Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D13003AC53711EF97D301B0762E951A.roa
File: 8D13003AC53711EF97D301B0762E951A.roa (raw, json)
Hash identifier: VX+J5EF2HA0Wc7i7DaIp7nT7vXFRa/0wc4tq3FJ3M80=
Subject key identifier: 81:74:71:0D:9D:9A:66:EF:A8:23:DB:96:06:17:9E:B9:7D:58:4C:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D13003AC53711EF97D301B0762E951A.roa
Signing time: Sat 28 Dec 2024 16:19:45 +0000
ROA not before: Sat 28 Dec 2024 16:19:42 +0000
ROA not after: Fri 12 Dec 2025 16:19:42 +0000
asID: 984
IP address blocks: 154.204.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76837 (0x12c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:19:42 2024 GMT
Not After : Dec 12 16:19:42 2025 GMT
Subject: CN=67702521-1dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:bf:d3:91:b4:36:58:be:7e:67:ae:38:00:
a8:1e:d1:06:58:82:84:c1:cf:10:c6:80:54:21:0c:
12:d6:c4:7b:cf:fd:94:31:c9:f0:c5:d9:0b:2c:1b:
4b:21:74:93:55:51:46:13:68:12:77:64:52:fa:14:
4b:d8:70:a2:93:08:05:06:db:30:0f:f6:7e:ac:48:
0c:0b:8d:89:53:8d:36:bd:43:92:cf:f5:93:0b:04:
30:74:b8:40:0d:d1:37:af:94:4c:c5:69:18:12:c5:
a3:2a:b3:50:df:ff:2f:f3:6e:ee:b3:b8:6e:7d:64:
e6:e0:04:42:0c:35:83:7a:40:2c:79:b9:38:3c:5f:
f6:ca:9a:01:55:ef:cf:b6:09:81:ca:f6:8a:9a:fa:
db:33:01:eb:bb:ba:d6:53:70:4a:6a:1a:b1:46:54:
30:32:a1:15:92:ea:0d:c5:e4:e7:3c:f0:6c:fa:d6:
dc:59:ac:d3:3e:92:b4:8c:ec:64:cd:0e:bd:1f:af:
de:37:b8:96:ab:30:af:01:67:c4:a9:f9:cb:c8:40:
12:32:16:2f:b6:78:fd:01:25:46:6d:82:ce:24:09:
9c:c2:d3:56:1a:44:7e:2d:31:06:70:f5:46:1b:72:
42:7f:cc:0e:c5:c0:16:ce:9a:f6:59:ea:2f:78:2e:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:71:0D:9D:9A:66:EF:A8:23:DB:96:06:17:9E:B9:7D:58:4C:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D13003AC53711EF97D301B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.123.0/24
Signature Algorithm: sha256WithRSAEncryption
01:75:b4:2a:b0:a8:1b:30:9a:25:76:d4:54:d6:d1:b8:1b:13:
77:9e:2b:8e:65:88:02:22:f5:34:96:14:4b:59:6b:31:35:47:
0c:21:9d:13:ed:0f:8b:87:8a:99:6d:1f:98:78:a9:90:a8:22:
bb:fc:3e:fd:81:21:27:e4:4e:c4:ce:5e:79:1b:06:43:a1:16:
e2:fc:90:e3:35:c8:18:d6:65:a2:e8:4e:6a:84:cc:d7:4e:ac:
44:23:36:74:f6:b8:d7:c0:e3:3f:47:22:9b:2c:e1:f2:ac:1f:
de:6f:fe:4a:70:26:75:32:1b:21:f9:b6:a1:45:3f:e6:73:fe:
7e:60:48:c6:0a:0f:89:b9:f9:5c:7f:e2:b9:88:c4:f6:16:9c:
12:ad:e6:11:49:f5:1a:55:07:ac:c0:8f:8d:97:5b:db:e2:77:
a0:ee:7f:c4:06:2b:37:90:6f:af:5e:cc:2c:c7:36:8b:dd:d8:
d2:4f:e3:e4:55:fc:0b:bd:0f:74:ff:ed:8d:35:b1:99:bb:00:
18:bf:08:4f:3b:8e:71:c8:5d:26:5e:e2:b1:d9:74:19:d7:ab:
60:13:3a:94:08:73:9f:9c:2d:2f:d0:6c:e7:1e:ac:3c:e5:63:
c7:81:48:b1:1f:93:74:e8:af:ae:39:b7:6f:cd:cc:69:1e:56:
d5:63:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:08 2025 by rpki-client