Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD97118C53511EF88B564A2762E951A.roa
File: 9CD97118C53511EF88B564A2762E951A.roa (raw, json)
Hash identifier: B9vaJ2APSy7WLApseV5I9EFJYXMTt6/KuX58ldSrpA8=
Subject key identifier: DA:D7:99:C5:D0:37:4E:54:BB:0B:25:59:C8:1C:82:50:05:45:F4:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD97118C53511EF88B564A2762E951A.roa
Signing time: Sat 28 Dec 2024 16:05:53 +0000
ROA not before: Sat 28 Dec 2024 16:05:49 +0000
ROA not after: Sun 12 Dec 2027 16:05:49 +0000
asID: 17561
IP address blocks: 154.204.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76819 (0x12c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:05:49 2024 GMT
Not After : Dec 12 16:05:49 2027 GMT
Subject: CN=677021e1-0960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:f1:26:01:3a:32:b0:54:f6:a7:6c:d4:12:
98:52:ac:fa:24:ff:98:c1:92:3c:8b:89:c5:7c:54:
be:15:b4:49:da:9f:11:63:55:96:7d:74:0b:3e:13:
b7:47:df:30:13:de:1e:23:fd:46:7a:b9:d3:99:31:
43:ff:94:12:73:be:ba:3e:26:35:02:06:47:91:12:
00:1b:67:82:81:06:2e:99:09:d2:e6:56:2f:96:d1:
59:ce:8b:79:38:4a:d1:9b:ce:07:78:0c:cd:8d:7c:
6e:3b:1b:93:08:08:55:b2:ee:00:1c:03:5e:8e:73:
93:3f:8f:e2:be:22:cb:1d:5f:5d:bc:42:b8:74:50:
db:f0:8f:be:7a:ea:bb:2b:06:be:d2:b7:b1:fe:67:
88:9e:bf:5a:13:8a:cd:a5:f4:9c:f2:36:ce:82:60:
5e:0d:73:8f:11:1e:a8:39:fa:7a:2c:63:37:8d:ee:
ef:91:9e:5e:6f:dd:f7:b2:6c:65:89:23:ff:8c:1a:
1a:8c:3f:c8:d0:5b:fb:65:9f:16:3b:b4:9f:f8:f0:
4a:c5:1e:59:af:42:63:f2:cc:85:d0:b7:b0:90:3c:
79:0b:e6:d4:6f:f9:17:9d:24:2d:ed:b2:4e:aa:0d:
f6:6d:ea:63:9a:2a:ba:18:41:ae:f8:d4:9c:44:d8:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:99:C5:D0:37:4E:54:BB:0B:25:59:C8:1C:82:50:05:45:F4:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD97118C53511EF88B564A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.114.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:c2:e3:f6:25:13:31:40:16:0b:75:fb:f7:fb:31:8d:5f:
25:0d:a9:6b:2b:0f:0e:8b:52:a0:e2:0e:a9:4e:1b:3c:56:c3:
e8:e5:47:05:a2:ab:6e:ea:86:b3:48:d0:3b:ab:0d:10:b2:fb:
aa:fe:8b:80:88:eb:20:0f:0f:1e:59:8f:61:97:0d:bf:49:f7:
d4:5c:a4:64:5e:92:b5:cf:d6:3b:ba:47:f0:ed:34:5c:16:32:
79:bc:d2:9a:45:f2:f3:0e:d8:b9:d5:5e:5e:3f:34:a9:2e:9a:
1e:cd:2c:7f:cc:5d:a5:c1:22:b8:94:00:3b:8a:ee:ca:0c:69:
94:3b:26:d6:a3:12:bf:06:2d:5b:ec:08:20:9a:5f:d9:2b:37:
bf:cb:b3:bd:fa:ee:92:50:e5:4a:6a:f9:5c:06:49:5a:0c:e5:
66:6f:56:d5:60:c3:90:4a:e4:36:3b:84:66:16:cc:e3:e0:fa:
63:46:b2:6d:9d:48:02:22:41:2c:30:59:df:06:20:6c:e1:b4:
57:2e:4d:b9:08:25:bf:32:38:38:bb:6f:5c:2a:2f:67:91:63:
8c:d4:b8:bc:87:1f:9b:4a:b7:fb:a2:79:76:c5:31:fa:81:a3:
17:b8:36:74:c4:79:4f:7a:ad:c1:64:51:5b:ad:4f:46:8c:e6:
0c:41:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:41 2025 by rpki-client