Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790519AAC1B511EF95425C5D762E951A.roa
File: 790519AAC1B511EF95425C5D762E951A.roa (raw, json)
Hash identifier: dmpRYatauQaKFQHc+a/BlbWmGmPQPBXb/KtKsYXN1Nc=
Subject key identifier: 74:1E:7D:A0:9D:D4:2A:C1:EF:91:49:33:02:84:A1:8C:61:B0:20:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790519AAC1B511EF95425C5D762E951A.roa
Signing time: Tue 24 Dec 2024 05:11:03 +0000
ROA not before: Tue 24 Dec 2024 05:11:00 +0000
ROA not after: Wed 10 Dec 2025 05:11:00 +0000
asID: 984
IP address blocks: 154.193.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74153 (0x121a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:11:00 2024 GMT
Not After : Dec 10 05:11:00 2025 GMT
Subject: CN=676a4267-f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:de:35:24:66:21:d2:26:96:f7:0b:bb:5d:
83:bd:6e:93:48:f8:eb:19:f4:d5:af:d3:58:8a:b2:
3a:d6:c8:0c:d3:76:b9:fe:4c:11:13:d0:44:b7:53:
d5:61:21:47:1e:f4:6f:41:fc:cc:56:3a:55:86:b7:
e1:84:b8:f5:37:c1:0e:b1:b4:81:4b:a1:47:2d:c9:
cb:9b:f8:3e:8c:9b:e7:df:80:ea:8d:2c:8c:ba:83:
17:ee:e7:de:e0:5e:a6:14:46:20:56:e8:7a:93:c7:
74:4c:e6:d7:bf:c4:c8:c2:be:e3:f7:52:3d:a8:85:
b0:21:09:91:17:e6:85:2f:36:27:55:c6:56:bf:3c:
dd:3c:5a:01:e8:c3:0f:41:df:5b:4d:34:49:20:e2:
a7:18:ac:75:37:d3:e1:65:0f:b6:10:e9:d9:5c:fa:
d8:ba:cc:a5:fc:49:ca:8b:91:03:51:a5:8b:43:fe:
be:58:29:63:78:fd:c4:a9:4b:36:16:98:71:8c:f8:
b9:5d:bc:9b:7c:68:a2:3b:c9:18:d1:f3:aa:f5:c1:
a9:b7:dd:43:df:a2:16:1a:14:23:66:cf:05:b4:bd:
e9:80:74:fc:c5:aa:fd:30:60:5f:d6:39:55:06:c4:
46:f3:4e:27:6d:46:60:b8:c7:f7:b8:b3:6d:77:61:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:7D:A0:9D:D4:2A:C1:EF:91:49:33:02:84:A1:8C:61:B0:20:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790519AAC1B511EF95425C5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:11:35:d2:37:32:f8:d2:af:1c:aa:db:3a:6e:2c:53:59:0d:
15:f3:94:4a:9a:fd:34:4d:4c:da:eb:c5:d1:34:c9:a0:9b:71:
9f:f8:08:38:07:28:d0:fe:d2:44:0d:eb:95:3e:87:a8:a1:8d:
92:6b:3d:0f:91:59:f9:89:e4:63:7a:ee:3e:54:29:79:5d:b1:
2b:cc:99:f7:de:77:29:f2:14:51:9b:68:50:d6:04:ff:44:bd:
b0:7c:9a:4f:6b:c0:e4:df:37:5c:99:52:4a:49:30:52:a0:39:
d2:32:b4:bd:e5:73:6f:a9:21:f0:8b:9e:73:a3:0c:b4:6c:9c:
cf:5f:64:5f:61:d2:c1:b3:56:b8:98:d9:4f:dc:ee:cd:44:31:
c4:ac:18:76:1c:c3:8b:8d:d3:d1:30:fc:c0:02:79:d7:4d:97:
70:64:34:73:04:be:3b:bd:14:85:0a:3f:8a:34:ff:ea:57:90:
ab:93:28:93:6f:bc:62:11:4d:91:f4:7d:ca:4f:af:a1:2a:39:
53:d4:4b:54:f0:6d:f3:d3:6c:33:41:c0:da:59:46:ae:ff:c7:
83:f8:0e:08:b5:87:0e:27:8b:cb:31:39:de:86:e8:11:55:0e:
9a:9e:5b:29:c1:2c:df:22:7a:eb:67:1f:62:5b:b4:3e:2d:c6:
5b:64:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:49 2025 by rpki-client