Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA183BABE9111EF8EF9DE94762E951A.roa
File: 9DA183BABE9111EF8EF9DE94762E951A.roa (raw, json)
Hash identifier: u7ZRLkhEUGv2QaLhUp+Q3LskrKx9avJ/+0oOvu1cVeo=
Subject key identifier: BD:29:99:95:EF:EB:CF:91:17:62:21:76:C7:D9:55:91:89:63:5F:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA183BABE9111EF8EF9DE94762E951A.roa
Signing time: Fri 20 Dec 2024 05:16:50 +0000
ROA not before: Fri 20 Dec 2024 05:16:46 +0000
ROA not after: Wed 10 Dec 2025 05:16:46 +0000
asID: 984
IP address blocks: 154.82.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72724 (0x11c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:16:46 2024 GMT
Not After : Dec 10 05:16:46 2025 GMT
Subject: CN=6764fdc2-75cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:77:aa:fd:2d:8c:3e:0d:fd:3e:8f:fa:bf:
b7:49:16:70:c8:e9:d2:62:0a:c6:e6:0a:dc:99:32:
fb:02:3f:0a:34:ac:80:92:35:55:1a:73:0e:e5:b9:
0c:81:6a:1c:97:a9:5c:9f:4b:4c:63:c5:91:36:74:
4d:0c:7d:25:6e:ee:20:78:67:be:d4:50:77:99:ee:
e0:be:70:3a:5f:a7:9b:34:39:a0:f9:f1:c1:5f:b7:
46:07:b0:d6:fb:07:e7:f9:51:22:4a:43:c5:35:e3:
9b:22:0e:b1:a0:96:7d:50:8a:40:83:bd:a9:7a:54:
3a:07:84:73:e8:06:56:c9:55:c0:5d:34:ce:98:bd:
74:11:2a:44:f9:7a:16:89:91:2f:50:03:32:21:c4:
66:ff:10:6d:85:a0:0f:ab:d3:af:c7:34:6d:06:69:
26:bb:bb:a0:d8:79:a4:ba:25:bc:8f:6d:0e:82:9c:
d0:ff:b5:3e:05:2d:99:e1:01:6c:a2:6a:5a:83:41:
16:8e:7b:2e:00:01:f9:2e:fd:e8:bf:39:2a:7e:a1:
4f:2f:12:82:c7:16:5a:12:25:0b:5b:94:e7:99:d7:
57:76:54:f1:81:7a:50:f4:2f:71:b8:a9:d5:d5:6f:
99:33:b4:dc:33:c8:08:0c:dc:f7:b5:49:b3:0c:67:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:29:99:95:EF:EB:CF:91:17:62:21:76:C7:D9:55:91:89:63:5F:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA183BABE9111EF8EF9DE94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.183.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d0:5b:c6:9b:f7:9c:cf:74:0e:eb:68:cb:57:64:69:a5:0d:
5d:e5:bd:e8:7d:a4:37:29:dc:be:9a:29:7f:78:1c:b5:04:e9:
25:0a:13:b9:04:54:cd:5e:10:3b:c5:66:f3:6b:85:f2:14:86:
3a:12:56:34:a8:6e:bf:3c:6f:fe:2e:47:8e:17:fd:82:0b:c7:
38:c4:72:78:6d:84:88:90:dd:88:84:13:6a:ce:79:4c:af:cf:
da:35:ea:02:03:08:52:f2:d2:80:cd:d9:7f:40:4f:2f:ec:22:
d1:14:a0:a2:c3:82:a6:5f:a3:ae:01:b6:05:dc:35:99:1b:5c:
35:30:d9:6f:48:3e:df:ca:44:d7:d7:54:52:38:57:7f:fe:21:
8a:02:11:42:72:22:c5:3d:b6:0c:56:66:d1:5c:be:8b:7a:17:
bc:b0:78:b1:cf:39:b0:67:36:e2:a2:96:98:85:7b:ec:f1:97:
59:59:12:b8:d1:53:da:e9:e8:a2:00:65:1d:5f:73:5c:ff:68:
33:a2:bd:54:33:ba:f4:d7:25:31:ad:f6:b2:21:69:77:e9:61:
d3:88:5d:d7:1d:18:6e:5e:34:cd:3f:ee:e1:a9:bb:fe:a9:fe:
7a:c2:99:7c:b2:36:50:55:8c:1c:a2:47:50:51:c5:6e:e0:b3:
1d:f0:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:57 2025 by rpki-client