Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858C5FCABDD811EF993AFC86762E951A.roa
File: 858C5FCABDD811EF993AFC86762E951A.roa (raw, json)
Hash identifier: J80Qk6sOlXflJzvEAdLz+TgXR2yr16hiJUwqhKJuNRY=
Subject key identifier: 47:A7:15:86:19:D2:E8:8A:71:D5:8D:7C:58:FB:C1:3C:49:EE:E8:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858C5FCABDD811EF993AFC86762E951A.roa
Signing time: Thu 19 Dec 2024 07:11:52 +0000
ROA not before: Thu 19 Dec 2024 07:11:49 +0000
ROA not after: Wed 25 Jun 2025 07:11:49 +0000
asID: 201411
IP address blocks: 154.84.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72669 (0x11bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 19 07:11:49 2024 GMT
Not After : Jun 25 07:11:49 2025 GMT
Subject: CN=6763c738-f49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:d1:e5:a5:73:05:1b:ef:2b:0d:44:de:8d:
b3:e5:ed:ba:30:10:4c:95:16:b6:4a:4e:8f:92:e0:
69:e2:fa:dc:ba:3f:fa:51:d5:1d:1d:94:e8:d1:2f:
29:2d:3e:74:d5:e3:e1:40:25:fa:73:d2:20:04:73:
51:aa:18:36:93:35:ae:78:0d:47:08:8f:3d:30:41:
98:ce:94:0f:85:2b:e0:e8:37:9a:df:25:c6:b2:3e:
f2:a5:c8:77:18:1f:9b:62:b5:78:78:4b:01:8f:0b:
cc:d0:ba:f2:5d:fb:f5:d0:e7:5b:b3:e8:96:bd:71:
aa:72:2a:ab:bf:7c:e1:8c:fd:d4:b2:00:84:16:ae:
96:4a:aa:09:a7:09:ce:49:ce:f7:8b:0b:a5:5c:df:
39:c8:c4:ae:86:85:a7:c5:20:c6:6a:5d:f1:54:c9:
65:22:92:1a:fa:aa:2e:01:64:36:e2:57:31:62:06:
d6:5b:1a:47:35:5d:62:6a:4b:4c:c3:4b:e4:d8:4d:
7f:e8:9f:9d:d6:0f:fd:62:fa:49:c8:87:74:9b:43:
6a:e0:76:36:bd:2f:5d:3d:9f:7f:3b:76:92:32:41:
87:c6:5a:81:21:8b:3c:e9:0b:85:c9:58:66:ce:22:
2e:de:40:ac:07:e1:c9:51:e6:c4:6c:18:5b:d1:12:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:15:86:19:D2:E8:8A:71:D5:8D:7C:58:FB:C1:3C:49:EE:E8:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858C5FCABDD811EF993AFC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.156.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8d:2e:0e:91:68:05:47:87:fa:30:8b:04:e7:c3:47:2e:93:
85:77:fe:47:8a:13:15:27:3e:a4:25:49:b3:1c:61:70:21:ca:
f3:79:22:84:cf:c2:c2:61:47:e4:a3:42:12:eb:c4:c5:c4:a4:
b4:5d:a2:6f:83:6b:3d:e4:5a:a3:9c:61:f4:d7:d9:a2:a4:51:
a0:3f:79:f9:c6:4a:ff:57:d1:20:5a:4e:ad:f6:f7:dc:20:7f:
91:e2:d1:67:20:e0:36:27:8f:ed:4f:e3:75:1a:2d:83:3d:e3:
b8:b2:f4:be:79:e0:a1:b7:5a:65:92:c7:89:97:92:94:05:78:
ae:a9:5f:c6:d7:5e:00:94:20:2d:64:39:17:d6:76:f1:af:b2:
ec:fa:7a:5e:fe:78:f3:dc:35:d3:d9:aa:63:84:02:25:5d:3a:
2b:92:60:c3:5a:78:bc:1c:04:3a:41:d3:94:e7:c1:66:2e:d9:
e0:46:1c:0e:96:33:67:2a:cf:af:03:7f:52:57:a5:d2:a1:e1:
57:c1:0f:11:86:e1:94:36:80:71:11:2f:5e:f0:da:ee:28:4e:
55:c7:4e:17:c3:b2:06:21:b1:2b:96:7b:16:ae:7d:f4:d8:58:
dd:48:df:42:1d:c4:06:ce:be:2a:06:7b:6d:b0:e8:40:7c:0e:
6c:55:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:20 2025 by rpki-client