Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A504FC0EAB3611EFA3AB99B1762E951A.roa
File: A504FC0EAB3611EFA3AB99B1762E951A.roa (raw, json)
Hash identifier: Uv//6XYn3HJASVbVlArFRdtOLoC/TWxSJKI0fiVx6xA=
Subject key identifier: 83:D8:CE:C4:20:AA:41:57:F3:B3:01:F7:54:54:5A:E5:4D:AD:D9:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A504FC0EAB3611EFA3AB99B1762E951A.roa
Signing time: Mon 25 Nov 2024 14:07:46 +0000
ROA not before: Mon 25 Nov 2024 14:07:42 +0000
ROA not after: Wed 07 Jan 2026 14:07:42 +0000
asID: 139057
IP address blocks: 154.85.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70502 (0x11366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 14:07:42 2024 GMT
Not After : Jan 7 14:07:42 2026 GMT
Subject: CN=674484b2-4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:2f:e6:84:40:87:ab:b4:85:31:2b:0e:51:
f9:f4:cd:34:36:82:7f:7d:59:aa:3e:c9:81:ed:ef:
46:a2:d9:75:72:69:31:d6:fc:91:be:f6:6e:d5:22:
a1:68:3e:ba:22:93:f8:dd:92:ac:82:42:ff:d9:4e:
28:e5:11:ed:b3:e7:f5:82:4a:22:61:63:10:66:80:
59:63:50:b0:37:d3:c3:39:7c:35:f7:7a:28:b6:ed:
40:d4:4b:e8:99:6b:d7:03:3d:ec:e2:b1:85:a9:99:
b7:3a:a0:94:54:8e:0b:46:10:7f:25:10:23:fb:dd:
f8:83:84:a7:58:d0:14:b5:0f:47:e2:fb:30:ec:d2:
32:86:bb:1d:64:17:be:10:d7:bb:36:3f:7f:9c:1c:
4a:be:60:18:08:9f:f7:d6:7b:3d:01:0e:45:e3:32:
19:0d:c1:e2:b3:30:8b:1c:b5:f3:a4:a2:15:74:cb:
00:13:2d:39:cc:48:56:97:53:e6:64:cd:74:d1:3e:
5d:cf:09:00:5d:75:6f:00:cd:a6:87:44:42:ab:1a:
4f:a0:d7:ae:65:86:21:fc:23:be:d6:11:86:98:55:
08:44:1c:7f:54:8d:27:96:84:76:2e:0d:6a:6a:04:
10:7d:22:68:27:97:1a:46:8a:17:60:84:f8:18:38:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D8:CE:C4:20:AA:41:57:F3:B3:01:F7:54:54:5A:E5:4D:AD:D9:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A504FC0EAB3611EFA3AB99B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:c9:01:ef:1c:5c:81:a4:da:aa:30:0e:18:ac:ba:31:2d:1d:
bf:ed:e1:55:af:38:68:eb:c0:d9:dc:bb:6b:67:32:cf:8a:ab:
ce:31:db:43:5f:ca:57:86:98:0e:91:e7:07:af:f6:f1:44:9e:
38:19:b8:34:9c:4f:13:0f:16:54:09:e1:2b:fe:0a:66:33:11:
d9:69:6b:ec:a6:e8:85:a0:3f:fc:ad:cc:da:13:48:ac:5d:ba:
6b:50:c0:cf:2b:1c:ef:9e:0d:da:b6:11:a5:ed:c0:29:45:a1:
17:c3:a0:84:a7:cb:f3:8a:3e:a9:2a:c1:37:82:e7:1b:4f:8e:
f1:ac:db:29:89:09:2d:2b:d2:c9:c3:35:26:7d:bf:17:66:e3:
47:f7:75:09:6b:9d:d6:48:7d:1d:53:63:b8:51:4e:d3:3f:31:
09:35:58:7f:6c:72:7f:15:e0:e3:ec:62:ff:48:bb:c7:d0:cf:
3a:4c:2b:6e:b0:c4:bf:9d:c9:d0:09:71:53:9d:42:48:92:d8:
45:cc:1c:50:89:f2:99:3d:78:e1:bf:31:63:c3:d1:72:82:a9:
07:5b:4c:d3:d5:7b:5b:70:95:d4:0b:fd:95:32:73:5e:33:8e:
ee:b9:01:01:e1:60:34:74:08:06:e5:d6:b8:4e:73:4f:7b:f0:
ca:ca:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:53:41 2025 by rpki-client