Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FACA7D2C1D711EFA2D999B2762E951A.roa
File: 8FACA7D2C1D711EFA2D999B2762E951A.roa (raw, json)
Hash identifier: luCHh8Ok6kRpg210UEQGTz3Vmj9RlC4OxIhGuZtDNiA=
Subject key identifier: 54:46:94:97:B0:B2:A3:69:98:F4:FF:C8:54:25:95:E1:E2:F7:A4:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FACA7D2C1D711EFA2D999B2762E951A.roa
Signing time: Tue 24 Dec 2024 09:15:05 +0000
ROA not before: Tue 24 Dec 2024 09:15:01 +0000
ROA not after: Wed 10 Dec 2025 09:15:01 +0000
asID: 984
IP address blocks: 154.194.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74457 (0x122d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:15:01 2024 GMT
Not After : Dec 10 09:15:01 2025 GMT
Subject: CN=676a7b98-eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:54:ee:01:f8:c6:6b:fa:95:3d:bf:da:3f:
8b:c2:04:1c:82:7e:6c:ef:d1:29:6a:5a:13:77:fb:
1b:c9:a6:eb:d0:72:4e:d7:d3:a5:f2:1f:c2:74:c8:
48:ef:9c:7d:04:00:a7:1d:b6:61:d0:61:5a:27:a2:
93:26:ae:40:f6:4e:38:cf:9e:59:c2:e9:f9:c5:47:
77:8c:2c:f1:10:b5:39:d7:73:b1:81:1c:3e:b5:62:
75:6f:86:64:b0:86:29:24:60:82:6a:70:29:f6:2c:
66:53:28:1a:58:53:e1:95:22:11:65:9d:92:34:7b:
28:aa:3a:98:3a:e3:b5:64:e5:02:3e:fe:a8:f2:b7:
e6:9a:97:d2:71:44:50:3b:97:8b:2b:4f:33:cf:a8:
26:0e:1c:2d:9f:5d:1d:b3:76:59:6b:04:91:ba:55:
3d:08:36:5a:c1:bb:fd:dc:ed:33:64:f8:e9:46:b1:
5b:da:02:92:4e:39:e9:66:ff:4e:ae:92:33:9c:4b:
e0:46:67:ba:60:44:94:94:81:68:18:53:b6:96:31:
60:f0:23:b4:2b:12:d3:b9:b4:d6:05:ce:ce:ad:06:
f9:87:31:1a:8b:d8:26:fc:51:81:1d:59:eb:66:b4:
2d:a3:90:4d:a2:14:f6:3d:41:77:77:5c:b5:62:17:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:94:97:B0:B2:A3:69:98:F4:FF:C8:54:25:95:E1:E2:F7:A4:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FACA7D2C1D711EFA2D999B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.225.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ae:21:ac:d4:c3:f4:16:69:5b:f6:bd:c2:ec:8d:db:bf:58:
ff:79:85:c7:f3:d6:68:35:62:2a:54:e3:d3:4d:03:da:fc:f3:
05:41:5b:27:63:de:7d:a1:33:d2:49:30:73:0f:99:7a:8c:04:
ad:74:77:99:fa:61:bb:6d:61:e4:23:cd:e3:2e:b0:25:24:d4:
7a:fe:26:36:3d:01:7f:b0:00:4d:10:71:23:95:67:52:98:de:
ec:a2:9b:cd:6c:63:f0:31:1c:a9:d3:21:55:9b:6e:2a:0a:6b:
fd:7e:95:2a:0e:ba:93:7f:69:06:37:c3:96:1c:dd:cd:8b:d8:
d9:86:da:53:70:73:17:ce:06:57:6f:b1:f8:cf:f7:f1:28:33:
52:2a:11:46:ad:1a:74:74:d2:74:17:0f:b6:b5:0f:37:8a:2e:
42:e9:86:33:24:33:4b:80:5f:ec:87:1a:d2:3e:0a:28:10:3b:
2c:62:15:38:c0:6a:85:6c:fb:67:d8:21:85:2e:a0:e4:39:48:
ed:10:3b:3b:eb:5a:dd:b8:7d:9a:ad:d6:c8:a6:d5:38:31:7f:
5a:eb:9e:1d:92:b8:a5:a5:4e:c8:cd:90:21:28:a8:af:cc:19:
0c:0e:40:aa:00:8d:dc:d0:3b:cd:3d:80:86:e6:5d:37:d7:4b:
82:16:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:32 2025 by rpki-client