Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C107902C1A311EFBA845768762E951A.roa
File: 8C107902C1A311EFBA845768762E951A.roa (raw, json)
Hash identifier: WvGZ7PU8tzHd5lHICtYHLPwaloxhuXCOCrvc+uhEmik=
Subject key identifier: 80:85:E0:A3:74:92:99:22:1B:39:3A:5E:B7:4C:1B:36:CF:17:52:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C107902C1A311EFBA845768762E951A.roa
Signing time: Tue 24 Dec 2024 03:02:45 +0000
ROA not before: Tue 24 Dec 2024 03:02:41 +0000
ROA not after: Wed 10 Dec 2025 03:02:41 +0000
asID: 984
IP address blocks: 154.92.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73937 (0x120d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:02:41 2024 GMT
Not After : Dec 10 03:02:41 2025 GMT
Subject: CN=676a2454-6d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:04:ee:cc:28:82:90:48:fc:61:00:d5:86:
a0:d1:a3:5b:8f:c5:25:8a:62:02:01:e7:0d:d3:23:
c8:3b:41:a8:7f:e2:77:91:51:b2:6c:f2:28:04:16:
70:80:fa:ea:3d:45:03:af:6d:87:53:99:23:99:bf:
45:10:46:11:80:6e:00:75:e4:50:52:9e:c8:ce:f8:
1e:2f:71:63:81:ac:4b:d6:fa:87:2d:d7:c3:5d:6e:
41:78:bc:88:66:99:e6:2a:37:36:2f:77:6f:14:a7:
f2:24:fd:e2:23:57:1a:ab:f4:9a:28:a2:17:b1:63:
4c:cf:7e:46:30:48:55:4b:b8:25:23:32:59:88:b8:
4c:de:55:a4:53:f5:69:65:89:e6:ca:a9:25:61:48:
55:3f:f8:24:41:2d:be:98:72:92:98:8c:03:48:42:
74:df:d7:e5:6b:7e:8d:16:b9:a9:ca:5d:aa:ff:4c:
f1:d8:3b:52:0d:5b:7f:c9:7a:d0:49:ef:3a:cb:f6:
b6:5b:75:87:7e:2c:a6:fd:8e:75:2b:23:0d:ff:7a:
70:8d:95:3f:97:f5:c6:0f:f0:5c:e3:c7:87:8a:b4:
5f:ac:8c:67:0a:fd:d7:13:0a:7b:dd:24:ea:58:54:
ad:e9:1c:58:c6:aa:a6:8d:90:4c:52:bb:80:d5:06:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:E0:A3:74:92:99:22:1B:39:3A:5E:B7:4C:1B:36:CF:17:52:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C107902C1A311EFBA845768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:bb:8c:0c:76:64:f3:41:eb:b5:74:20:11:bb:86:9a:55:ab:
35:08:14:88:11:87:7d:22:2e:dc:dd:31:b6:5f:f5:bb:1e:a6:
5e:d6:7c:5c:c3:c1:0f:8a:8c:9c:7f:a2:67:68:34:83:12:77:
a8:e6:4c:a1:22:be:d3:f5:2e:6d:7f:4e:a7:50:6d:dd:8d:56:
19:92:7e:d3:83:96:ee:91:c1:4a:cb:40:85:8d:52:fa:68:92:
2a:5f:6c:48:35:a4:71:ca:42:75:ef:43:4d:0b:99:60:64:96:
94:0f:8e:2f:60:f3:6f:52:7a:e1:9b:37:27:bc:24:1f:ff:94:
f7:66:b8:c8:40:1a:02:13:9c:e5:6c:d6:af:61:50:2d:be:fe:
58:67:21:6e:50:61:39:c6:74:16:8a:2b:4e:89:22:22:5a:d3:
20:92:85:04:eb:9e:72:94:d2:79:cf:22:a5:d5:dc:b4:48:1e:
ad:5e:6e:ed:5a:0e:1b:f8:ba:50:85:8a:91:66:c9:9d:1a:e9:
a0:ea:2e:b8:ce:28:fa:60:fe:fb:97:8d:99:9e:b7:fc:8d:b7:
6e:f2:b9:0e:4f:1c:16:19:d8:99:20:9d:d6:29:54:88:9c:42:
70:d7:6e:16:cf:25:0b:59:7c:5e:e5:97:12:56:f3:7e:63:bf:
f5:ef:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:56 2025 by rpki-client