Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E18E20B20D11EFA3213E54762E951A.roa
File: 82E18E20B20D11EFA3213E54762E951A.roa (raw, json)
Hash identifier: 3W/0/pn0dGyH5dCcxwAravyqeFn4rYZQNfP/5CGpjl8=
Subject key identifier: 53:8E:C1:C6:77:6C:04:43:C5:1E:B8:39:9F:89:59:F6:65:5D:1E:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01179A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E18E20B20D11EFA3213E54762E951A.roa
Signing time: Wed 04 Dec 2024 07:00:57 +0000
ROA not before: Wed 04 Dec 2024 07:00:53 +0000
ROA not after: Mon 09 Jun 2025 07:00:53 +0000
asID: 139871
IP address blocks: 154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71578 (0x1179a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 4 07:00:53 2024 GMT
Not After : Jun 9 07:00:53 2025 GMT
Subject: CN=674ffe29-6ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:74:c7:bf:f1:43:00:7e:69:da:e2:86:b8:
11:11:c7:10:06:0a:16:7b:4d:4c:c2:cb:a4:4b:10:
db:c5:aa:93:15:39:c7:c8:76:34:1e:c7:e5:de:ed:
ab:6b:ba:10:b4:f2:15:4e:22:f7:06:cf:9b:a2:d6:
94:52:1f:5e:47:9c:2b:ab:65:04:a3:19:bd:66:c5:
ac:f3:7e:18:a2:c5:c1:1f:4d:40:0f:df:c0:4f:4a:
3e:df:c8:71:9d:49:59:7f:67:b1:aa:1c:9e:ae:11:
b1:96:87:ec:ee:fc:0f:38:7f:75:ff:1f:88:73:70:
04:cb:9f:00:05:24:7f:54:c3:76:ce:5b:c1:b7:e8:
d1:d0:db:bd:64:7f:4c:d4:c1:30:c9:b8:b8:8e:aa:
36:ef:da:e5:ea:8c:9a:c4:21:bd:7b:1a:fd:ff:63:
b4:24:e9:57:ba:4e:6b:82:71:7b:69:d2:5f:17:0a:
74:fa:6b:a3:88:34:34:a9:8c:4d:f1:86:19:14:ec:
d0:80:cc:a3:11:95:7f:11:3b:10:34:db:3b:08:eb:
34:03:06:05:61:c8:3f:d7:76:52:d9:d2:fb:56:2b:
c3:e8:6c:6c:bf:34:1d:cb:ec:7e:04:af:65:a7:ca:
2e:79:bf:a0:78:2c:b7:73:d6:35:d8:78:d8:1a:ff:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:C1:C6:77:6C:04:43:C5:1E:B8:39:9F:89:59:F6:65:5D:1E:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E18E20B20D11EFA3213E54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:ac:16:c7:a2:b9:03:22:f8:f3:1b:fb:38:01:28:f3:1e:
dd:ae:fd:56:ef:46:83:b3:61:3a:9c:3c:00:f7:30:39:50:b9:
74:11:e9:39:54:27:2c:ca:c8:e5:73:38:c3:ad:ce:7c:d0:74:
63:d3:c2:ff:f9:b5:c8:e5:c7:32:42:44:54:95:a1:cb:5b:ff:
41:b1:ce:0e:d4:e9:c0:78:7e:88:0f:cc:3a:ee:59:cc:2f:08:
73:9d:21:c0:a1:d1:c8:c0:85:25:f9:6c:b1:ca:61:cc:00:42:
ac:38:05:37:46:f6:80:46:64:ea:c3:73:4a:b8:36:de:28:0c:
a7:e7:62:6a:40:cc:5b:18:10:43:eb:e1:df:81:97:a3:84:07:
d8:09:f2:7e:56:4b:ee:25:66:49:cd:67:3d:0b:42:39:78:33:
a6:24:89:e4:d8:a3:87:d8:d0:90:32:b6:e7:03:0e:2d:bd:ac:
29:01:fa:12:74:66:ad:b1:d6:af:a2:bc:17:33:aa:ab:c4:b2:
68:59:61:bf:13:17:f7:e6:4c:3d:66:df:48:92:49:fb:09:11:
a4:5a:b2:64:39:cc:ed:61:58:dc:a8:16:30:04:cd:79:24:ec:
1e:a8:f5:d0:56:a7:96:08:22:07:07:bb:4d:40:c8:4d:d1:d6:
ef:17:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:10 2025 by rpki-client