Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F1B18C0C5F611EF85AB2B6A762E951A.roa
File: 9F1B18C0C5F611EF85AB2B6A762E951A.roa (raw, json)
Hash identifier: urTNyiZoapiomktLTbA/8Nr+4cdJ9NrUdAo1M8gqPhU=
Subject key identifier: 72:88:06:64:03:84:6A:A5:14:FC:0B:08:9A:3C:8D:A3:42:21:81:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F1B18C0C5F611EF85AB2B6A762E951A.roa
Signing time: Sun 29 Dec 2024 15:07:29 +0000
ROA not before: Sun 29 Dec 2024 15:07:26 +0000
ROA not after: Fri 12 Dec 2025 15:07:26 +0000
asID: 984
IP address blocks: 154.213.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77318 (0x12e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:07:26 2024 GMT
Not After : Dec 12 15:07:26 2025 GMT
Subject: CN=677165b1-d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:22:6b:06:52:7f:40:53:02:7c:f0:75:4e:
63:a2:7d:28:d5:78:d9:8e:20:27:a0:7e:ba:17:6e:
0f:22:19:71:e5:c4:51:a5:4b:bd:3e:d2:bb:5c:45:
f4:f5:00:a8:5d:bd:9c:c7:2a:a9:0d:a8:79:c3:1f:
9f:5a:61:2b:39:23:81:43:b6:c8:97:fa:db:22:cf:
6a:fc:30:7c:b0:4b:52:a8:79:c9:4f:eb:3b:c5:98:
17:95:a6:6c:b7:bd:92:fd:ee:9f:31:d4:34:1d:c2:
42:41:1b:7c:2b:4e:a7:c3:e7:17:67:82:0c:8b:ff:
43:52:d9:16:03:fa:1c:a2:8f:f2:3d:91:18:5c:4a:
98:84:8d:6d:b6:7c:c3:1a:cb:cd:07:d1:11:a2:6b:
94:99:ac:08:33:09:51:1a:f0:30:89:52:57:bf:ea:
7c:4a:c7:7a:d6:48:29:1f:fc:5d:64:76:b7:10:ce:
76:19:56:c0:fb:f9:c1:b8:fe:6c:56:7b:cc:da:05:
dd:7e:6c:6b:4f:24:08:34:ee:6d:1c:57:12:bc:13:
88:94:48:b3:44:53:d1:37:05:f2:2f:fd:e4:00:2a:
f6:72:dc:94:33:35:d9:87:5a:d8:98:74:85:ef:71:
6a:59:c3:3f:e3:37:e4:7c:62:77:91:bb:9f:4a:41:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:06:64:03:84:6A:A5:14:FC:0B:08:9A:3C:8D:A3:42:21:81:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F1B18C0C5F611EF85AB2B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:58:f6:2b:e1:91:61:33:dd:88:1a:21:8c:6c:93:a9:07:
68:87:5a:34:c5:56:2c:3f:cc:ac:bc:39:e1:78:83:f0:0a:a3:
ab:71:7a:e1:ff:0c:fc:ad:22:d1:59:ed:b1:a2:ce:f2:9f:27:
71:fc:52:82:92:b9:a6:41:3d:8c:f3:30:07:54:61:c1:8e:d6:
89:27:78:94:d7:c1:65:6b:f5:c4:17:fa:94:d4:ec:c7:16:37:
ce:28:a7:3f:22:04:85:c6:6c:36:af:e3:87:0d:0b:c2:b9:0e:
e8:58:67:bb:c9:96:08:a7:e7:d4:1f:2c:db:10:9e:e4:da:45:
3d:b6:3f:cf:b7:ef:f3:61:58:a6:00:fb:fa:8b:92:c5:a9:d8:
cd:37:5f:76:ba:9c:0c:78:cf:b4:db:69:5b:fe:14:03:12:79:
b4:32:0c:9f:ea:a8:35:18:02:6e:d6:4a:bb:6c:2c:88:52:eb:
c8:ac:bd:c4:f1:fa:b2:68:73:ef:b4:38:4a:03:9d:17:c2:93:
22:41:ba:dc:9c:08:69:be:60:10:5f:3f:e9:24:50:fa:1b:bf:
fc:ae:f6:34:93:06:54:d4:87:d4:9e:96:b3:44:64:96:a6:25:
28:e8:5f:3d:6d:0b:e7:9a:71:b2:3c:e1:37:47:a6:54:55:55:
ee:8b:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:06 2025 by rpki-client