:3d:f2:f3:f9:1d:
e2:21:ec:24:4a:54:4b:7e:ea:01:70:c0:8d:24:f1:
09:49:54:72:ed:99:ec:f1:43:6d:68:2f:44:86:de:
9a:b3:8c:1b:22:91:b3:4f:18:b9:6d:f5:bc:c6:c2:
2a:23:45:9d:6d:bc:b8:14:5e:7d:19:0d:2a:51:e8:
ba:54:56:1c:f8:73:92:35:83:d7:57:91:b0:00:34:
1d:c2:97:20:aa:57:41:d7:ea:7f:df:48:9e:fb:1e:
76:fb:53:7a:6f:73:0d:d0:55:4e:36:c4:38:e0:78:
d8:f6:e8:b7:5d:8d:41:f8:c0:a4:49:36:97:86:a8:
19:b3:83:4f:86:f9:3c:55:dd:42:f9:a6:09:73:1d:
dd:0d:f4:20:fd:1f:e8:68:d1:fd:12:c6:24:2b:f4:
48:d3:12:77:7e:8c:28:8c:9f:61:58:1b:f5:00:6f:
98:a2:f6:44:0d:df:6a:d2:b2:2a:fd:1b:67:c7:1f:
6e:c0:75:33:64:7c:4e:c0:e4:c2:ff:35:56:75:41:
b3:bb:a1:0f:ca:b9:e8:57:33:10:d6:1c:49:3e:4b:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:F8:50:3B:96:B9:F4:B8:3C:DB:00:12:5C:77:5D:D0:74:AC:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D0250EC40E11EF81842A5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f1:0b:1d:8f:a4:4f:04:cb:92:42:94:6e:ac:83:03:1c:71:
cb:23:b4:67:d7:62:80:b3:c7:b6:3f:d8:e6:0f:9c:c8:95:5a:
58:c8:7c:95:05:0d:e3:04:a3:ab:e7:8e:33:76:a7:08:20:62:
bb:0a:27:a5:05:03:33:3a:cd:db:aa:33:1c:e5:ae:73:32:79:
02:d9:54:e2:77:07:72:42:65:04:dc:9c:43:6b:79:5f:8a:fa:
f2:c0:ec:33:d9:ad:3d:42:11:c6:bf:53:b0:c3:4a:98:75:5e:
d3:bb:16:e7:d7:8b:d7:4e:a9:d4:e0:c3:91:b2:74:c4:64:0b:
26:64:54:f3:56:20:91:ad:78:08:e3:76:72:33:8f:b8:d9:41:
f9:ff:86:a1:91:cd:08:bf:28:87:12:f5:08:c4:9c:e3:9f:3a:
60:0e:36:37:26:b9:1e:93:7b:cb:09:d9:47:24:9d:f7:43:99:
82:33:51:5e:c3:64:99:46:87:92:7d:64:0e:c1:88:9d:01:f3:
da:d4:0c:77:84:65:1e:11:ef:4f:e2:8b:83:7c:e7:70:55:91:
20:3a:2e:0e:87:0b:c5:21:40:d6:71:31:1b:37:37:b3:09:31:
38:32:67:1b:5c:32:fd:1f:8d:7c:57:c5:0a:f6:35:e6:38:65:
7d:66:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:21:13 2025 by rpki-client