Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82924E30C92011EFAC1D9C89762E951A.roa
File: 82924E30C92011EFAC1D9C89762E951A.roa (raw, json)
Hash identifier: 5H8DLL3zBJWOZpcwjCCx54IR4qQjXq80nVKELHPJAvg=
Subject key identifier: 96:4E:CE:75:B9:0D:73:3D:3D:61:3F:30:B1:20:B8:6C:F1:52:F6:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013327
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82924E30C92011EFAC1D9C89762E951A.roa
Signing time: Thu 02 Jan 2025 15:44:54 +0000
ROA not before: Thu 02 Jan 2025 15:44:50 +0000
ROA not after: Mon 13 Dec 2027 15:44:50 +0000
asID: 17561
IP address blocks: 154.222.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78631 (0x13327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:44:50 2025 GMT
Not After : Dec 13 15:44:50 2027 GMT
Subject: CN=6776b476-6cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:b4:58:f9:29:36:50:f5:4d:93:b9:a3:8a:
11:07:d8:56:0f:81:04:6b:44:f1:a3:44:af:66:a4:
31:eb:15:6f:e1:4b:b1:9a:36:c8:98:36:39:48:36:
5e:1f:64:50:c4:98:41:85:a6:ee:d1:f5:94:58:31:
54:e0:fb:72:6d:44:05:3c:96:ca:7b:dd:60:63:04:
d5:93:29:00:31:07:c6:21:4b:9e:9c:34:c9:1c:1f:
ea:38:69:7c:a8:e9:04:99:a1:ff:4a:40:d8:94:8e:
24:71:c3:92:99:7e:ad:47:74:c0:d9:9c:03:44:73:
f6:b9:5b:d0:94:93:65:95:1b:9c:30:7c:59:82:91:
d5:6e:aa:41:e9:88:71:b7:62:bd:d6:d1:f8:21:08:
66:57:ca:78:44:85:84:ab:1c:4f:93:d2:b9:9c:44:
c9:ac:74:2f:df:86:3b:65:2a:25:86:33:9b:14:bc:
68:77:a5:eb:35:25:6e:5a:a3:ab:88:c5:58:51:92:
09:74:3d:ba:d2:67:55:37:3c:e8:49:a5:49:c6:a9:
94:24:3b:5d:48:e5:1e:04:ca:5f:1a:0b:3b:d3:63:
17:ea:0e:f8:92:27:bb:74:24:43:ec:e5:3b:e1:f6:
c4:fb:49:51:2a:3f:fa:5d:0b:5e:45:29:41:94:64:
da:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4E:CE:75:B9:0D:73:3D:3D:61:3F:30:B1:20:B8:6C:F1:52:F6:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82924E30C92011EFAC1D9C89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:59:d7:e3:b5:c1:a6:3e:91:f5:1a:e2:5a:cf:26:ad:d1:5e:
93:88:24:82:aa:ce:65:53:ce:46:9e:ad:18:86:d0:68:b3:50:
4e:57:f9:ec:03:23:8f:1c:f1:73:2d:cf:8d:48:85:3a:ff:4c:
ec:9e:14:89:88:a4:63:09:8c:aa:da:18:6d:29:44:fe:ca:7d:
02:ec:97:59:ed:4b:3a:a6:8e:eb:39:83:57:47:2c:12:80:12:
94:92:35:40:2f:2d:04:30:9a:5d:1a:61:ba:dd:c6:1d:d6:a6:
fb:04:9c:97:b6:a5:e9:88:96:8e:0b:46:9e:ec:a5:f9:73:65:
f7:c8:ce:82:fe:3d:cf:65:d4:9a:2c:7d:c4:88:ff:47:90:75:
1f:eb:63:e3:11:f6:9b:59:41:db:f5:9e:09:79:15:8c:95:25:
09:07:39:fe:95:c3:b8:8c:90:e5:3b:11:59:68:cc:e6:e3:e4:
7b:8b:ad:c2:8c:68:00:a6:5c:38:57:f9:c6:3f:10:db:cb:68:
47:77:ad:dd:35:fe:94:37:93:bc:99:53:c2:06:aa:e5:5c:cd:
e1:09:48:4f:13:08:5d:aa:b3:67:e8:3c:ae:bb:1b:13:ff:93:
7f:4c:1c:18:61:55:4f:73:7d:3f:27:4e:ce:41:ae:97:4a:8e:
c9:a0:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:41 2025 by rpki-client