Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B68A26C0CE11EFB142DF9B762E951A.roa
File: 95B68A26C0CE11EFB142DF9B762E951A.roa (raw, json)
Hash identifier: DSBsW/x3mf3g09ousq3NSprpz6rkswBUeSrhP6ClBmc=
Subject key identifier: B6:10:20:3A:CA:55:2C:6A:72:E8:29:19:AA:1E:F9:1C:31:6A:1D:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B68A26C0CE11EFB142DF9B762E951A.roa
Signing time: Mon 23 Dec 2024 01:38:18 +0000
ROA not before: Mon 23 Dec 2024 01:38:14 +0000
ROA not after: Wed 10 Dec 2025 01:38:14 +0000
asID: 984
IP address blocks: 154.83.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73256 (0x11e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:38:14 2024 GMT
Not After : Dec 10 01:38:14 2025 GMT
Subject: CN=6768bf0a-c725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:16:09:16:db:e2:e1:74:43:63:4e:d9:3f:
3a:90:00:5a:96:87:ed:8c:35:64:54:a1:39:f1:07:
47:0d:fb:b3:fe:d5:db:c6:f5:8e:94:8d:03:4c:b9:
ac:57:09:ee:1e:95:fe:3e:e4:9a:bf:7d:b6:74:d2:
86:61:6f:ce:02:2a:12:aa:9b:4a:31:09:28:6f:b8:
0a:7d:ae:65:9d:d9:90:b6:9f:43:5c:e6:64:e6:bc:
8b:0d:0f:4e:98:3c:30:ed:3d:d0:61:a2:ca:6b:d1:
33:c6:f1:e9:8f:ce:44:31:60:3f:fa:6d:1f:d0:20:
c4:d7:c0:9e:75:1d:41:ca:ac:bc:a6:fa:71:a7:7c:
da:87:c2:45:08:c5:c7:5c:53:55:b5:bd:4b:09:95:
aa:59:13:c5:e0:87:02:05:f5:05:a3:b5:6a:c4:48:
02:c5:c4:16:33:c5:ae:79:4e:dd:0e:fc:57:d7:36:
03:a1:c7:d1:54:cd:73:55:d0:0e:ff:0c:89:ef:4a:
7d:ff:fa:7b:f4:38:6d:94:22:f3:b3:c9:a4:71:04:
1b:2d:e3:df:2a:a3:bd:94:ac:eb:e5:2a:34:a0:41:
ac:97:ee:d1:3e:ab:6c:28:81:b2:4d:fa:90:d2:0b:
b3:e6:7d:ed:9a:a8:02:c3:0d:cf:4b:02:05:56:8e:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:20:3A:CA:55:2C:6A:72:E8:29:19:AA:1E:F9:1C:31:6A:1D:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B68A26C0CE11EFB142DF9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:09:1e:3f:ba:49:83:6c:02:18:89:af:2c:1e:7e:cc:41:09:
96:93:6c:d4:96:d6:d7:00:a9:40:fd:de:07:6f:01:29:d9:92:
b4:0a:4b:47:36:2d:12:2f:7f:b6:75:e2:f9:81:e0:c1:ef:66:
fa:19:fb:c7:93:23:54:48:0b:79:92:3e:7c:c3:8e:f8:30:df:
d3:87:d9:74:8f:7a:99:d2:04:b5:0b:f4:1c:34:f9:df:da:8e:
d0:dd:d4:63:6a:89:a9:a3:60:98:07:d4:5a:bd:8b:6a:8a:a9:
cc:d4:20:21:8a:de:db:27:e3:0d:e5:91:9a:b1:f1:93:8d:bb:
52:4c:21:09:02:63:4b:ee:f6:2c:ac:25:e2:13:3d:df:47:f5:
c0:cf:08:b3:56:29:2d:82:73:54:39:07:ad:38:30:b5:80:db:
13:42:5a:28:3c:0d:e2:b8:1e:14:f7:00:3f:43:0c:e4:dd:8c:
57:58:d2:d0:09:41:1e:0c:c4:78:7a:8d:95:e4:42:5f:bd:2a:
ca:92:be:15:ac:d5:2a:7e:77:ec:05:ce:c2:23:24:7f:26:03:
26:dc:5e:21:ba:57:16:61:da:77:1b:c5:01:ca:d4:f4:63:2f:
8d:66:b6:b9:ed:f6:ae:42:dc:c4:84:02:81:d3:79:ca:0c:18:
a1:9a:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:22 2025 by rpki-client