Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA3F256C1B011EFB8887CBD762E951A.roa
File: 9BA3F256C1B011EFB8887CBD762E951A.roa (raw, json)
Hash identifier: BJEY7rjQT1Xv6+Lm/vcLTuPbb2la0XjfrYTFxd0454k=
Subject key identifier: 48:8A:72:E5:80:AA:FD:9D:A7:F9:D0:C1:0B:00:A6:A2:39:63:BD:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01216F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA3F256C1B011EFB8887CBD762E951A.roa
Signing time: Tue 24 Dec 2024 04:36:14 +0000
ROA not before: Tue 24 Dec 2024 04:36:10 +0000
ROA not after: Wed 10 Dec 2025 04:36:10 +0000
asID: 984
IP address blocks: 154.193.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74095 (0x1216f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:36:10 2024 GMT
Not After : Dec 10 04:36:10 2025 GMT
Subject: CN=676a3a3e-240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:71:8f:f3:16:7e:ba:fe:0c:b4:49:72:28:
37:2e:f9:7a:c9:55:41:3a:ae:88:3f:e5:68:56:e6:
6b:73:59:e2:c6:23:e0:69:80:a6:46:89:25:15:b2:
de:6e:ae:8e:74:77:44:fe:a3:fc:11:64:4d:8a:95:
da:43:2e:42:b4:5c:47:a1:59:12:ba:11:a9:b6:d8:
6d:3c:93:67:60:df:3b:77:19:fd:87:cd:cb:e0:41:
ce:64:b0:cc:3c:ab:f3:b8:88:b3:b1:a5:61:c7:e6:
b0:3b:66:31:28:7d:23:10:e9:66:e2:c2:0b:ba:45:
10:85:e4:a6:90:21:18:c5:d1:3f:b5:02:f8:f5:bb:
b8:6e:1d:8d:e8:93:a8:a7:b9:5e:94:11:d9:20:27:
ed:e5:e1:16:98:72:0b:bd:8f:6e:5a:ac:6d:c0:e4:
36:85:77:5d:3b:e2:21:1c:35:d3:99:91:78:fd:50:
5b:8d:3c:6d:fc:d9:4d:cb:51:9c:83:19:4d:35:65:
e0:af:39:1e:ce:2e:a4:c2:8e:50:26:1b:20:e4:88:
a5:c3:91:c4:fb:ea:ec:a9:bb:88:53:4b:5c:40:13:
a0:07:40:85:1b:da:60:28:9e:9d:9d:53:60:27:fe:
4a:04:94:84:fb:e2:e1:e8:59:d9:41:29:2e:e0:ba:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:72:E5:80:AA:FD:9D:A7:F9:D0:C1:0B:00:A6:A2:39:63:BD:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA3F256C1B011EFB8887CBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.93.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a1:1b:ac:cd:8e:08:8f:87:2e:ce:d6:bd:07:16:ba:d5:4a:
80:19:d9:62:84:ca:4a:90:94:60:25:7c:26:0d:d5:c9:f8:77:
f6:f6:24:05:1f:d1:75:0a:c6:1d:71:7e:6c:14:87:47:73:38:
dc:c6:7f:f1:43:e4:fc:6e:54:21:ab:0f:06:fa:51:f4:cf:d8:
01:c7:d1:fb:76:73:87:29:f9:35:e5:7c:b4:1f:12:d7:1b:ab:
3c:34:c8:e6:92:47:11:ca:77:97:35:f1:6e:44:b0:5c:e8:5a:
4f:34:a4:df:44:94:e5:b6:a4:09:18:97:9f:5f:98:2b:0e:e9:
2d:27:44:41:69:3e:4c:e9:88:5d:cc:35:ed:86:b6:4c:29:cd:
ad:78:1a:cb:8e:eb:90:b3:1c:d4:1c:df:20:90:d2:32:ca:51:
ea:fe:c3:8f:61:74:ff:b1:01:df:5f:e4:05:de:07:34:b1:65:
f9:ff:e3:95:12:de:92:1d:91:cd:81:f7:95:34:44:2d:2e:a8:
61:ee:b6:ad:2f:31:0c:4c:b8:c9:13:cf:e1:df:6e:8a:48:bc:
23:9b:47:29:92:66:e3:78:04:a3:48:bf:dc:5a:47:f4:33:ff:
12:62:6f:15:dc:0a:59:58:ef:3e:e6:f1:ee:c0:73:26:99:01:
e1:53:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:53 2025 by rpki-client