Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B399E0B8C0D011EFA368D0AB762E951A.roa
File: B399E0B8C0D011EFA368D0AB762E951A.roa (raw, json)
Hash identifier: +9dMO30oQTBHTl/HNEpAIRU132Yuhk0cl1VBq4lfBQE=
Subject key identifier: 59:A4:F3:22:AE:E0:D6:9C:2F:E9:57:86:FC:25:4C:5A:76:F3:6A:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B399E0B8C0D011EFA368D0AB762E951A.roa
Signing time: Mon 23 Dec 2024 01:53:27 +0000
ROA not before: Mon 23 Dec 2024 01:53:23 +0000
ROA not after: Wed 10 Dec 2025 01:53:23 +0000
asID: 984
IP address blocks: 154.83.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73264 (0x11e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:53:23 2024 GMT
Not After : Dec 10 01:53:23 2025 GMT
Subject: CN=6768c297-03eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:e6:ef:75:8f:2e:87:e2:8f:10:cb:e8:7c:
36:19:5b:df:8e:ee:42:44:bb:49:d9:00:dc:f1:de:
31:b9:35:bd:c6:3f:c4:fe:dc:0b:40:44:4b:af:f5:
20:d1:dd:5c:00:7b:00:2a:28:64:69:32:f5:6d:f9:
5f:8b:54:5f:8b:97:5c:95:7f:60:9b:5f:45:d2:c7:
c5:5f:48:bc:36:8d:b7:bf:db:64:15:d3:7d:2b:d6:
4a:1c:b3:7a:46:06:da:f3:e4:f5:4f:91:47:5a:9b:
10:5b:ed:8b:0b:a0:0a:42:99:a5:45:aa:05:a6:6f:
3f:44:1d:dc:8f:8c:3f:67:02:3b:6b:96:28:53:6c:
c3:f1:4e:ff:83:bf:7d:8e:8d:6e:a8:85:01:cc:09:
09:e1:d3:2f:50:ae:39:2d:0c:63:c1:a9:7d:53:18:
de:42:b9:f2:0d:13:95:5b:f3:04:87:96:a3:3e:3a:
3e:6b:93:90:7f:de:5a:ac:10:4f:51:b8:39:68:af:
41:25:8b:26:ff:98:98:30:91:a8:66:78:ce:71:67:
fc:65:a4:ef:7b:57:77:00:92:af:d1:1a:b7:bf:df:
3c:0d:90:19:90:12:fb:17:26:31:5c:9b:5f:82:19:
fd:81:9d:4f:2f:86:a7:3f:6e:52:27:c2:90:fe:2c:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:F3:22:AE:E0:D6:9C:2F:E9:57:86:FC:25:4C:5A:76:F3:6A:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B399E0B8C0D011EFA368D0AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.99.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:75:12:ea:f7:e1:5c:7d:76:ff:09:46:bf:03:ab:5f:eb:
a6:00:85:3a:d2:2a:38:8a:1c:d2:ca:13:65:7d:5b:cc:1a:ce:
ee:cb:64:f4:78:35:ce:8d:a1:00:15:78:5b:60:18:92:55:6d:
44:14:b1:47:55:0a:aa:e7:0e:43:f3:00:51:93:6e:f3:94:68:
4c:88:e1:39:1a:b3:24:a1:a0:37:ed:9d:10:9c:6e:3b:1f:fa:
22:b4:d3:c0:35:ee:f1:36:54:39:e3:98:55:c0:ed:34:e6:db:
d4:c2:5b:c6:dc:93:1f:4a:b9:52:21:1a:6d:62:f3:4d:63:74:
74:a9:da:9c:85:54:c9:14:98:3c:a2:81:37:b6:e0:65:a9:80:
5f:9a:19:c0:a9:0e:5c:b1:7c:de:c1:5b:4b:42:be:8e:53:42:
e8:5f:ad:34:d6:e0:3b:01:88:b8:52:80:28:95:e5:d8:37:60:
1e:5e:0f:5a:72:46:62:a9:93:2a:8a:27:0b:14:67:0d:dc:d5:
58:6e:3f:c3:9c:a4:a8:e3:81:5d:0c:c2:e1:99:36:d1:63:9e:
3c:cd:1c:dd:45:dc:e0:ed:f4:23:20:df:a9:b0:6a:c3:21:a3:
98:6e:d5:b3:d1:40:b4:8e:ee:e7:05:18:55:a2:de:2c:fa:7e:
14:3a:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:32:22 2025 by rpki-client