Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96ADC414C65311EF8FC6B4BD762E951A.roa
File: 96ADC414C65311EF8FC6B4BD762E951A.roa (raw, json)
Hash identifier: 3DaA+FVaGOPOZulSGSKXQq1SuXlBWbZaBozXcJiM/Dc=
Subject key identifier: 60:A3:CC:F4:FF:10:A7:F0:96:25:5E:08:F8:0B:46:37:1C:84:AD:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01305A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96ADC414C65311EF8FC6B4BD762E951A.roa
Signing time: Mon 30 Dec 2024 02:12:58 +0000
ROA not before: Mon 30 Dec 2024 02:12:55 +0000
ROA not after: Fri 12 Dec 2025 02:12:55 +0000
asID: 984
IP address blocks: 154.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77914 (0x1305a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 30 02:12:55 2024 GMT
Not After : Dec 12 02:12:55 2025 GMT
Subject: CN=677201aa-b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:b2:34:2f:f5:47:a3:fb:ea:2d:87:94:76:
ed:49:e9:97:19:43:ed:5b:ff:3f:e4:09:02:14:e9:
60:97:f2:46:00:11:51:36:98:a6:9c:43:c1:f3:6d:
3e:42:60:b5:3d:fe:c4:b0:c6:ab:b5:2a:7b:8d:f0:
ec:35:a2:bd:22:b4:ed:1b:ff:d1:7f:1a:d1:0e:bc:
0a:d1:0b:8b:82:ec:97:d1:79:9b:e4:eb:53:0c:ab:
d0:13:eb:8d:90:75:d3:af:42:4a:f3:46:d1:72:54:
64:91:f8:3e:bf:8c:af:a7:41:11:a8:26:27:01:42:
e2:31:98:ab:37:0f:b1:36:ba:9a:23:f8:1e:ed:25:
ca:b5:35:48:de:45:e4:a5:c3:5b:c0:da:48:c8:2b:
aa:76:e9:3e:53:40:14:83:8e:6a:a4:e7:1d:75:fe:
0e:0a:ad:da:57:b1:a0:23:46:ef:0d:9a:41:a4:5e:
2f:62:e5:92:1b:52:e9:6d:8d:38:e3:81:a7:62:08:
62:20:e5:3c:d2:b6:75:e4:12:18:a3:82:ed:6e:e8:
48:c6:0b:8a:ec:0a:e6:ce:51:75:74:6d:70:da:cb:
d9:59:c5:17:06:b8:d7:73:03:f6:df:be:a0:3b:85:
49:47:85:c9:6c:0e:dd:91:05:a8:f9:21:3b:26:95:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A3:CC:F4:FF:10:A7:F0:96:25:5E:08:F8:0B:46:37:1C:84:AD:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96ADC414C65311EF8FC6B4BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:88:75:a5:12:83:cd:a2:1e:de:73:43:d6:8d:16:bf:bc:36:
45:33:44:4d:4a:e3:6e:cd:4a:45:4d:ea:f7:48:71:25:70:5f:
93:a5:00:41:4e:88:14:68:6a:63:1b:65:02:34:c5:9f:21:d0:
11:fa:b6:92:a1:b8:c1:ae:74:4c:24:01:c1:55:6a:38:8b:f4:
2d:31:c5:9a:9e:24:06:22:de:fb:7a:85:65:b5:2b:49:03:d5:
9f:ef:63:62:2b:40:09:ae:5b:64:10:f5:e4:94:83:36:c3:b5:
42:61:d4:14:f4:62:a8:a5:e9:12:44:d0:21:83:f2:0d:91:7b:
8c:a0:c4:9a:6c:7e:f2:b6:46:35:0b:2b:53:a1:8a:c9:11:d1:
68:f0:89:1d:c5:48:83:46:b3:62:ea:2d:b6:63:7e:1f:ed:1c:
f8:ea:d4:cd:9a:18:4f:54:5a:54:66:78:06:26:18:79:58:e8:
80:37:b8:84:44:be:55:34:1c:3c:47:c3:09:9a:eb:79:46:b1:
27:db:7b:63:1e:a8:09:c0:ae:9c:c8:e1:35:cc:2a:e6:09:c6:
d1:96:1f:ae:d9:7c:ab:43:2a:8c:d8:84:00:58:2c:30:23:15:
ff:5e:7b:16:c5:a2:df:e9:3e:1c:38:7b:67:05:3b:55:83:ee:
20:03:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client