Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C360A84C8A311EF98568E65762E951A.roa
File: 9C360A84C8A311EF98568E65762E951A.roa (raw, json)
Hash identifier: GXXgm7jv1acBBlkZdxGRXqWBj8ijKrc8uYa4ME5bOnU=
Subject key identifier: 70:FE:E7:77:D3:2B:A1:C5:B8:7D:5F:4F:9F:2C:A9:D7:59:93:01:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013134
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C360A84C8A311EF98568E65762E951A.roa
Signing time: Thu 02 Jan 2025 00:50:50 +0000
ROA not before: Thu 02 Jan 2025 00:00:46 +0000
ROA not after: Fri 12 Dec 2025 00:00:46 +0000
asID: 984
IP address blocks: 154.218.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78132 (0x13134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:46 2025 GMT
Not After : Dec 12 00:00:46 2025 GMT
Subject: CN=6775e2ea-6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:07:16:84:6b:a0:e6:84:b5:43:15:7f:74:75:
6a:fc:ce:d5:37:3d:4f:18:2f:58:ed:10:83:c0:f3:
e6:53:b0:d8:31:f6:99:a8:78:16:06:5c:1e:1a:ed:
8f:d3:64:38:2b:a5:76:a6:98:10:7b:62:27:4f:c4:
0e:64:d9:a5:39:d4:a8:ce:ba:85:d2:cc:84:d2:d1:
53:95:dc:4e:e3:3f:27:13:be:49:43:fa:80:c7:d5:
0f:6c:3d:8b:06:70:1c:8b:fc:1f:0a:5e:14:ff:42:
2d:ba:55:2a:f1:32:70:97:8d:10:ba:8a:4b:e6:50:
81:40:16:a6:11:d3:e7:62:d0:38:1c:0d:22:7e:9a:
67:3a:0e:f6:13:b8:a2:e6:51:e3:74:c7:4a:c5:61:
f9:ed:d0:3b:7b:5a:e5:9a:8d:5c:74:dc:4f:1e:79:
93:d9:2a:21:9b:de:d4:88:88:c0:e3:f8:ef:51:8b:
65:51:95:1a:6f:bd:b5:6b:39:26:fe:7c:6c:e0:d2:
48:2f:8f:09:8e:19:05:6a:67:53:35:86:3d:08:3d:
65:66:09:81:24:8b:8e:a9:2e:ae:ee:46:eb:83:0a:
5f:b9:b5:1b:12:54:0f:ac:f7:dc:65:70:4e:09:00:
de:77:2c:75:67:b9:8c:de:62:77:07:02:19:c2:08:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:E7:77:D3:2B:A1:C5:B8:7D:5F:4F:9F:2C:A9:D7:59:93:01:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C360A84C8A311EF98568E65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.54.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:16:28:8e:d5:d0:18:cf:c3:02:bd:7c:1c:f0:f2:9d:d6:30:
b4:7e:f3:e4:3e:11:b3:8f:03:0d:41:9e:77:65:14:5a:87:1e:
24:d2:09:b1:4d:88:06:37:c9:75:73:1f:92:68:1c:3b:99:d8:
fd:8d:5c:d4:d6:26:29:96:40:94:35:7e:b6:ab:51:b7:ef:57:
f4:95:1f:b3:37:dc:09:a1:72:50:2c:b6:d8:f1:d4:fa:f1:ed:
e0:cd:fb:01:8a:d1:7e:78:76:10:62:11:48:da:47:ec:87:2a:
f2:51:d9:32:6b:9b:9e:b2:36:76:bc:28:82:b7:ca:a6:7c:2c:
8b:23:64:e1:7d:f0:30:74:26:d7:ef:4a:9d:b3:f3:41:05:dd:
1f:24:19:9e:5e:c2:7b:0e:66:4e:e0:48:91:07:17:88:7b:48:
2f:fa:16:63:ea:be:ea:0f:ee:49:7d:f4:c1:75:12:2b:65:89:
1a:be:f0:46:61:8d:14:88:38:f5:24:72:da:e9:d4:85:14:88:
05:e0:fa:3e:be:f8:40:80:56:48:2f:60:d5:0f:41:52:03:36:
44:60:f9:c2:15:98:27:65:0f:4a:c7:bd:59:3d:0e:a7:4a:5a:
d7:bc:fb:27:99:c5:a8:01:85:5d:ee:4a:3f:d4:f9:fe:9d:ff:
6f:e3:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:31 2025 by rpki-client