Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8623306AC1A411EF84BE0670762E951A.roa
File: 8623306AC1A411EF84BE0670762E951A.roa (raw, json)
Hash identifier: iDIdzizNXSuiBdiMxuw58t3rT8pOojIVUQOMSKCh9oA=
Subject key identifier: D5:D2:8E:73:23:E7:26:D0:9B:F8:63:FC:29:94:A1:FB:88:6C:66:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8623306AC1A411EF84BE0670762E951A.roa
Signing time: Tue 24 Dec 2024 03:09:44 +0000
ROA not before: Tue 24 Dec 2024 03:09:41 +0000
ROA not after: Wed 10 Dec 2025 03:09:41 +0000
asID: 984
IP address blocks: 154.92.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73949 (0x120dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:09:41 2024 GMT
Not After : Dec 10 03:09:41 2025 GMT
Subject: CN=676a25f8-912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:b1:b7:8c:e0:aa:ad:28:bc:35:ba:a5:89:
77:dc:e5:2e:ef:56:25:7f:c0:0f:9c:43:f2:9e:ea:
f0:4f:f0:f1:2d:ee:57:21:41:b7:d1:bf:c6:50:4c:
23:1c:1a:4c:40:84:79:40:09:38:20:78:db:72:7c:
f6:b0:53:ac:f6:35:c8:0d:0e:e0:fc:85:e4:e3:70:
f2:50:e8:d0:90:24:fe:3e:1c:b7:d0:f8:88:8c:79:
94:16:c3:d0:70:94:d9:b5:10:f1:91:c7:46:69:c3:
0c:8f:8a:e8:c7:1a:af:c9:7d:a8:15:b6:fb:29:46:
87:36:2d:cc:0a:d7:2e:dd:cc:5b:18:02:da:5b:d1:
9a:e9:fa:94:1f:23:d7:b8:e2:cb:b3:8a:62:6f:88:
42:be:0b:b8:5a:c8:58:fe:62:da:68:0e:b9:77:04:
f0:88:ff:26:19:fa:52:da:37:bb:7b:d6:40:d9:5d:
10:9f:85:28:ad:d6:81:02:8d:8d:e0:21:91:ff:85:
d6:94:fb:63:d8:68:fd:02:80:0a:bf:45:f5:64:dc:
5a:26:c4:65:c1:34:c5:cb:cf:af:eb:85:ae:68:0f:
74:97:60:fa:d6:9a:5f:43:5d:07:82:e7:62:27:20:
b4:14:bf:af:06:98:97:a1:e7:4a:47:03:a1:2f:4e:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:8E:73:23:E7:26:D0:9B:F8:63:FC:29:94:A1:FB:88:6C:66:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8623306AC1A411EF84BE0670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:48:fa:72:5e:51:21:36:e3:8a:d9:32:b6:69:a4:17:86:56:
f9:a3:f0:52:12:e4:19:13:32:e2:74:e5:e7:e1:7c:e2:a8:1b:
36:ef:36:41:81:ad:7a:bd:14:86:be:e3:6d:c2:73:6b:04:36:
a4:23:ca:7f:35:38:96:25:4f:62:83:6f:af:9f:5a:30:54:ae:
0b:c6:2d:38:22:35:01:3b:9b:f2:b0:bc:5b:76:51:f0:79:5c:
ed:6d:4f:6a:7d:a4:38:ad:f1:24:91:e4:f1:af:7a:9d:18:8f:
3f:12:ec:59:89:f0:3a:4c:b8:2d:2b:bc:15:f5:ae:e6:d4:46:
42:b2:ab:b1:f3:ec:05:c3:5e:af:ae:58:ea:b0:61:0a:44:86:
94:d7:47:a1:24:10:48:4d:96:42:b3:55:d6:a8:b7:92:be:62:
23:d8:d3:61:12:bd:b4:f4:1b:e9:c9:4a:f5:7d:6c:d8:70:71:
37:e2:6d:fe:51:5f:62:3d:f0:dc:de:0f:55:43:c2:d0:ee:3f:
29:2e:fc:ed:21:29:a4:bc:c2:bf:04:27:c3:33:54:d9:6b:95:
b9:82:fc:d1:2b:ed:93:10:b2:71:3a:6f:e5:11:5e:c6:24:46:
6f:9d:56:69:72:86:56:79:7a:96:1a:a2:2a:f3:20:be:20:c7:
80:b3:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client