Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5368610CDBA11EFA57C2858762E951A.roa
File: A5368610CDBA11EFA57C2858762E951A.roa (raw, json)
Hash identifier: O9wp0Of0SWSKqOnJQ6266QS5PtxFIe+RPVfEfl9EXhA=
Subject key identifier: 46:96:F6:5B:5C:10:7A:6F:69:27:33:98:12:8A:DE:8E:20:26:EE:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5368610CDBA11EFA57C2858762E951A.roa
Signing time: Wed 08 Jan 2025 12:18:19 +0000
ROA not before: Wed 08 Jan 2025 12:18:15 +0000
ROA not after: Tue 16 Dec 2025 12:18:15 +0000
asID: 984
IP address blocks: 154.200.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79580 (0x136dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:18:15 2025 GMT
Not After : Dec 16 12:18:15 2025 GMT
Subject: CN=677e6d0b-4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:28:d9:24:f6:fa:ba:c5:6f:d2:b2:73:08:
96:4c:df:d1:88:23:f8:c2:dc:c5:f3:60:12:5e:2b:
ce:36:d7:e3:77:d9:37:bb:a9:53:13:3b:1b:b6:f0:
cf:d4:52:0c:67:82:f4:11:09:42:67:9b:61:d4:9e:
91:e2:37:ee:c1:ce:3a:2a:24:ff:e3:ce:ac:58:a2:
54:50:97:83:4d:eb:a5:7d:9d:27:f7:0a:fd:9a:d8:
ab:04:79:78:91:48:9a:9a:9d:80:3d:b7:d7:b3:c9:
a2:31:1c:d5:52:58:cc:3d:48:1e:0e:0b:63:87:da:
95:12:0a:26:ed:53:09:97:4a:ee:55:c7:79:d1:2b:
e4:dd:55:c5:34:bc:3d:0c:77:8c:c4:5b:d3:68:5d:
08:ef:ff:b2:41:cc:1d:f8:05:4a:e4:9b:97:20:60:
12:26:94:06:03:6f:55:6c:79:61:6a:08:43:f5:7b:
9a:df:1e:36:ce:95:e1:18:e4:aa:70:a0:e5:da:f1:
dc:8a:b6:23:e7:31:1d:3e:77:5e:af:17:ad:3e:12:
4b:a2:e1:0f:2c:eb:f7:bf:79:a0:f2:26:ae:2d:7e:
b4:00:91:a7:c4:33:12:9b:b5:ce:05:fc:54:bb:2a:
74:8d:8d:74:0f:50:59:2a:51:36:c1:e9:a4:de:58:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:F6:5B:5C:10:7A:6F:69:27:33:98:12:8A:DE:8E:20:26:EE:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5368610CDBA11EFA57C2858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2b:ce:42:aa:43:f1:33:14:ee:95:0e:5d:00:81:c6:26:aa:
7c:79:d4:01:cd:93:3a:a0:90:7e:b2:e5:26:2c:ca:3a:35:16:
61:d6:57:ae:60:e8:b6:80:6e:ee:0d:3c:23:50:17:0c:51:f7:
a2:af:39:81:c6:f5:39:59:75:f6:ac:65:b1:19:12:3a:71:87:
9d:eb:a9:96:23:40:00:b9:40:d4:fb:c0:df:b5:46:d9:77:0c:
73:2e:79:28:e9:9f:51:a6:73:3d:6d:a0:9e:44:44:c2:d3:f8:
16:46:2f:2b:f4:ef:64:2c:b5:86:03:de:44:a3:45:d4:8d:03:
4b:43:68:bd:21:31:3d:30:d6:e0:90:56:1a:3c:d9:39:47:8c:
9c:10:b2:f6:b8:c7:04:f8:af:52:56:1d:3f:bd:39:2a:74:8e:
75:49:28:a0:91:f5:c7:33:3a:d7:e0:53:56:7d:91:6f:bc:65:
d8:6f:9c:c7:2d:d0:68:a5:ec:94:84:eb:48:5c:55:51:4d:18:
0a:dd:14:73:e6:fa:13:66:ce:21:27:85:8b:05:f5:42:48:14:
7c:f5:8c:c8:7e:dc:5e:20:a0:5a:8f:2e:8a:9a:ea:93:4a:ee:
7d:a1:42:0a:85:45:65:21:13:f1:c9:b0:fd:04:d0:d1:7c:eb:
69:dc:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:28 2025 by rpki-client