Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782CBF22C1B211EF8AC90C4A762E951A.roa
File: 782CBF22C1B211EF8AC90C4A762E951A.roa (raw, json)
Hash identifier: AYXqfKE0LtKT1O9geVQGVLqAVdUiZxo5a+xA2q/tcB4=
Subject key identifier: 80:E8:5C:DF:3B:3F:E8:A3:B8:E1:0D:A2:C7:0C:10:C5:55:19:FA:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012185
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782CBF22C1B211EF8AC90C4A762E951A.roa
Signing time: Tue 24 Dec 2024 04:49:34 +0000
ROA not before: Tue 24 Dec 2024 04:49:30 +0000
ROA not after: Wed 10 Dec 2025 04:49:30 +0000
asID: 984
IP address blocks: 154.193.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74117 (0x12185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:49:30 2024 GMT
Not After : Dec 10 04:49:30 2025 GMT
Subject: CN=676a3d5e-ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:d4:87:40:05:11:34:55:05:ae:e3:2c:a5:
74:d3:97:6f:c2:f8:f5:ef:b1:8f:8d:6e:40:ad:5d:
29:31:3a:8a:5b:3a:31:6c:36:01:fd:67:51:6c:50:
c3:7d:dd:0d:c8:8b:fc:30:9b:f0:28:16:b3:5d:1c:
e6:57:47:21:14:3f:1b:68:0f:00:ec:40:49:a5:c8:
e6:43:c6:e7:0c:0c:dc:15:a6:9c:1d:d0:be:50:e3:
41:7f:b7:a9:86:50:23:98:fd:fa:02:0a:a1:69:bf:
70:3d:e9:90:72:92:3b:08:b7:cd:3b:f5:04:a1:ec:
8a:43:62:dc:3d:f8:9e:3c:cc:70:1d:f0:a9:b4:6f:
c1:2e:1c:f8:4d:26:b2:1b:49:7c:2d:f8:d1:be:6d:
26:c7:fa:2b:59:1d:05:c7:3c:b1:2a:97:c6:89:e2:
6f:f0:d1:f4:18:0f:61:18:d6:05:2d:5a:ee:b1:c4:
b2:bd:d6:17:95:de:6f:35:78:26:2a:a4:a4:91:07:
d1:cc:e8:8a:7e:ae:b7:3c:27:33:5f:26:08:66:33:
8b:3a:18:ac:da:30:5c:3e:a6:72:43:94:40:4f:7e:
11:4c:7f:6d:78:62:56:4a:72:50:4f:77:dd:4d:25:
2c:60:a4:6c:cd:de:f7:6d:a6:b8:51:e6:6d:32:e5:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E8:5C:DF:3B:3F:E8:A3:B8:E1:0D:A2:C7:0C:10:C5:55:19:FA:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782CBF22C1B211EF8AC90C4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.108.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c3:21:b6:d0:09:85:02:09:2d:7e:08:d9:7b:aa:cd:9a:c7:
0b:b7:75:11:10:78:09:62:66:d0:dd:3f:0d:26:f0:d8:d0:01:
70:ac:92:cb:71:a4:a5:a4:be:88:1d:00:52:ef:bb:ef:82:24:
ed:f1:97:63:84:0b:16:9f:ed:25:6e:c2:dd:0f:40:d3:06:3e:
ae:cf:db:fb:fa:bf:fa:f9:f5:54:a4:de:15:8a:d0:f4:d8:a1:
6c:74:1c:49:b2:e1:95:3d:f3:60:b9:03:89:2f:08:ff:00:f3:
af:33:cf:1c:85:94:57:95:7d:03:c7:8d:6b:f9:39:d4:c6:ae:
1c:ce:de:65:f6:35:80:93:8b:0a:2e:0d:30:8d:d9:83:c7:66:
fc:69:ef:f8:a5:66:8d:37:56:2f:44:72:65:7e:1c:24:40:47:
d0:6f:49:fc:aa:f8:19:46:ec:de:e5:a1:72:59:06:33:97:00:
70:5f:ba:a1:bd:4f:3b:3d:77:3e:1c:00:db:fc:e8:c9:fa:6a:
c4:8b:9e:05:eb:39:e7:90:34:21:18:52:e5:db:90:64:60:c6:
ef:27:4a:e4:ba:92:02:74:24:ea:89:c9:b3:97:33:96:6b:28:
b1:52:1a:b0:8e:b0:5d:ab:84:e9:27:3e:9a:a6:8f:fd:04:84:
32:21:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:25 2025 by rpki-client