Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09F7EFCC1B411EFB47FB458762E951A.roa
File: A09F7EFCC1B411EFB47FB458762E951A.roa (raw, json)
Hash identifier: Izq2iXhDfFMaPf2v02iHnjEjRD5jn1RGylyaKsVMxjY=
Subject key identifier: DE:31:65:6D:FD:86:BE:55:49:D5:93:00:0B:49:5C:C3:D3:E4:83:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01219F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09F7EFCC1B411EFB47FB458762E951A.roa
Signing time: Tue 24 Dec 2024 05:05:00 +0000
ROA not before: Tue 24 Dec 2024 05:04:57 +0000
ROA not after: Wed 10 Dec 2025 05:04:57 +0000
asID: 984
IP address blocks: 154.193.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74143 (0x1219f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:04:57 2024 GMT
Not After : Dec 10 05:04:57 2025 GMT
Subject: CN=676a40fc-fd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:b7:65:a6:ee:26:2e:07:26:66:7b:77:4e:
f6:7c:70:8d:24:2d:6e:43:f2:25:b4:e6:30:a6:1b:
62:07:14:77:0f:1e:d4:cc:02:9a:f0:41:4b:e3:61:
34:d0:ba:49:72:0f:66:a9:77:cc:af:4d:a5:4d:88:
fa:d5:e6:70:19:7b:da:30:09:d3:7b:fc:9c:a6:70:
ee:88:6b:f1:b2:27:dd:e8:1e:05:47:69:41:46:61:
fb:74:96:3b:0e:b8:67:19:96:cb:2b:69:2c:b2:a7:
7d:8e:32:73:5e:8c:54:19:5d:88:20:13:e5:97:c5:
b1:75:6f:e7:e4:ad:d5:c2:64:6c:25:9f:be:eb:85:
25:28:4f:59:5c:54:c2:a9:87:44:97:ca:3c:d3:79:
ed:b5:0c:1c:35:0d:1f:06:6d:2c:46:ea:80:fb:54:
4b:9d:43:d4:de:dc:03:f8:6f:7e:b4:f2:63:32:70:
dd:5b:22:0e:1a:40:1c:56:3f:95:02:d3:50:e6:8e:
12:9c:ab:02:87:53:54:e2:4e:88:29:9c:96:3a:dd:
31:c2:f3:31:ff:2e:e2:d7:29:a2:ee:80:18:5d:ea:
a2:c2:61:53:93:4e:a2:a5:58:2d:c4:d0:30:70:24:
6f:08:04:b3:e0:b8:e4:a9:6c:3f:6e:b5:db:56:a7:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:65:6D:FD:86:BE:55:49:D5:93:00:0B:49:5C:C3:D3:E4:83:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09F7EFCC1B411EFB47FB458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.137.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fe:c5:b8:95:fd:97:d1:68:73:6e:96:75:54:e2:3c:cb:6d:
95:3f:67:88:b6:0c:1e:81:99:82:5c:f9:96:ea:0c:d9:60:8f:
b4:8b:ef:79:01:38:b3:24:f4:3d:8d:6e:03:9c:b0:61:c4:79:
7d:f1:44:d6:1d:ca:86:b2:3e:40:c3:a3:a4:05:1a:1c:ce:ed:
6d:8f:ba:ee:4f:87:6b:4e:8d:25:10:6a:77:5b:1a:d6:30:c1:
47:11:35:ea:cc:ae:b7:39:45:37:ea:fc:d8:0a:44:10:8f:81:
6f:10:d5:c3:34:2f:b6:ba:af:7d:ba:2e:b8:c0:f6:67:66:3b:
07:7b:44:e7:45:08:12:01:22:8b:aa:02:71:7b:83:24:8e:d5:
3b:1a:ed:f2:26:05:ea:fa:67:90:98:eb:64:98:9b:61:7c:20:
c5:13:53:ec:fb:50:4a:c8:66:d3:7e:77:bd:60:86:88:b7:d1:
72:06:8d:70:84:1b:e9:63:1e:e4:96:1f:2e:47:82:c9:dc:d0:
de:20:0f:74:83:cc:be:3c:7e:9d:05:67:c5:19:de:db:6e:7a:
96:7d:1e:b7:fc:79:4a:74:54:3a:cd:84:cf:4f:06:a2:f8:0c:
0d:61:01:c6:36:70:e5:eb:70:3c:78:3d:94:17:7c:a4:9a:46:
b6:a1:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:50 2025 by rpki-client