Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAAD29EC3D311EF92427A55762E951A.roa
File: 9CAAD29EC3D311EF92427A55762E951A.roa (raw, json)
Hash identifier: twKnEFf7d6NzlIVLf2aPeSLLFuY1Nho4mXpnY4ItVas=
Subject key identifier: 35:8B:23:9F:D1:10:AC:28:3A:F9:66:FE:D3:56:AA:40:F1:AC:9C:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01285A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAAD29EC3D311EF92427A55762E951A.roa
Signing time: Thu 26 Dec 2024 21:51:51 +0000
ROA not before: Thu 26 Dec 2024 21:51:47 +0000
ROA not after: Fri 12 Dec 2025 21:51:47 +0000
asID: 984
IP address blocks: 154.83.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75866 (0x1285a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:51:47 2024 GMT
Not After : Dec 12 21:51:47 2025 GMT
Subject: CN=676dcff6-f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:38:c7:8f:aa:f1:3c:7a:e8:2b:04:87:73:
e7:b0:48:fe:32:c0:e6:f3:bd:82:c1:c9:70:24:5f:
00:a3:8d:a7:e5:c2:01:81:83:d4:f9:ac:90:06:42:
8b:29:4a:cb:d9:19:27:7d:fe:7e:dd:fd:9a:04:1b:
6e:68:c2:4f:a0:c5:65:e4:ba:9c:b3:ee:57:3f:08:
ba:13:d3:56:4e:85:04:1e:97:ef:f5:02:3f:35:73:
7d:a6:e9:d7:d9:cc:53:75:25:b6:07:14:34:ae:ce:
da:29:53:f3:65:f3:16:5a:09:c3:39:cb:d6:cc:0c:
8f:a3:40:9e:49:0a:23:ee:67:f3:57:5e:2b:24:0b:
27:69:88:5e:33:18:e9:6a:9a:1c:31:bb:c1:da:63:
65:14:1f:9a:c2:b6:39:72:35:44:e6:8c:92:c0:50:
01:d2:e5:6e:9d:1d:0b:78:69:71:83:c8:e1:c4:78:
38:d3:12:2e:42:81:53:6b:50:0f:3b:00:bb:e9:8a:
c9:df:12:5c:1d:8f:ce:21:23:28:e8:60:5a:5b:2b:
10:d0:59:95:d5:b6:16:99:bd:7f:37:f5:12:9c:32:
0b:d1:c0:48:e3:93:29:eb:2e:a8:d2:7f:ae:81:1e:
93:da:74:70:66:5f:78:a5:c3:8c:c4:37:5d:48:c0:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:23:9F:D1:10:AC:28:3A:F9:66:FE:D3:56:AA:40:F1:AC:9C:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAAD29EC3D311EF92427A55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d9:65:26:50:1a:2b:2f:f7:87:e2:3f:5d:8e:fd:ff:0c:1f:
d2:0b:1d:ea:a3:6b:57:19:91:8f:7d:99:e6:df:2d:9e:c7:71:
03:0b:21:f5:32:4a:e8:79:2e:6f:d9:f5:96:bf:82:0c:01:7c:
fa:7e:3f:c6:63:44:2c:3e:54:08:ce:bb:c8:88:f6:53:55:2e:
9e:77:f5:df:b9:41:22:91:0c:7d:da:8b:e2:20:a7:51:66:b0:
91:97:b4:70:10:3e:51:3a:69:8f:3f:7d:26:79:c2:b6:cc:7f:
8f:a7:b0:b1:4b:b6:b1:83:9f:28:20:08:9f:e3:85:e6:89:43:
dd:8b:7a:40:0f:15:73:4e:03:e9:b4:5f:5e:be:5b:be:17:c9:
dd:8b:ae:81:b9:0a:b4:1e:e4:75:71:89:9f:ff:d7:0d:8f:99:
37:73:c0:29:d3:b6:66:00:e7:91:76:03:5f:9f:3d:a7:10:66:
64:4b:a8:e9:1a:4f:ed:0b:ad:c3:a7:93:e3:ff:39:3a:9f:d6:
68:4b:38:1e:b5:f4:05:a1:68:dd:8a:5e:e3:84:b0:51:74:41:
ba:8d:35:08:bb:ef:ef:14:98:21:22:c5:39:cd:c1:83:2d:9b:
3c:0a:46:9f:32:c0:4b:05:6b:88:53:61:00:bb:03:ec:c7:b7:
6b:7b:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client