Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF877CC1D011EF99E3F286762E951A.roa
File: A9BF877CC1D011EF99E3F286762E951A.roa (raw, json)
Hash identifier: tnHhfaKt82BvBz4eFB7wREdjmAkHRrW9tWiQb+KoL30=
Subject key identifier: 53:36:F8:DB:14:E8:CF:5C:F6:3E:1F:FD:FB:77:77:AE:9F:C1:84:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01229D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF877CC1D011EF99E3F286762E951A.roa
Signing time: Tue 24 Dec 2024 08:25:42 +0000
ROA not before: Tue 24 Dec 2024 08:25:38 +0000
ROA not after: Wed 10 Dec 2025 08:25:38 +0000
asID: 984
IP address blocks: 154.193.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74397 (0x1229d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:25:38 2024 GMT
Not After : Dec 10 08:25:38 2025 GMT
Subject: CN=676a7006-b41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:9c:dd:12:cc:49:4e:6f:24:c2:c2:05:f9:
e2:6e:e3:c3:e4:c5:87:83:ac:82:6c:2c:75:a8:f8:
f0:f4:00:2d:2d:9b:40:93:2d:e1:0b:6e:70:08:c5:
f5:f2:5f:0b:3e:3f:19:ee:9a:30:14:8e:c5:b3:12:
8e:20:aa:53:0a:67:2d:e6:86:99:c0:d6:62:b4:57:
54:cb:1e:85:8d:21:42:ea:bc:33:e1:5d:8b:0c:eb:
e0:d8:86:d7:a2:78:c4:90:19:10:ef:9d:be:c7:d3:
5d:96:7c:cc:e1:1f:dc:4e:99:cc:2c:9a:4f:c3:f7:
20:41:90:73:41:1c:8c:65:29:e6:4c:c9:bc:1c:d9:
f1:ae:91:2d:a2:be:22:bc:bc:5b:f3:25:3a:61:f5:
17:9f:26:4d:39:08:cf:68:42:db:ab:c7:47:a5:72:
e9:24:1e:26:2d:5b:36:d6:9e:d6:74:c3:a9:02:6e:
81:88:c4:b5:d5:69:b7:f5:5b:f8:30:e8:57:9d:6f:
77:0c:79:4a:74:da:35:10:96:68:72:a3:98:93:49:
fe:b1:a0:b1:e1:7e:ca:1d:8f:4f:cc:84:39:7f:85:
6c:e0:a3:f4:66:42:dd:c6:57:50:4d:fb:93:97:9e:
d8:79:48:6a:da:dd:9d:76:ca:f7:ee:a7:8d:b6:05:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:F8:DB:14:E8:CF:5C:F6:3E:1F:FD:FB:77:77:AE:9F:C1:84:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF877CC1D011EF99E3F286762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.238.0/24
Signature Algorithm: sha256WithRSAEncryption
01:22:78:94:62:2a:01:5b:0b:08:16:4d:2b:3f:82:d2:01:ef:
bf:2d:3d:ff:01:75:11:ef:78:d3:7b:88:8b:25:92:08:4e:c2:
b7:ce:36:5a:fc:37:ed:ce:c6:22:ba:8e:73:b4:59:41:d7:7a:
05:30:e5:83:42:62:97:01:61:34:36:ca:0d:ea:ca:d5:0a:a3:
d4:28:c8:66:cc:18:af:b5:b0:c5:92:04:8d:c0:64:b6:a7:88:
d7:d5:d9:c1:5a:1d:cf:70:63:07:ed:55:b2:b2:dc:50:1e:25:
1b:7e:28:43:0f:33:f7:a0:84:ba:e7:bf:3e:90:d8:98:2a:58:
d3:87:7b:20:dc:cd:f4:63:9e:e0:3d:e9:35:fb:5d:77:75:1e:
38:31:aa:b9:76:29:c8:80:7d:cc:13:f5:e4:87:73:0d:b6:87:
70:c0:e4:cd:13:9f:50:86:a5:af:3c:df:02:fe:78:4d:24:03:
4c:2f:d0:1e:1f:9f:f9:8f:6f:2b:a4:5d:14:0c:8e:14:5f:19:
a0:51:15:ba:38:47:ff:f6:24:3d:8d:12:34:9b:4b:29:d2:68:
55:ba:95:79:e6:0e:6e:a3:34:c5:15:36:ea:8e:69:6e:d1:fe:
ed:ce:b6:26:ca:26:b3:c8:db:b1:fe:c0:ce:5d:0e:73:fd:6e:
5d:7f:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:08 2025 by rpki-client