Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8080CD1EC1A611EF9606407E762E951A.roa
File: 8080CD1EC1A611EF9606407E762E951A.roa (raw, json)
Hash identifier: sQZJw5sUPUOBWuJ/+WIsBgFGze74/26RbBv4t1VR7L0=
Subject key identifier: 0D:81:7F:DF:F7:D3:57:CA:A5:8D:41:6D:6B:8D:8B:E3:D6:9D:38:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8080CD1EC1A611EF9606407E762E951A.roa
Signing time: Tue 24 Dec 2024 03:23:54 +0000
ROA not before: Tue 24 Dec 2024 03:23:50 +0000
ROA not after: Wed 10 Dec 2025 03:23:50 +0000
asID: 984
IP address blocks: 154.92.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73973 (0x120f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:23:50 2024 GMT
Not After : Dec 10 03:23:50 2025 GMT
Subject: CN=676a294a-9cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:3f:6f:68:c2:5a:7e:c6:5d:5b:51:e4:5a:
43:cf:92:2e:03:e4:ff:11:a4:3c:8b:11:80:5b:9d:
cd:64:03:da:bc:9c:e2:cc:75:30:c4:d0:38:f9:eb:
d4:d6:a5:4c:9f:27:1e:8f:8b:32:70:3e:af:dd:3a:
69:a2:96:00:97:48:b7:61:a1:3a:e8:c3:98:a7:ec:
18:ab:9d:ca:60:78:b4:0e:18:0f:f2:5a:4d:b8:6b:
ca:99:43:04:63:40:a2:a6:5a:bf:c9:3d:5e:4f:10:
10:b2:f4:57:91:65:88:b6:a5:3c:46:45:1b:0b:93:
c5:9c:e5:38:5d:87:fa:62:e9:b8:77:3d:09:40:18:
be:b7:04:bd:87:97:dd:68:00:79:84:7e:03:50:4a:
25:82:64:ea:82:82:25:71:56:ab:80:d4:7d:bd:e2:
0f:cb:a5:c0:6f:b9:24:80:a7:19:44:a6:11:f4:5a:
c7:44:b2:c0:8c:38:ac:9f:df:4a:07:80:15:5c:c6:
6d:48:9d:59:60:57:33:a3:a6:e2:eb:38:74:bc:af:
ff:fb:d2:39:bd:81:92:3a:75:80:26:a0:47:bd:0a:
02:dd:f6:c7:2b:36:4c:03:cc:b6:46:92:6b:8e:ec:
ef:4d:5e:3a:b3:86:61:cb:d4:4f:98:b4:56:1d:43:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:7F:DF:F7:D3:57:CA:A5:8D:41:6D:6B:8D:8B:E3:D6:9D:38:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8080CD1EC1A611EF9606407E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:56:e1:6d:fe:3f:40:85:21:4e:aa:e1:ce:56:f2:26:30:c9:
72:ce:0f:10:0f:0f:5a:47:d4:83:ec:5a:ee:14:33:16:88:88:
14:25:d1:c3:7f:84:3e:68:e7:6c:dd:c4:8c:fd:c7:d0:0c:d4:
a3:93:1e:0b:5b:16:bf:72:53:da:d2:8c:20:29:3e:e9:69:b2:
2a:2d:2c:11:19:c2:56:4a:82:d6:9d:11:64:d0:fb:49:83:04:
1d:c3:73:0a:14:ec:f2:51:fe:82:f6:f0:15:6b:4d:e1:43:75:
31:f0:90:4d:40:0d:cf:d6:74:d2:2d:31:6a:57:36:ad:13:00:
74:8b:06:a3:aa:35:ed:ce:65:ee:47:76:0a:ba:fc:40:70:78:
59:8d:50:9a:2e:91:ee:62:1c:19:14:19:c1:ce:0e:95:90:fc:
29:37:93:bc:83:92:c6:ac:15:f2:c1:18:65:44:c5:e7:05:cc:
bc:1b:23:72:c9:7a:06:20:a5:f6:56:bb:5a:e6:a9:a4:e9:e7:
4f:c3:ab:4b:2c:86:26:1d:0a:e3:96:3f:5d:75:dc:1a:58:84:
05:25:73:0b:ca:a0:00:02:59:da:69:21:c1:35:a3:40:6f:55:
1f:0e:82:ec:c6:27:0b:4c:3d:fd:df:da:40:dd:9a:05:b6:44:
61:02:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:58 2025 by rpki-client