Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D082F4C42011EF9B0A324F762E951A.roa
File: 96D082F4C42011EF9B0A324F762E951A.roa (raw, json)
Hash identifier: 4Twwl5zKNEBayhcUcsve7sCRSCUcQTtN8VIXsB9x9aY=
Subject key identifier: 39:64:C4:46:B9:5E:B5:21:16:27:D7:16:63:50:11:44:4F:C1:06:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D082F4C42011EF9B0A324F762E951A.roa
Signing time: Fri 27 Dec 2024 07:02:52 +0000
ROA not before: Fri 27 Dec 2024 07:02:48 +0000
ROA not after: Sun 12 Dec 2027 07:02:48 +0000
asID: 17561
IP address blocks: 154.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76219 (0x129bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:02:48 2024 GMT
Not After : Dec 12 07:02:48 2027 GMT
Subject: CN=676e511c-d6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:5a:98:44:1f:d0:70:d0:34:95:2f:84:ea:
53:b9:b9:45:b7:db:c5:47:96:f4:9d:90:8c:68:fd:
19:a3:00:b5:55:f3:64:2e:76:94:4e:5a:c7:4b:15:
02:03:15:4f:be:ab:e4:6d:73:c2:e8:54:b6:02:7d:
8c:18:f8:88:22:9f:63:8e:7a:b4:c8:2d:bf:18:60:
3d:42:78:35:9c:aa:41:6f:3d:14:47:85:46:b8:a2:
bd:89:2c:45:db:a0:0e:1a:f3:16:16:76:c3:0c:a5:
73:ff:a4:3a:b0:43:16:69:ab:1c:a1:d3:97:02:e9:
b5:61:aa:05:d1:16:28:f0:1f:55:52:08:dc:6b:77:
1f:71:20:cc:11:ce:bf:ef:f5:5b:da:cd:6a:cc:d1:
9e:f0:b0:b5:a1:1e:89:5f:fe:46:ec:33:ba:21:57:
01:c6:35:63:5e:3d:24:f3:42:a3:3a:21:7f:6b:19:
ab:a3:b2:91:52:05:5c:a5:70:2d:73:db:b2:22:b0:
14:6c:92:f6:72:c0:ac:c3:20:d0:9b:41:fe:2b:39:
cd:74:c5:f8:b8:38:11:59:2b:6c:cb:46:1f:f4:d3:
67:64:1a:60:1f:7a:af:fb:54:a9:d2:73:36:57:46:
13:9e:ea:f3:34:fd:22:d3:fd:c8:ab:56:22:f9:e1:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:C4:46:B9:5E:B5:21:16:27:D7:16:63:50:11:44:4F:C1:06:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96D082F4C42011EF9B0A324F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:62:b3:24:57:97:55:5d:60:91:fa:12:31:7c:ca:2f:69:5b:
f9:de:65:0e:08:f2:9f:de:b5:05:6c:8c:d2:fa:0e:86:ad:6a:
12:c3:af:4f:95:c9:b8:f8:cc:cb:09:05:c5:b4:b3:1d:62:76:
92:03:4d:00:fc:47:19:ce:9e:85:06:6d:89:a1:57:c6:71:17:
ff:5d:ef:c6:8b:e7:8b:e0:d9:48:b7:34:65:35:8f:9f:c4:d2:
dc:a7:e4:a0:8b:94:9a:c6:a8:85:a0:cf:20:63:3c:42:6d:d6:
5a:60:98:f8:25:e0:49:18:d9:9e:5b:b2:05:14:e8:90:a2:bd:
86:87:9d:c0:12:27:99:59:52:8c:7e:36:23:5e:bf:22:c9:e9:
61:07:9b:d0:c4:b1:e5:e5:f9:9a:19:7a:a4:ab:47:2d:bf:db:
a8:07:74:0d:ee:78:a3:2b:ce:34:d1:d0:f4:ee:4a:47:12:60:
37:8d:44:1b:dd:35:4f:6f:e1:d5:d1:07:6d:ab:51:eb:c9:53:
63:a2:0b:f0:73:64:95:ad:66:1c:2b:52:21:a1:f9:de:dc:02:
53:eb:df:ed:25:f2:f8:f4:e9:e4:04:0e:19:d7:4b:3b:7b:a4:
4a:65:66:18:93:d6:9b:58:2d:33:08:d4:5b:29:35:e0:6d:59:
95:b4:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:38 2025 by rpki-client