Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DD7FF6C41B11EFB30D3AAF762E951A.roa
File: 94DD7FF6C41B11EFB30D3AAF762E951A.roa (raw, json)
Hash identifier: PPElWj3n0pqCffH67utACRJ4vqQJt1boIRuUIXLZ2MY=
Subject key identifier: E7:57:94:0D:83:55:E7:F8:78:84:EB:D1:75:9C:7B:12:8A:44:0A:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012989
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DD7FF6C41B11EFB30D3AAF762E951A.roa
Signing time: Fri 27 Dec 2024 06:27:01 +0000
ROA not before: Fri 27 Dec 2024 06:26:57 +0000
ROA not after: Sun 12 Dec 2027 06:26:57 +0000
asID: 17561
IP address blocks: 154.201.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76169 (0x12989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:26:57 2024 GMT
Not After : Dec 12 06:26:57 2027 GMT
Subject: CN=676e48b5-95bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:b6:32:d9:4c:69:58:14:6b:d2:59:29:72:
85:17:75:7b:e0:2c:fa:3c:1e:21:54:34:90:77:97:
85:b7:0a:13:d4:d6:8f:d2:e8:ed:36:4e:2f:30:36:
c4:3f:41:74:df:45:92:5d:d7:d8:3b:85:06:1f:d0:
f8:dc:a0:cc:fb:a0:a3:6f:fb:65:34:f9:06:26:6c:
e2:3c:b4:8a:65:28:2e:b6:1d:4a:90:ca:9d:f1:f9:
f0:87:49:26:20:62:2f:a6:3d:89:96:61:db:1e:46:
f2:1e:78:a9:7a:c2:8e:a1:5b:9f:ae:37:06:e0:1f:
ff:61:36:84:ee:f5:23:a0:61:9d:80:df:0b:90:8c:
8f:38:fc:2b:7d:30:27:5d:74:5b:a3:14:47:22:88:
de:39:f1:5f:d5:f1:45:1f:e2:b8:02:e8:83:aa:cf:
73:d9:ba:5e:e4:69:19:ed:1d:61:a1:1a:47:4f:20:
26:bd:a0:b8:c2:0a:90:e4:3c:d8:b2:5c:3b:17:b7:
72:f9:e1:2e:16:95:b6:3f:d6:68:94:dd:d9:7c:8b:
26:96:05:69:83:25:e0:10:b7:2a:1f:67:94:19:69:
86:1f:d3:fd:54:f2:80:c1:81:77:83:fa:ab:7f:06:
f2:b5:1f:29:4b:bd:cc:65:50:3e:99:71:d3:52:4d:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:94:0D:83:55:E7:F8:78:84:EB:D1:75:9C:7B:12:8A:44:0A:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DD7FF6C41B11EFB30D3AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b4:91:84:2c:8f:82:30:e5:2c:39:fb:13:19:7a:e8:90:c1:
d5:21:c5:da:88:5b:1c:5e:d0:fa:9d:1c:95:30:b2:17:db:54:
f4:05:dd:0f:82:0f:0d:78:b6:19:9a:4b:15:79:1f:4f:01:38:
a1:66:9e:59:2f:c8:c4:9a:25:4a:db:c7:81:4f:96:cd:85:6d:
e6:25:25:de:d6:2f:0d:60:36:1b:fb:f3:f6:03:97:fd:91:1d:
a5:45:43:b7:6e:bd:2b:5e:13:35:c3:f8:b3:67:1e:01:09:5e:
56:f0:55:b7:94:77:df:c1:83:83:b7:5e:24:4e:b4:a4:fc:97:
62:90:13:5f:38:26:3b:c5:87:e3:bd:c2:e8:41:1c:64:d6:1f:
4c:8b:58:5a:24:15:d9:d7:9f:72:49:32:42:4b:f4:41:36:b6:
6b:fa:3a:4d:af:08:38:75:23:04:94:f4:88:ad:7b:5b:65:56:
e2:a9:79:19:ca:ae:ab:d3:5b:3b:2d:90:82:30:3f:b5:b0:2b:
9e:0e:ef:97:1e:46:f1:dd:3e:cb:57:a1:d3:93:44:bc:4b:3b:
87:ff:53:ed:2b:ad:46:63:7b:cd:f9:bf:08:4c:af:e1:24:9e:
25:99:26:1f:9e:f4:8f:c7:9e:fa:17:ae:98:aa:d4:22:58:fd:
07:bb:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:33 2025 by rpki-client