Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D3991AC1D511EFA61308A5762E951A.roa
File: A9D3991AC1D511EFA61308A5762E951A.roa (raw, json)
Hash identifier: ZWLyzJGXzbR2Z6bowKZv8gsQztniH1odm/aP19SDZfU=
Subject key identifier: AA:E4:37:12:7D:4B:9D:84:BD:06:DB:0C:40:BD:3F:84:B6:D4:68:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D3991AC1D511EFA61308A5762E951A.roa
Signing time: Tue 24 Dec 2024 09:01:29 +0000
ROA not before: Tue 24 Dec 2024 09:01:26 +0000
ROA not after: Wed 10 Dec 2025 09:01:26 +0000
asID: 984
IP address blocks: 154.194.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74435 (0x122c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:01:26 2024 GMT
Not After : Dec 10 09:01:26 2025 GMT
Subject: CN=676a7869-5cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:9c:5d:a0:23:83:e6:c8:34:db:27:75:d8:
92:01:68:ea:51:61:07:d5:d8:28:3f:1e:9e:5b:23:
98:e9:ce:53:0b:46:70:18:55:1d:09:c0:de:5e:97:
41:df:e3:2b:18:d9:f8:dd:af:d4:4a:51:59:ec:47:
4f:6e:e5:82:aa:f3:39:ed:97:58:29:ff:c3:d8:ae:
92:af:28:b3:02:d5:c6:12:e3:80:0d:50:21:0c:03:
04:44:23:07:9f:63:2d:44:31:f2:3c:2b:ac:b6:3b:
40:c3:2d:42:c7:a4:28:97:b4:e7:92:6b:d3:c2:c7:
56:70:66:0d:7a:dc:41:6b:84:9f:b3:f5:ac:7c:0b:
c3:3c:0c:3b:91:de:1d:fc:ee:6a:32:0e:fc:03:01:
66:1c:ec:9c:72:4a:ec:b3:fb:46:30:56:c5:e3:b9:
3f:51:32:fa:db:43:f0:1c:1d:e2:24:fe:70:0c:a0:
c5:bc:9f:b6:2b:8f:dc:98:01:d0:0a:16:bb:b8:23:
62:ae:e4:c7:55:01:82:ea:11:f7:e1:f2:a2:ba:72:
90:07:54:85:4e:7e:a5:23:0a:4f:a7:ab:1d:20:ee:
b5:6e:d8:7f:c4:50:7e:8f:a6:76:39:2a:87:45:47:
06:83:3f:45:0d:33:c8:f7:ab:4a:41:c0:d9:a4:31:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:37:12:7D:4B:9D:84:BD:06:DB:0C:40:BD:3F:84:B6:D4:68:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D3991AC1D511EFA61308A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cd:9e:0f:0b:95:6c:37:dd:8d:7f:65:cd:33:1c:92:69:7d:
1e:ce:65:48:fa:c0:49:35:6f:2c:83:1f:5a:d7:78:e0:aa:2e:
43:17:9e:2b:67:1b:1a:6c:bb:86:15:f3:6c:97:29:ba:74:c8:
46:e0:ed:3c:78:fd:9f:91:14:1f:eb:54:a1:8e:34:b9:9d:d9:
3e:39:2c:b1:0a:03:20:7d:27:1f:af:73:e1:44:37:d2:b6:ad:
1e:28:56:4b:4c:c1:5d:36:2d:89:67:a5:17:1d:57:4f:6c:cc:
9b:01:aa:67:f3:1f:15:3e:2d:3f:eb:12:fa:76:6c:24:94:fe:
8b:64:85:0c:67:a4:64:95:2e:31:4a:2f:49:29:f5:c7:98:73:
b7:ed:7c:fc:5c:45:fc:1d:c6:99:a9:ef:f8:3b:64:03:0f:2a:
63:f7:d2:59:40:89:af:7b:8c:90:4a:aa:74:d2:ef:82:de:4f:
04:ab:24:a4:b6:39:15:23:a2:74:ed:7b:a0:18:54:43:ee:2b:
99:b2:88:f1:e1:65:5e:fe:94:34:1f:ac:3c:d4:7e:29:0d:d0:
89:d3:14:b2:d5:7a:a4:cb:a8:8c:94:23:e3:aa:9a:98:bd:57:
03:ce:6e:79:fd:3b:36:1f:7f:8d:5b:ec:32:d0:16:65:62:9d:
9a:84:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:16 2025 by rpki-client