Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E721DAC1A811EF87B1288B762E951A.roa
File: A7E721DAC1A811EF87B1288B762E951A.roa (raw, json)
Hash identifier: miQeS7mHplNnVPovw9U4ockHIA3odl5Iu/zxxbFw0ow=
Subject key identifier: 04:6D:8A:F9:D8:C2:89:2B:B4:77:E4:2E:CB:09:51:66:B6:E7:DA:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01210F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E721DAC1A811EF87B1288B762E951A.roa
Signing time: Tue 24 Dec 2024 03:39:19 +0000
ROA not before: Tue 24 Dec 2024 03:39:15 +0000
ROA not after: Wed 10 Dec 2025 03:39:15 +0000
asID: 984
IP address blocks: 154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73999 (0x1210f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:39:15 2024 GMT
Not After : Dec 10 03:39:15 2025 GMT
Subject: CN=676a2ce7-ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:0d:e4:c9:1e:55:99:78:d7:e9:8f:98:11:
6e:f9:77:3f:f1:f4:f1:b1:58:0b:70:25:7c:e2:2d:
b9:66:36:ba:f3:8a:e3:ee:52:5b:e7:d7:29:1d:da:
61:77:4f:ef:00:c5:c8:69:e5:cc:23:b9:a2:c8:40:
c4:64:ea:27:5d:b3:fe:ab:ab:b4:1d:bc:bf:99:c4:
84:6c:1e:54:5f:17:f9:4d:18:aa:bc:a6:96:db:5d:
d9:f0:c4:74:4d:28:7b:cc:47:9f:75:22:6b:92:c0:
1e:e5:30:15:87:3c:6f:af:57:59:88:72:30:06:61:
64:77:a9:18:69:49:7e:2d:ff:62:c5:54:69:d3:a8:
21:c3:d5:75:a2:1a:10:94:b2:41:44:43:0e:07:2e:
58:78:12:77:de:6b:3a:6e:92:ee:9a:d2:e5:36:c1:
3e:6a:eb:c1:d9:f9:7a:bc:30:6b:c5:d3:89:d0:ba:
3e:9c:53:69:c1:37:9a:1b:89:8b:72:c3:02:a3:af:
1d:09:fc:9e:37:b1:ab:93:82:78:4e:e7:a8:b0:bf:
34:d8:3f:38:d5:b8:41:e6:8f:a3:be:7a:c8:fa:24:
87:f6:01:32:38:6c:bc:c7:da:e7:b5:64:25:06:cb:
a7:c4:ba:a9:04:b6:2b:d4:e0:1d:60:d5:55:a2:38:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:8A:F9:D8:C2:89:2B:B4:77:E4:2E:CB:09:51:66:B6:E7:DA:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E721DAC1A811EF87B1288B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3b:56:f4:b3:ad:0b:35:73:69:d4:98:26:e0:34:8f:be:53:
92:fa:08:67:0c:a0:d5:19:68:f6:5c:e9:a4:1b:57:4d:f2:66:
9d:74:d8:97:19:c7:3a:56:bf:44:d7:58:77:c2:34:de:ae:14:
53:fb:6d:a1:77:fc:cf:17:4e:2b:49:14:1c:1a:4e:0d:61:e4:
04:7c:ce:7b:d6:fa:70:2b:42:d6:67:e5:ee:81:09:58:b1:35:
5a:f9:d4:d3:06:14:de:bf:df:ea:86:21:5e:d7:51:2d:b8:8f:
2c:73:81:3c:08:f0:a7:29:d8:db:aa:f7:40:9b:7b:7d:07:53:
69:da:43:31:20:1a:5e:f2:29:5b:1b:4c:ef:ee:11:6b:1f:ce:
01:54:37:bd:93:ee:7b:0b:64:2e:51:28:21:ca:18:e8:39:2a:
63:a9:73:84:20:c0:7f:6c:d9:37:b4:e9:9d:7e:ba:06:b8:79:
66:83:03:fe:4c:f7:dd:44:66:a6:64:bc:9a:e4:77:92:3c:26:
94:a9:05:60:9d:00:14:b8:75:5f:6a:c7:c6:90:51:e3:fb:24:
16:17:6d:f2:fd:bb:b8:cd:20:0f:dd:15:e3:01:40:96:e2:59:
01:dd:59:72:25:1e:e1:d2:30:d0:28:6d:60:0d:7a:80:72:3e:
94:77:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:12 2025 by rpki-client