Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AA4B9F4C52111EF8C0667A3762E951A.roa
File: 7AA4B9F4C52111EF8C0667A3762E951A.roa (raw, json)
Hash identifier: 7zu5FGVJRCY4YSFNXkRtPiFV+c4Te7JYeRuFdQ1aiFM=
Subject key identifier: 05:AC:63:B9:C7:78:9D:75:E5:C5:A7:07:FB:0A:F1:ED:5F:D1:34:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AA4B9F4C52111EF8C0667A3762E951A.roa
Signing time: Sat 28 Dec 2024 13:41:45 +0000
ROA not before: Sat 28 Dec 2024 13:41:42 +0000
ROA not after: Fri 12 Dec 2025 13:41:42 +0000
asID: 984
IP address blocks: 154.203.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76635 (0x12b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:41:42 2024 GMT
Not After : Dec 12 13:41:42 2025 GMT
Subject: CN=67700019-e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:b3:f3:d6:e9:db:4e:fc:dc:1c:43:13:c4:
07:ea:dc:cc:78:65:e1:05:dd:3e:fb:47:e0:51:71:
69:0b:41:ac:9f:a0:f2:eb:3b:83:ff:e4:5e:93:e9:
6a:f4:e6:19:bb:84:eb:7f:c7:d5:26:4a:99:b2:d0:
f1:e8:5e:89:de:8e:17:43:99:43:9d:47:08:9a:e8:
08:c6:ce:3c:de:df:6c:7c:1c:ba:d3:4a:86:eb:ef:
f1:bd:dc:68:5e:c5:ea:04:34:35:df:d0:ad:5a:44:
25:84:ec:2b:a2:a0:cf:3a:9a:46:ef:19:96:f4:18:
3d:9f:ae:08:91:c7:0e:a3:aa:49:db:85:41:27:70:
ea:2d:62:c1:3a:02:14:fe:6e:af:66:64:3f:ce:8d:
9e:cb:fb:e7:2a:af:56:e1:22:d2:f9:cb:91:26:b0:
43:76:70:8a:81:28:24:5c:6a:10:95:bf:f6:5d:e9:
9d:46:e1:2a:90:17:a6:24:89:d4:8e:93:21:ae:3f:
3c:fb:44:00:51:b8:88:56:5f:cc:d9:2d:3e:78:d7:
fd:fb:4f:0d:af:45:e9:8b:7b:40:84:c3:3b:d4:68:
31:e6:ef:77:ca:66:93:a6:d4:a3:34:37:88:6e:52:
ce:17:7d:64:d1:c5:60:49:db:7c:fb:85:69:36:b4:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:63:B9:C7:78:9D:75:E5:C5:A7:07:FB:0A:F1:ED:5F:D1:34:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AA4B9F4C52111EF8C0667A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.195.0/24
Signature Algorithm: sha256WithRSAEncryption
72:71:27:e3:94:d5:b8:2f:4c:a5:d5:47:20:ee:37:6e:a4:91:
e2:8c:ca:64:1e:46:38:72:22:a9:32:cd:6d:3e:b3:4b:48:9f:
74:b5:6e:fc:3f:34:57:f3:96:71:05:f8:f9:cf:aa:20:6d:e4:
cc:c4:fc:ea:a6:a6:f7:f7:97:83:6b:31:45:22:62:4b:eb:e6:
62:5d:41:91:b8:e3:fa:11:c0:ff:c8:50:31:7c:f8:43:a2:53:
0a:a9:18:f9:96:d1:f2:d5:3f:80:56:6d:0f:67:27:d7:51:3a:
ed:b2:f6:79:7b:c0:9d:aa:de:71:ae:b2:05:27:dd:67:69:e9:
2b:49:99:e2:3f:24:a8:31:9a:83:98:67:d5:ec:24:16:81:7f:
a2:ca:04:c9:1e:d4:2b:4f:cf:f2:e4:9d:5b:04:52:87:45:d6:
b9:d8:9c:6c:fc:71:0b:e7:c1:9c:8d:ef:b4:ef:33:d6:af:74:
d2:ee:57:66:c6:90:8d:b0:3f:e0:81:21:15:49:5d:98:d9:f7:
60:33:00:a1:de:e7:d5:3d:09:fb:78:4d:64:85:13:f8:c7:f0:
64:58:ae:66:51:bc:fc:56:8e:7f:71:b7:4b:f2:3a:32:a6:c3:
03:cc:76:42:e8:10:56:93:65:10:37:f0:fc:27:59:80:05:9d:
24:2e:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:25 2025 by rpki-client