Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18F199CC1CF11EF9F177680762E951A.roa
File: A18F199CC1CF11EF9F177680762E951A.roa (raw, json)
Hash identifier: 9AJigKBLL4Ck2WqMXCTP8mOi1pQNUXmGTTgmYCIi3ws=
Subject key identifier: 6C:71:36:FB:4E:33:47:02:A5:F8:98:12:A9:B1:44:E7:80:D5:7C:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012291
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18F199CC1CF11EF9F177680762E951A.roa
Signing time: Tue 24 Dec 2024 08:18:19 +0000
ROA not before: Tue 24 Dec 2024 08:18:15 +0000
ROA not after: Wed 10 Dec 2025 08:18:15 +0000
asID: 984
IP address blocks: 154.193.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74385 (0x12291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:18:15 2024 GMT
Not After : Dec 10 08:18:15 2025 GMT
Subject: CN=676a6e4a-698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:f2:39:b9:43:aa:98:3c:dd:92:22:d3:b6:
38:c6:2f:9f:56:92:7a:08:44:21:af:5a:6c:70:5b:
86:81:59:b2:ff:f7:2f:2b:86:68:bd:0b:12:cb:64:
1d:d4:17:53:99:93:e3:70:d7:cc:b2:19:8f:09:94:
e5:e1:80:ed:b6:3c:64:68:50:4e:87:b5:9e:1e:fd:
21:ec:3e:72:37:66:98:b7:6f:a7:5c:21:78:23:46:
21:27:49:eb:9f:8a:3e:13:42:5c:e2:cd:23:71:b7:
a3:c1:c5:31:64:dd:21:34:14:45:12:38:dd:4d:2d:
8f:fe:73:9c:37:37:fc:55:0c:e2:54:c1:50:89:fa:
47:fa:6e:7a:fa:6c:68:b6:68:1a:ef:4b:77:29:1f:
1b:07:ee:fa:fa:4e:a3:60:71:65:d6:f6:c0:c7:5d:
ef:f5:45:83:bd:f6:2f:42:69:9a:ec:e4:d5:6e:63:
22:17:74:c1:be:ea:2d:e5:71:a4:2f:d5:6b:02:cf:
9f:d9:ec:e0:90:75:ab:bc:27:a7:e6:d6:d8:25:f2:
1f:05:64:6d:47:c8:bd:55:5e:65:0f:10:8d:99:87:
38:7c:9e:e5:79:e9:5e:cc:98:39:23:15:0e:54:85:
81:c4:e4:60:14:5b:e1:0c:be:df:d7:0f:53:9a:d4:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:36:FB:4E:33:47:02:A5:F8:98:12:A9:B1:44:E7:80:D5:7C:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18F199CC1CF11EF9F177680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cb:e2:c5:c2:f8:77:46:cb:13:f9:4d:f0:81:aa:6e:80:a5:
34:8c:e0:a2:87:0e:b8:ba:ec:51:5f:2d:17:f6:c8:55:3a:70:
b4:6b:0e:8d:fa:66:da:75:05:cf:7b:d2:e1:0e:d0:39:18:22:
4f:6f:e2:a5:98:51:7c:b9:06:47:2a:60:a6:00:56:11:9b:30:
b8:7a:84:21:5b:d9:73:81:35:fb:e1:8f:14:e8:95:08:85:5e:
62:3b:fd:88:d5:06:98:38:31:d5:03:53:71:f0:54:5e:90:1a:
59:b0:08:1f:a8:1b:aa:03:8b:46:f6:1d:9d:4f:bf:53:ac:bf:
12:13:41:98:65:cd:3c:6d:0b:1c:53:b4:99:dc:a9:57:9e:d8:
d9:25:78:ce:ed:25:07:bf:ce:35:af:5f:a4:8b:81:fc:d4:39:
bc:46:a8:c7:68:b1:44:97:9b:7e:0a:03:ac:5a:03:4d:4f:aa:
e4:9c:de:f3:0f:51:71:7c:1f:a1:50:ad:49:8e:de:44:89:a1:
c8:96:e6:f5:18:46:2b:01:49:9b:cf:1c:36:e9:cc:bc:54:8d:
09:b6:ae:79:c0:b3:c6:bd:18:99:19:f2:4c:b5:61:fb:0f:4e:
7e:af:21:b4:31:bc:f9:4c:83:8b:b9:cd:50:92:d8:3e:fc:8e:
49:a6:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:17 2025 by rpki-client