Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869E620C0D111EF9668F8B2762E951A.roa
File: 9869E620C0D111EF9668F8B2762E951A.roa (raw, json)
Hash identifier: s9xdL6/uB15Sm8PuhzY1eAoWTnG8Pa/xHPLipb2s4ak=
Subject key identifier: 59:5A:AB:B2:41:67:76:86:AE:86:12:69:08:FD:C3:AD:0C:DA:C4:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869E620C0D111EF9668F8B2762E951A.roa
Signing time: Mon 23 Dec 2024 01:59:51 +0000
ROA not before: Mon 23 Dec 2024 01:59:47 +0000
ROA not after: Wed 10 Dec 2025 01:59:47 +0000
asID: 984
IP address blocks: 154.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73276 (0x11e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:59:47 2024 GMT
Not After : Dec 10 01:59:47 2025 GMT
Subject: CN=6768c417-b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:a0:18:85:83:7d:aa:52:ac:db:41:15:90:
d3:28:c5:27:de:e6:16:13:1a:32:26:2d:5b:c7:8f:
27:b6:c8:f6:e3:2a:f5:64:f7:e8:fb:24:7f:de:64:
94:17:2f:f5:fb:21:c9:01:f6:81:ac:00:2d:51:b1:
f4:37:d7:7d:80:21:db:84:ef:f3:ef:54:a5:56:10:
2c:b4:b1:ef:f2:cc:97:73:9b:47:ce:9c:1f:10:74:
2d:c3:3a:c1:ee:b0:d8:99:42:3b:76:03:d9:c8:f8:
37:7e:fe:ee:fe:65:7c:c8:16:0c:77:92:de:4b:69:
04:ce:ab:d5:2f:7b:bb:c4:f5:e5:a5:d5:a1:1a:88:
4c:86:f2:db:d9:d9:d2:1b:6f:fc:7a:07:e6:b5:7d:
22:69:90:41:dc:49:a6:18:da:24:f5:cd:ef:e3:ca:
18:0d:72:e9:c9:0b:eb:f0:65:eb:19:71:c3:2d:84:
c0:22:48:d8:bd:87:82:68:37:c5:5b:b0:a5:ba:d1:
06:d7:0b:42:10:f8:99:cf:ae:76:14:76:9c:cc:d1:
60:15:ac:cf:de:f8:dc:ba:29:fc:98:c8:7d:af:fb:
1c:54:4a:7c:58:01:e3:81:7b:4f:8f:85:60:cf:62:
c1:e3:d5:9f:68:2e:2b:ac:a8:52:25:f3:e9:28:40:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:AB:B2:41:67:76:86:AE:86:12:69:08:FD:C3:AD:0C:DA:C4:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869E620C0D111EF9668F8B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
14:12:70:33:24:ea:1d:8f:df:b8:fe:9a:3f:ab:fe:21:5b:0b:
18:31:f6:64:d7:6f:95:ba:d5:9d:ed:bc:23:6c:fc:62:72:d3:
81:dd:89:7e:66:be:eb:8c:85:60:51:78:67:a2:04:fe:21:bc:
73:58:29:e1:c0:19:48:fb:69:62:d7:b0:83:9a:71:a4:fb:76:
53:df:30:f1:82:b5:6d:9f:0e:6d:ce:af:9a:c3:03:bb:54:64:
22:4e:31:e8:61:78:c4:01:12:7b:37:f3:03:29:78:15:d0:d7:
1e:eb:8e:7e:4e:50:5f:ec:23:f1:1f:95:76:65:a4:2b:bd:ce:
be:e7:f5:82:fe:a2:4d:2c:55:db:3b:08:8e:21:5d:89:d7:bd:
b9:18:99:85:43:30:9a:f3:9f:9e:3f:2d:41:4f:31:65:fb:54:
74:64:31:eb:9e:b7:4a:25:39:0c:86:9c:4d:2c:fa:fa:ea:fa:
26:49:b6:da:a3:24:38:a1:c5:4e:4f:e1:1c:1d:e2:bf:a3:5b:
eb:b9:fa:49:88:a5:71:e4:ec:54:c8:55:3c:cb:3a:bf:a8:aa:
b2:78:48:18:1a:d6:04:7b:2c:42:d7:f3:ea:ee:88:1c:4f:d0:
0a:e9:33:af:b5:4c:41:b6:28:c7:1e:2f:48:a3:f2:b4:4d:b8:
d7:f8:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:51:01 2025 by rpki-client