Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81088DE6C26211EFBB1281AB762E951A.roa
File: 81088DE6C26211EFBB1281AB762E951A.roa (raw, json)
Hash identifier: nnq9bf9FSM0zNo4e3j7YTSeOsZpqtQcOp4OQmPJB/1U=
Subject key identifier: 4A:ED:82:B2:FC:58:3F:09:01:B8:EC:51:5A:5C:2A:8B:8D:6D:CE:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81088DE6C26211EFBB1281AB762E951A.roa
Signing time: Wed 25 Dec 2024 01:49:40 +0000
ROA not before: Wed 25 Dec 2024 01:49:36 +0000
ROA not after: Wed 10 Dec 2025 01:49:36 +0000
asID: 984
IP address blocks: 154.199.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74690 (0x123c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:49:36 2024 GMT
Not After : Dec 10 01:49:36 2025 GMT
Subject: CN=676b64b4-b2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:00:db:b4:5c:dc:6c:ca:12:46:6d:3d:cc:
42:45:ac:b3:1e:b1:5f:b2:a9:a5:68:38:ac:ec:cb:
ec:4d:6b:2d:51:2f:40:52:f1:3b:7e:ee:29:ae:f5:
c7:af:02:5a:12:3a:95:30:0b:1d:f4:ec:48:60:37:
1e:6c:c2:4b:6c:71:e5:5a:cb:02:21:ad:44:87:6d:
9d:69:19:fe:8c:43:11:cb:66:84:7a:a4:96:3c:9b:
a0:55:cd:b1:38:81:7e:6f:07:f6:29:34:2f:4c:f8:
dc:7b:3c:39:f3:76:57:dc:b5:0d:9e:af:ec:c0:3c:
25:01:13:5a:9a:c2:53:77:3c:ce:04:bc:62:ad:fd:
a0:a4:d2:e8:ba:26:19:1a:59:99:6e:f0:bd:88:a5:
85:75:e5:ce:c9:df:bd:05:ab:d7:31:a7:9a:80:19:
dd:a1:64:bb:8e:5b:1e:8c:99:72:7b:0e:6a:ee:16:
30:98:55:4d:bc:a5:ff:33:6c:04:7b:91:90:61:c1:
5f:88:36:aa:1b:28:d1:70:46:3e:64:42:fc:4d:48:
93:2a:c4:06:43:10:c9:dc:94:c6:58:d5:b9:cd:f1:
64:fa:cd:06:94:35:30:92:7b:37:77:ee:4d:e8:cd:
72:c9:85:2f:d6:a5:bd:97:3b:58:cc:99:4e:b1:fa:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:ED:82:B2:FC:58:3F:09:01:B8:EC:51:5A:5C:2A:8B:8D:6D:CE:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81088DE6C26211EFBB1281AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:71:e1:69:fd:d0:2f:85:5f:72:0f:0c:d9:98:ad:30:82:c0:
15:3f:40:36:6c:15:0e:44:db:b1:13:bb:7c:3c:cd:87:8c:c3:
95:3f:c5:cb:4e:be:12:4e:ae:07:ac:b3:40:e3:00:ed:a7:b7:
fd:df:63:a3:61:99:48:c2:1f:d0:f3:45:25:01:cf:70:c8:11:
25:06:4f:71:c1:11:41:3d:20:6b:03:6a:d6:0a:e6:ca:34:d7:
f9:77:0b:41:df:68:f0:39:62:09:d6:b9:7f:16:95:35:d8:80:
d7:c5:fd:69:f5:e1:f1:bd:29:6a:8f:53:c0:f8:2c:9d:c7:61:
64:ce:71:f8:79:32:7d:74:b2:b2:ce:9b:45:01:74:7b:da:f2:
26:59:3b:21:36:3a:71:aa:bb:e1:1c:cb:d0:f9:ee:ea:a7:6a:
77:3a:2c:27:6b:4a:15:42:08:f1:25:f5:1e:bd:9d:8e:b9:39:
76:6e:f4:c4:48:86:a5:33:2c:fc:14:51:f2:65:6d:e5:e8:c9:
d3:17:76:82:d3:fe:be:bf:c7:84:e1:48:33:4a:ce:8e:7e:07:
6e:f2:1b:c2:0d:0f:77:4f:15:8e:fb:60:0a:ae:0c:2b:e2:06:
8a:5f:de:30:0e:eb:8d:69:97:1b:ac:8d:7e:09:74:4a:a6:8a:
ea:de:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:25:09 2025 by rpki-client