Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E774ECC42111EF9B191E57762E951A.roa
File: 94E774ECC42111EF9B191E57762E951A.roa (raw, json)
Hash identifier: 6/qW8qjMBHu5by2idFcxomaty3VrtUZZziQTgWFIpEk=
Subject key identifier: D3:7D:76:FB:25:0F:07:6C:7A:82:F0:8E:D5:8F:C1:B0:FF:7F:26:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E774ECC42111EF9B191E57762E951A.roa
Signing time: Fri 27 Dec 2024 07:09:58 +0000
ROA not before: Fri 27 Dec 2024 07:09:55 +0000
ROA not after: Fri 12 Dec 2025 07:09:55 +0000
asID: 984
IP address blocks: 154.201.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76229 (0x129c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:09:55 2024 GMT
Not After : Dec 12 07:09:55 2025 GMT
Subject: CN=676e52c6-7243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:d9:4e:2e:8d:d0:1f:16:f5:2c:4a:30:bc:
91:d0:ee:09:ad:68:8f:86:fe:fd:63:8b:20:e9:69:
6d:f5:06:a2:13:88:e0:04:ef:65:9c:25:28:c1:e3:
1a:e5:bb:9a:3a:33:6a:aa:fc:44:1d:44:ef:3d:f7:
17:08:32:ee:6e:40:43:3b:0b:85:7e:d6:44:16:1d:
dd:74:fa:b7:c4:b7:23:f3:d3:01:fe:03:c1:c3:8c:
05:e6:f1:a3:34:f6:77:f0:fb:97:04:b9:86:f1:8b:
6d:ad:74:4c:2b:d8:52:9b:58:70:27:95:6c:27:86:
af:68:1a:5b:11:a7:a4:16:71:cf:84:1e:b8:c6:0e:
3f:eb:44:3c:23:ad:6e:16:a0:2a:60:82:18:fa:ec:
fa:04:ce:04:c5:0e:4a:60:7e:bc:58:77:c5:f6:45:
57:3a:1c:38:0e:14:6a:98:95:1d:87:ac:62:39:51:
0f:ec:c9:fa:86:4d:f4:94:5a:32:13:e8:3b:2f:67:
d5:2d:90:ef:d3:67:6a:50:b6:b4:96:53:13:b4:d8:
50:a7:83:73:4e:29:7d:78:b9:d9:4b:df:3c:01:e8:
5a:c3:cd:6e:d2:09:37:af:dc:65:87:61:74:bb:c7:
94:8e:1f:19:f6:69:ea:a6:19:a6:3d:03:d2:3c:1b:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:76:FB:25:0F:07:6C:7A:82:F0:8E:D5:8F:C1:B0:FF:7F:26:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E774ECC42111EF9B191E57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.57.0/24
Signature Algorithm: sha256WithRSAEncryption
54:46:87:f9:85:35:93:32:62:2b:a1:cc:b8:ec:15:76:15:dc:
52:02:51:cb:bb:82:97:bf:4f:b3:52:f2:64:e6:08:fe:62:04:
f4:21:5b:cc:8f:c8:26:e2:73:e2:46:8e:15:7f:31:32:16:8c:
5e:79:61:79:0b:85:dc:9d:63:fa:01:ed:ef:2c:47:73:57:1a:
fd:95:c4:96:37:64:e8:84:94:c0:6a:f5:a2:48:aa:d6:87:75:
20:63:9a:f9:a1:c2:bc:1a:e2:db:0e:0b:5b:11:1c:a5:26:c1:
38:49:ce:74:67:86:7c:74:41:d9:fc:3f:7c:f0:15:2a:4e:ee:
42:4e:bd:b2:38:17:67:1d:df:b1:f5:c0:59:c5:ad:36:24:98:
92:60:aa:71:9a:0d:ca:72:d5:39:a8:44:bd:32:b4:60:d4:8d:
fc:ae:a6:7c:34:5b:b7:7d:20:90:bf:6a:a6:a9:e3:7f:ef:de:
78:60:3e:66:d0:53:98:08:68:87:4d:09:5d:25:51:63:f7:24:
92:87:c5:02:d3:5a:9f:6c:a5:6f:01:74:5f:b2:e7:55:da:b9:
b9:ce:6d:41:a3:e9:b3:a3:5e:45:30:25:de:60:0a:8a:d5:b1:
38:a4:e4:4b:e9:92:f6:f5:8d:c7:3e:09:aa:02:0a:6d:d3:09:
75:3d:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:17 2025 by rpki-client