Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6863958C6CF11EF8FD2364C762E951A.roa
File: A6863958C6CF11EF8FD2364C762E951A.roa (raw, json)
Hash identifier: T1eHwwxbLZVi0ZlEC/XErdnCgk+oLIFuMQc0h1m07oE=
Subject key identifier: EA:85:43:2A:5E:E1:B9:07:62:72:61:42:DA:EA:82:49:56:9D:97:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6863958C6CF11EF8FD2364C762E951A.roa
Signing time: Mon 30 Dec 2024 17:01:03 +0000
ROA not before: Mon 30 Dec 2024 17:00:59 +0000
ROA not after: Sat 21 Feb 2026 17:00:59 +0000
asID: 136907
IP address blocks: 154.220.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78064 (0x130f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 30 17:00:59 2024 GMT
Not After : Feb 21 17:00:59 2026 GMT
Subject: CN=6772d1ce-6a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:53:6f:f4:6f:eb:45:21:7d:7d:35:81:34:
70:40:50:b2:4b:88:52:de:8c:45:c5:aa:4f:de:5a:
b3:40:31:8a:e3:a9:d2:f3:5d:57:51:d7:6b:78:d9:
3e:e3:a6:e4:54:87:70:df:06:30:e3:d2:c7:6b:12:
e6:68:79:91:2a:20:8e:52:78:d7:b0:52:49:c0:67:
f7:99:6d:db:6f:a3:75:15:da:2d:3a:dc:c3:c5:3b:
48:b9:d9:93:77:bf:8c:e2:8e:94:e0:43:82:25:7a:
65:08:33:13:56:46:a5:d7:b2:10:45:d6:52:77:05:
8a:02:37:31:71:af:58:3b:a5:4e:ea:99:a3:fd:a5:
42:e1:1f:8f:c4:58:cf:8e:2e:84:32:b8:b9:4c:14:
54:3d:61:13:8b:fa:6e:84:da:1e:48:39:55:d4:34:
5e:5f:0e:89:15:14:6c:4c:38:14:19:69:37:28:c4:
35:80:43:cc:4a:cf:b5:55:cf:0e:fd:2e:c1:e2:9c:
47:75:1a:4b:8f:d1:c2:e3:a6:74:dd:47:2a:51:d3:
8a:c7:d4:ee:fc:45:2f:fc:d6:57:78:44:df:e9:c3:
88:4f:90:69:48:74:e0:e7:86:c3:46:34:71:5e:68:
ff:8c:c6:e0:ab:0f:93:cb:c6:39:06:a8:42:c8:5d:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:43:2A:5E:E1:B9:07:62:72:61:42:DA:EA:82:49:56:9D:97:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6863958C6CF11EF8FD2364C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.192.0/19
Signature Algorithm: sha256WithRSAEncryption
23:80:e0:65:d8:f6:34:22:31:30:17:f7:48:19:0f:de:38:f7:
4f:09:94:9f:cd:d4:d4:d1:f8:77:40:69:79:55:46:85:a7:e9:
1e:45:e0:3c:ba:99:c9:5e:b3:ac:dc:b5:0f:c9:7c:17:89:f3:
fa:dd:7a:e0:ed:2c:bc:47:c1:4e:81:a2:e8:82:a3:72:dc:1a:
70:ee:a2:73:74:e4:f8:09:c1:6d:28:0f:fe:36:7f:27:0d:49:
82:f4:71:57:b5:58:aa:8a:76:b6:bf:e0:81:a8:f0:e4:e5:f7:
44:fd:82:7b:6d:ed:99:5f:4d:da:7f:94:cd:60:4b:77:50:85:
9c:47:7b:38:6b:97:79:b7:d3:af:1f:4e:8c:ab:71:71:60:be:
43:79:5d:4a:d1:06:88:58:71:6d:50:bc:4d:47:fa:10:b0:0f:
57:2e:d7:21:65:9c:e6:79:3c:ef:4c:30:6b:78:61:74:94:5b:
a8:ed:ee:16:78:2a:51:1e:55:59:ab:4b:5f:b6:f9:16:4d:04:
0e:a7:e6:b1:35:f1:d2:24:50:0c:3e:b6:c2:f5:7c:3d:75:ba:
2f:9a:09:e3:eb:52:cb:65:95:6f:ea:b9:1a:83:f5:5a:cc:3f:
79:29:74:fd:4d:c3:b1:f4:68:38:f6:cf:ee:ea:f2:90:f3:c5:
79:10:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:51:14 2025 by rpki-client