Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC714FCAC1BA11EFBDF7477D762E951A.roa
File: AC714FCAC1BA11EFBDF7477D762E951A.roa (raw, json)
Hash identifier: 1L32X3q0LRn0rWC2lkyT+RbOATJSsIa2uZMmSS50iZE=
Subject key identifier: D3:A7:4D:BB:1E:E8:06:D0:C9:08:07:AB:52:33:D0:AD:61:6B:19:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC714FCAC1BA11EFBDF7477D762E951A.roa
Signing time: Tue 24 Dec 2024 05:48:17 +0000
ROA not before: Tue 24 Dec 2024 05:48:14 +0000
ROA not after: Wed 10 Dec 2025 05:48:14 +0000
asID: 984
IP address blocks: 154.193.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74215 (0x121e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:48:14 2024 GMT
Not After : Dec 10 05:48:14 2025 GMT
Subject: CN=676a4b21-56b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:40:ec:1b:4c:c0:9d:99:68:80:f1:2c:7a:
72:de:64:a0:ab:2e:84:70:c2:aa:fc:0c:1d:22:74:
2d:92:d2:08:c0:b2:03:e0:5b:7f:87:b4:4d:77:5c:
dd:ad:0c:69:f3:bc:19:25:0d:e2:e3:7e:90:4a:e6:
11:49:e4:7d:80:db:0c:8b:a5:eb:e2:5f:d9:de:e2:
da:c0:6a:65:da:bb:0f:2c:9f:04:d0:6c:62:2e:87:
c8:57:a8:be:b7:2f:a2:10:a3:04:c9:65:ff:0f:4c:
ae:84:08:54:36:ff:53:16:93:a2:51:c5:ff:a0:6e:
cb:86:33:32:7c:4f:59:ec:13:ea:52:20:ec:9b:2b:
1d:25:6d:ce:ca:1c:d7:8c:a9:ad:9a:a5:9e:29:47:
f3:ac:ac:7d:9d:56:26:98:19:ee:19:44:b2:ef:b9:
cd:cb:98:5f:50:37:58:ff:5c:d1:db:8d:f4:4b:08:
bc:ca:7d:35:32:41:61:4a:38:0f:30:91:9c:b5:b9:
4e:0b:b9:e2:19:69:92:4d:59:57:35:dc:e4:e1:0d:
33:7f:a6:e1:e1:b2:99:0c:e1:2f:cb:ff:fc:8f:2a:
0b:c6:d6:e9:32:52:b3:fc:df:6e:c5:ae:a3:cb:24:
60:4e:a0:c6:25:32:43:bd:02:8e:0b:c2:79:80:60:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:4D:BB:1E:E8:06:D0:C9:08:07:AB:52:33:D0:AD:61:6B:19:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC714FCAC1BA11EFBDF7477D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.173.0/24
Signature Algorithm: sha256WithRSAEncryption
47:49:31:1b:96:a1:ae:24:b5:69:16:de:67:7e:a3:66:96:4a:
9f:52:3c:7c:dd:79:60:ac:95:44:b3:fd:e2:8c:b8:75:3a:b9:
75:c8:c6:79:06:f4:bb:21:c6:25:ba:fa:c8:b7:4e:ae:50:64:
9b:bb:00:5a:ec:df:9f:62:e4:50:df:a1:59:ee:86:ba:0b:8b:
aa:c6:66:9d:1b:9b:f9:f5:3c:87:81:e7:ef:f2:7f:9c:b7:06:
8c:12:a6:ee:7c:90:02:e2:85:f2:21:7e:46:c7:5a:d7:1e:f0:
55:db:4f:d6:5c:45:c6:15:90:4a:9b:21:21:5e:9b:1f:f7:fb:
a3:85:04:d2:d9:6e:8e:63:41:9a:68:75:23:c5:c3:c0:ae:a2:
84:a0:92:9c:19:49:ff:c6:fc:98:75:02:38:cf:36:fe:5f:e4:
b4:9c:25:c8:9d:f2:31:48:38:e7:2c:c4:6d:6a:ff:be:5a:a3:
13:fa:db:c7:f1:f2:21:5c:66:4e:69:d0:86:c7:37:3d:c2:17:
d5:00:e7:bc:36:5c:bc:1d:da:97:7c:8c:9b:b5:d3:5a:ae:70:
85:59:aa:66:49:03:42:11:65:86:23:a2:33:7c:ac:e6:a7:2a:
8c:01:ea:93:6f:18:fc:81:8a:28:4d:32:3d:66:61:45:79:45:
7f:cc:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:02 2025 by rpki-client