Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A749113AC40E11EFB434455F762E951A.roa
File: A749113AC40E11EFB434455F762E951A.roa (raw, json)
Hash identifier: LgdFYnMNOCeRc1G8iTAgVWdC74zT5oZIefTS7sO5BQA=
Subject key identifier: CB:B1:18:70:04:7F:64:9F:60:78:3E:43:7C:0D:06:3E:A4:F4:B2:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012939
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A749113AC40E11EFB434455F762E951A.roa
Signing time: Fri 27 Dec 2024 04:54:29 +0000
ROA not before: Fri 27 Dec 2024 04:54:25 +0000
ROA not after: Fri 12 Dec 2025 04:54:25 +0000
asID: 984
IP address blocks: 154.196.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76089 (0x12939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:54:25 2024 GMT
Not After : Dec 12 04:54:25 2025 GMT
Subject: CN=676e3305-bc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:da:ef:1b:8b:6b:ac:08:8a:55:dc:7c:a0:
68:ca:2e:81:ca:52:24:4a:de:f5:10:8e:76:9b:30:
81:20:f8:61:9a:3d:88:47:e0:c9:3b:8e:e4:48:30:
5c:92:96:89:61:fa:ba:9c:db:e4:cb:af:69:78:b0:
91:bb:e4:14:92:6b:69:6c:77:b0:40:08:ef:55:8f:
5f:04:07:f2:b5:ed:32:5f:ad:b9:dc:19:2d:c3:4b:
2b:62:5b:7a:6d:69:6d:e0:e6:5b:5f:2c:a5:a9:bc:
56:a4:08:bb:df:9c:d0:51:94:d0:8c:a2:92:c8:b0:
fb:6a:36:aa:b7:26:2d:3a:df:0e:77:93:e2:2f:6d:
3d:ff:bf:25:03:44:d5:1e:33:1a:ef:d0:3c:47:01:
7c:ce:e9:ae:d1:d7:da:c8:bd:9b:db:57:46:1d:3e:
fb:60:2a:c2:32:44:5d:5d:c7:34:85:0d:c8:31:ce:
84:95:2c:22:64:e5:6e:25:55:97:3e:fa:15:8e:f3:
b4:67:6d:43:87:68:7b:f6:02:67:28:2c:36:9e:22:
ec:0c:9d:f4:13:17:4f:be:2d:8b:61:68:67:ef:3b:
27:5c:82:6c:a1:0e:1c:30:e3:25:a4:35:33:04:03:
e4:50:66:54:47:cd:a8:f7:9d:44:bc:fa:dc:c5:85:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:18:70:04:7F:64:9F:60:78:3E:43:7C:0D:06:3E:A4:F4:B2:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A749113AC40E11EFB434455F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.230.0/24
Signature Algorithm: sha256WithRSAEncryption
94:be:ea:86:ba:c0:23:43:c3:19:2f:39:7e:0c:d9:50:4c:48:
8e:37:eb:99:50:49:ee:f7:8a:1e:54:77:d1:2c:84:41:84:0b:
10:44:7f:7d:01:e1:07:3c:57:8a:9e:8f:3a:98:be:09:3e:7f:
ed:25:13:00:ba:d3:6a:40:b8:51:4e:11:7c:9c:5a:04:36:04:
db:5d:6b:e5:1d:95:b8:7d:7c:3e:5c:fb:51:0e:b6:ba:42:63:
6a:61:81:49:45:7c:34:dd:4d:98:a1:80:fa:6d:b1:de:53:a0:
22:2f:55:8b:7b:73:8a:9b:ba:8d:a0:62:05:6d:99:71:df:b9:
32:53:c4:34:16:b6:5e:06:0d:d0:09:0f:5c:34:19:b2:c1:3b:
ab:3e:3e:43:17:98:a0:87:eb:5a:e1:0b:d0:c1:00:51:c7:84:
7d:32:95:bf:99:75:64:d3:6b:cd:d2:7a:0f:ab:53:a0:b6:10:
a1:a8:48:5f:73:ea:66:f7:ce:4b:94:8e:f0:59:a9:2f:5b:cc:
8c:a4:b4:e2:96:16:41:de:78:06:cc:10:ef:0f:ed:ff:4d:cf:
d9:1f:b2:f7:f6:ea:46:2e:ac:10:7d:a2:10:4f:a0:05:c1:be:
b3:e7:53:56:13:56:84:11:13:a1:36:bd:20:4b:c4:8a:47:3c:
25:83:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client