Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9138728CC3D711EF83B1EB6E762E951A.roa
File: 9138728CC3D711EF83B1EB6E762E951A.roa (raw, json)
Hash identifier: jD/fqAMpzwrYHVY6nGh0tKVW9cPT5+Yzc2Y11DeZtyc=
Subject key identifier: E9:AC:3C:C5:E2:FB:20:3F:11:EA:E4:A9:57:F5:C7:BE:14:5A:91:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012882
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9138728CC3D711EF83B1EB6E762E951A.roa
Signing time: Thu 26 Dec 2024 22:20:09 +0000
ROA not before: Thu 26 Dec 2024 22:20:06 +0000
ROA not after: Sun 12 Dec 2027 22:20:06 +0000
asID: 17561
IP address blocks: 154.84.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75906 (0x12882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:20:06 2024 GMT
Not After : Dec 12 22:20:06 2027 GMT
Subject: CN=676dd699-959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:fa:40:0f:9e:15:4c:de:88:74:90:fe:21:
8d:9c:e6:73:ee:70:aa:27:58:d9:5b:f5:49:c6:8c:
08:58:5e:4d:96:8c:28:e0:d0:a6:06:4a:25:38:71:
13:76:04:a4:e1:61:35:68:2e:8b:04:bb:1a:d8:75:
26:63:5b:ad:73:c5:48:7b:e9:f1:f1:6d:7d:2a:ca:
7a:da:9c:97:41:01:ab:08:9e:a7:2f:e0:13:1c:09:
af:92:d9:da:a5:1b:ac:99:6f:c6:a1:c3:ed:62:f8:
c9:e1:41:55:70:5d:6e:86:56:26:b4:1c:21:1d:03:
30:9b:41:7e:18:3a:ab:b8:e7:4b:84:46:4a:88:c7:
ca:00:21:9e:ab:e3:a5:78:33:25:c7:ee:47:49:68:
38:5d:2e:d9:c2:2b:2e:18:ef:6d:1f:ce:02:10:1d:
a0:a4:95:78:95:9d:a8:c1:e6:d3:4a:aa:fe:9d:ef:
33:86:1c:cc:f3:3f:27:72:3c:bf:3f:d3:03:e8:21:
51:07:29:e1:14:74:b0:bc:b6:5f:77:28:6f:d8:82:
3f:e1:fb:6c:a2:22:f3:cc:b8:1e:1e:6a:f1:24:67:
ae:74:d1:34:bc:d0:ab:49:e7:b3:15:38:b9:b5:e8:
69:a8:8b:c3:d5:be:22:18:dc:75:a8:e4:15:cf:f2:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:3C:C5:E2:FB:20:3F:11:EA:E4:A9:57:F5:C7:BE:14:5A:91:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9138728CC3D711EF83B1EB6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:49:e5:9c:f3:43:a5:07:4b:5e:70:3b:6d:25:71:7d:5a:d0:
c8:2a:e9:23:b1:5c:07:f4:70:c6:05:cb:bc:02:04:cd:54:ed:
19:28:e4:0d:03:2a:11:90:6c:0c:69:2d:12:aa:b2:3c:08:3d:
90:80:57:31:fb:fe:65:8e:ba:8d:e8:e4:4c:9a:73:04:7a:98:
11:e0:d8:10:71:b1:be:3b:48:af:0a:8c:fc:b8:9b:0b:02:6a:
88:97:a2:0c:09:9f:43:62:4e:b3:1b:09:f9:4c:a5:fe:3e:2a:
e9:68:06:40:84:62:57:4f:7c:50:3f:e1:50:13:d3:87:07:7c:
c9:54:e0:24:9d:d9:d3:dc:c4:ce:a5:98:aa:92:ea:50:e8:ae:
d3:d8:03:2b:9f:89:06:cf:d0:22:ad:ef:d4:69:c4:57:9b:ec:
e3:7c:ca:65:60:fb:23:a5:2c:ff:2a:70:82:5b:78:7f:2b:60:
3d:7e:3d:c8:fe:cc:c3:4d:f6:6b:16:1e:6c:44:c3:df:fb:2a:
00:eb:96:91:16:c2:eb:5d:66:e8:e1:a2:cd:73:7f:97:fd:74:
08:2b:0c:34:e6:ce:42:21:73:af:5b:2b:4f:87:aa:f2:a6:1f:
4a:6c:d9:86:2c:11:bc:21:08:8d:b1:98:eb:fa:65:db:12:be:
3e:2d:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:10 2025 by rpki-client