Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEFF83EC1B911EF839A9776762E951A.roa
File: 7BEFF83EC1B911EF839A9776762E951A.roa (raw, json)
Hash identifier: YcTZeQiGLkcb4ktO9KR9DEid1eOT5tuQH5JQBGO9nwY=
Subject key identifier: 57:3B:61:96:AC:DE:5C:ED:86:FA:23:B9:A0:95:CA:47:DB:DF:7B:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEFF83EC1B911EF839A9776762E951A.roa
Signing time: Tue 24 Dec 2024 05:39:46 +0000
ROA not before: Tue 24 Dec 2024 05:39:43 +0000
ROA not after: Wed 10 Dec 2025 05:39:43 +0000
asID: 984
IP address blocks: 154.193.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74201 (0x121d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:39:43 2024 GMT
Not After : Dec 10 05:39:43 2025 GMT
Subject: CN=676a4922-13f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:61:fd:39:38:3a:94:eb:d6:e8:94:6d:15:
e1:66:c4:f4:b1:f7:42:3c:1c:da:88:67:73:a9:65:
5a:9a:50:e9:34:e4:90:87:3d:c0:dd:93:61:21:23:
27:3f:af:74:c5:de:e5:16:80:fe:6d:41:2f:c8:4f:
fa:4e:d4:e7:2f:54:cf:62:40:dc:38:41:fb:77:db:
d2:26:20:92:32:8b:72:a2:74:31:18:83:3e:70:bf:
2a:60:38:d5:3c:eb:42:b2:51:36:b5:25:1f:4d:3b:
5e:f5:f2:88:b9:8a:b0:f2:ba:1e:27:68:05:fe:d3:
e1:69:bd:44:7d:97:ee:56:8f:cc:33:17:41:37:cd:
81:2b:47:37:15:0a:aa:c6:b8:8c:b9:1e:07:eb:e7:
93:ba:b5:f6:fe:36:18:93:83:c9:46:5b:1b:cf:d7:
82:de:83:f6:ee:1e:0c:58:6b:95:78:6e:db:3b:10:
37:9c:85:54:49:ee:cc:f9:02:94:84:98:d1:a3:ba:
2f:5d:a9:c1:61:37:f7:df:da:77:a4:d6:b7:32:0b:
52:48:4e:98:97:6d:a0:a0:6f:16:ab:79:ab:ef:d4:
11:50:ee:c9:96:bd:ae:40:64:d7:ac:6e:56:e6:88:
04:1f:35:3c:65:f0:8c:1b:87:44:89:d7:9f:e3:15:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:61:96:AC:DE:5C:ED:86:FA:23:B9:A0:95:CA:47:DB:DF:7B:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BEFF83EC1B911EF839A9776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
64:46:ca:b9:8e:21:38:02:78:6f:55:68:92:a2:be:09:bd:bb:
7b:2e:05:d3:80:a5:c9:23:c8:c2:32:04:78:34:dc:15:42:05:
99:5b:3b:c4:e0:35:df:eb:9f:6a:12:73:f5:5e:08:86:59:6f:
20:04:31:2e:38:da:59:1c:3b:fe:6f:ac:92:d1:60:a8:06:1b:
f9:13:3a:08:5d:d1:21:dc:4b:81:79:f4:9d:87:dd:e3:e3:5b:
e3:0b:b6:7d:bd:f6:06:d0:a1:95:41:06:50:b1:f4:7c:92:3a:
6f:c5:0b:b8:37:f9:f2:8b:ec:24:a0:df:7a:56:ba:be:c8:79:
30:f2:6e:c8:c4:e5:9d:6a:da:b6:e2:dc:16:ff:bc:48:d4:20:
d2:21:71:44:04:45:f8:2e:bc:b6:c8:87:e6:18:98:55:17:1f:
8e:2c:e5:da:5a:b3:65:37:f0:69:71:4f:b5:c1:53:67:e9:c8:
91:7d:80:50:6f:05:9b:85:75:ea:31:ba:c9:c9:e2:30:99:a3:
4f:57:80:39:14:26:bf:96:8d:f3:06:69:83:37:b2:9e:2f:90:
0d:de:4e:f4:73:4b:f2:55:f5:c0:1d:9e:de:48:df:38:22:2e:
dd:b3:bb:63:b6:59:49:c3:67:ae:5c:1d:14:9f:8e:62:e3:e6:
32:27:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:44 2025 by rpki-client