Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A2A928C1AD11EFA7F936AA762E951A.roa
File: 94A2A928C1AD11EFA7F936AA762E951A.roa (raw, json)
Hash identifier: /0wlZ/dW1j9aLixhaTa+zw2g0+ZVwmvnynzka9H7Tu0=
Subject key identifier: 4F:9A:90:F3:1C:6D:F3:59:FF:B9:8F:1A:AE:84:A7:60:60:9A:4E:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01214B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A2A928C1AD11EFA7F936AA762E951A.roa
Signing time: Tue 24 Dec 2024 04:14:34 +0000
ROA not before: Tue 24 Dec 2024 04:14:30 +0000
ROA not after: Wed 10 Dec 2025 04:14:30 +0000
asID: 984
IP address blocks: 154.193.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74059 (0x1214b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:14:30 2024 GMT
Not After : Dec 10 04:14:30 2025 GMT
Subject: CN=676a352a-e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:28:28:fb:7f:14:9c:56:67:c6:d5:fe:d7:
41:a3:6b:fc:69:8c:f6:18:7b:68:b6:42:3b:e0:ac:
f2:99:29:67:fe:37:db:59:53:ca:5b:eb:6e:d1:1f:
c4:df:d4:ff:07:10:4a:92:38:f5:a9:b9:7c:87:48:
71:26:ed:b9:31:07:02:51:14:5c:67:28:74:d9:3c:
d9:88:54:7b:78:0f:48:54:85:84:36:86:56:20:16:
81:7c:0c:19:7b:b3:e6:b2:fe:4c:87:d8:25:8f:10:
87:39:e5:95:2b:53:53:db:d8:6f:3c:c4:da:1e:6e:
14:c4:d1:6d:07:ff:e9:a2:50:88:d8:84:7e:1f:2c:
82:a7:21:e4:bf:9d:6f:8c:d8:74:c6:fb:81:65:2a:
30:90:84:88:33:f1:20:bb:f9:3b:d8:93:68:3c:83:
68:2a:8d:70:27:ab:79:9c:7b:5e:e1:36:99:1c:ba:
90:5a:3c:17:8f:6b:49:2e:ae:db:5a:6c:ee:3e:68:
a1:21:a1:08:27:ca:2a:27:73:b1:4d:34:82:81:4c:
4a:ed:de:8e:9d:91:ce:1e:74:1b:8f:96:7f:b7:43:
4d:ff:cb:27:9a:3f:0b:4a:29:e5:ad:c3:66:5a:ed:
2f:40:03:40:eb:14:9a:07:f1:6f:25:78:b7:55:dc:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9A:90:F3:1C:6D:F3:59:FF:B9:8F:1A:AE:84:A7:60:60:9A:4E:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A2A928C1AD11EFA7F936AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.69.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5d:53:bc:82:ad:67:cf:c8:7f:04:f3:92:78:01:21:fc:a4:
a6:8c:f0:96:d2:ec:32:0b:89:dd:70:e8:53:a7:de:37:b0:7f:
6e:b6:fe:18:69:fe:30:49:97:51:0a:bc:37:73:a6:5a:32:4f:
62:78:ef:ae:13:5c:02:35:76:66:1b:07:c3:42:52:7e:98:69:
0b:3d:cd:fd:6f:f1:95:c9:59:c2:57:f3:85:55:d0:79:fb:92:
88:e2:61:6e:2d:5d:03:77:96:9e:40:fa:a3:4b:1d:e5:93:de:
5e:dd:84:44:34:61:e3:78:44:7a:de:a8:44:53:70:50:28:26:
0b:f4:a0:08:b4:89:70:c8:9b:fd:50:af:59:a0:9d:6b:25:79:
64:0d:36:16:72:ca:18:16:d6:c6:63:2c:08:28:96:e5:26:33:
ae:23:d7:41:6b:fa:0f:5a:11:93:21:2d:c5:73:21:24:05:a9:
f7:97:cc:24:64:10:e5:90:e0:d6:4a:8c:2b:ee:05:21:a1:ec:
e7:9c:1c:01:05:9b:68:21:1b:6d:a1:c5:da:99:83:5d:b5:ec:
71:d5:9e:d9:2f:f7:08:88:05:d0:ab:b9:8f:7e:33:a8:cd:27:
b5:f6:25:d8:14:59:24:f8:b7:1c:57:bd:46:9f:34:cd:0f:a9:
bf:69:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client