Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E14706C0C811EFAE29CC6E762E951A.roa
File: 74E14706C0C811EFAE29CC6E762E951A.roa (raw, json)
Hash identifier: nADUsklHEwj3u9dXStRb68QKJ067u0n/P/eRkWDRLSk=
Subject key identifier: 64:10:05:AB:EE:0C:2B:7E:74:0F:3B:43:BD:6C:D7:74:5D:D7:42:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E14706C0C811EFAE29CC6E762E951A.roa
Signing time: Mon 23 Dec 2024 00:54:26 +0000
ROA not before: Mon 23 Dec 2024 00:00:22 +0000
ROA not after: Wed 10 Dec 2025 00:00:22 +0000
asID: 984
IP address blocks: 154.82.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73174 (0x11dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:22 2024 GMT
Not After : Dec 10 00:00:22 2025 GMT
Subject: CN=6768b4c2-ff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:0d:f1:23:5a:58:8a:fa:99:77:7f:cd:82:
19:cd:70:98:f9:32:83:90:1f:e0:16:e8:b1:2b:35:
22:a3:1c:ef:65:75:fd:7c:22:af:5f:13:a9:02:40:
7f:2f:7c:1e:d8:57:59:81:7c:9d:65:f8:af:4d:b4:
50:97:93:2c:70:0b:7f:09:37:52:35:1c:ec:2b:73:
cb:69:59:b1:5f:cd:10:97:62:42:09:45:54:27:32:
8a:58:bf:05:c0:0e:84:b0:d7:ae:02:fa:0a:a4:e1:
12:de:34:40:05:9c:bd:6c:34:bc:aa:3e:ed:06:fc:
54:f2:24:af:63:c6:0d:49:3d:79:91:6d:6e:2f:15:
08:db:5e:37:05:cb:5a:50:86:31:81:4c:c5:35:0e:
e9:d7:5d:ef:7f:9b:89:f4:c7:f5:3d:63:3c:c3:01:
c7:17:e6:e8:91:2f:2d:f1:b1:16:63:e1:18:70:0e:
82:24:5e:3f:a8:4e:06:ea:47:80:fd:ef:36:b3:29:
04:30:50:d2:a7:b7:9d:e2:92:3f:0c:21:3b:b0:8d:
26:64:1f:a4:02:70:9a:1b:c3:59:bd:70:45:70:ce:
05:7f:da:ba:2a:4e:6d:7e:05:76:e4:62:4c:9f:c0:
89:31:cd:17:f3:12:2c:9e:1e:54:73:c9:d6:cf:27:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:05:AB:EE:0C:2B:7E:74:0F:3B:43:BD:6C:D7:74:5D:D7:42:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E14706C0C811EFAE29CC6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:48:9c:c8:a0:5b:5b:24:80:94:5a:c8:25:bd:c3:ca:10:d9:
70:ef:68:d3:dc:1a:12:c6:7e:d8:b6:d8:7e:29:2e:4f:32:6e:
d2:d6:11:a4:67:c3:bc:32:e1:2c:c2:38:91:0e:7d:09:d7:01:
aa:8a:5c:43:ad:fb:b0:30:5a:a4:6a:9e:8e:51:ba:67:4e:e0:
11:3f:46:d5:d8:d3:17:ff:1a:08:82:1a:a6:d9:a6:f6:54:6b:
30:0c:f7:16:52:16:3d:62:6b:94:a3:af:49:1e:75:0f:9c:e3:
5e:0a:e2:83:c6:b6:97:b2:c1:ab:ce:0b:cc:d5:c1:6c:b2:d3:
5f:d2:b8:79:63:11:e2:4a:48:2e:b0:3e:6d:0f:da:1c:c5:bb:
f7:67:af:18:ca:02:3e:de:48:d6:26:7d:b5:69:33:a2:38:10:
7d:ae:23:3d:02:61:3e:57:df:8b:e3:13:7a:db:e4:0a:11:c9:
24:99:21:97:ab:a2:0a:ef:c1:36:65:af:e6:78:3c:90:bc:de:
3b:23:29:14:1e:e7:d7:1b:04:85:97:ab:40:cc:e3:85:e6:b6:
89:7c:bd:b3:68:f3:8c:93:77:4e:fd:e8:d2:1f:0d:e4:e7:8e:
2c:98:3c:82:ec:0b:93:8b:aa:48:3f:60:0f:40:19:13:02:66:
28:58:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:30 2025 by rpki-client