Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01B4CC8C40911EF993567BF762E951A.roa
File: C01B4CC8C40911EF993567BF762E951A.roa (raw, json)
Hash identifier: gX1TYQdQC+ImLqe2tEkUBs1WLfrEEe2XaeBG0srHwwY=
Subject key identifier: B2:A3:29:8B:38:C2:62:10:2F:AD:7D:71:B3:84:C0:23:1E:6C:AD:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01B4CC8C40911EF993567BF762E951A.roa
Signing time: Fri 27 Dec 2024 04:19:23 +0000
ROA not before: Fri 27 Dec 2024 04:19:19 +0000
ROA not after: Fri 12 Dec 2025 04:19:19 +0000
asID: 984
IP address blocks: 154.196.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76039 (0x12907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:19:19 2024 GMT
Not After : Dec 12 04:19:19 2025 GMT
Subject: CN=676e2acb-dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:02:6a:29:de:d3:c4:b4:bf:5e:c2:b6:3a:
15:d4:6f:21:3e:27:78:ae:f0:11:63:a2:c4:54:fd:
03:0f:2d:8b:dc:15:ae:7f:e5:87:76:a8:7e:89:bc:
1b:f6:8f:03:45:c8:1d:70:44:0b:5b:a4:9a:70:ff:
6f:0f:5d:32:f5:f0:26:40:07:73:52:3c:72:2b:14:
6e:d5:a7:10:e4:61:51:ea:1e:0a:76:9c:81:6f:c4:
0b:ec:78:c9:ee:03:6c:bb:79:cb:df:95:9d:24:8b:
13:ef:cf:e3:24:7b:94:90:3d:24:63:dd:34:6c:70:
ee:b5:8c:4b:83:d9:84:e1:4e:ec:ce:cd:d2:8d:c1:
e8:5d:ef:d7:d3:b6:75:2b:79:f4:78:c6:bd:4e:fb:
33:4f:c5:25:53:9a:5e:1f:2c:58:a8:3c:2f:9b:5a:
a3:d1:33:66:c2:da:5d:a0:52:62:0a:04:4d:03:de:
6c:95:4a:a3:a0:87:de:a1:b0:d7:20:6f:7b:f2:52:
f3:a9:78:c1:4d:f4:9e:8a:f1:f4:85:70:82:4a:7d:
9c:10:18:1a:13:29:15:e8:d9:b5:3f:25:25:2f:67:
a2:89:18:3d:08:5f:6b:88:ba:26:f1:d8:d9:6d:26:
ea:cf:fd:57:52:60:e5:94:be:86:0e:6d:16:3c:f7:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:29:8B:38:C2:62:10:2F:AD:7D:71:B3:84:C0:23:1E:6C:AD:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01B4CC8C40911EF993567BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5f:97:5c:61:0b:ba:e6:3a:63:8c:28:36:85:e6:b8:95:95:
7f:b0:fa:18:d2:65:94:aa:99:0f:e6:88:e9:0b:f8:c6:53:69:
74:e9:95:d9:8e:f7:b5:80:3d:78:9d:db:6e:84:92:c8:b5:e7:
ef:69:75:c3:f9:70:c8:0f:bd:90:fc:81:57:96:e1:54:a0:f1:
13:8d:5f:de:e1:47:9e:f3:aa:f7:a0:cb:a1:7e:77:e1:10:7e:
50:3b:61:b9:1f:e8:e5:60:1c:af:1a:80:4b:90:61:06:7a:ba:
ac:ec:89:20:9b:a9:d2:3e:9e:5f:6b:2d:30:8a:c3:1f:10:70:
e3:89:03:c2:f6:e7:91:be:b6:74:3e:99:8e:14:ac:9d:ce:c0:
8b:5d:26:3c:e1:c0:30:6e:dd:1d:a7:fe:34:cc:08:db:27:97:
b4:69:9c:34:50:4f:6a:b2:7f:90:b2:96:54:bd:b7:16:ef:6d:
b4:a5:6b:d3:1f:f4:c6:be:24:b6:87:27:03:16:77:b9:12:dd:
71:9d:a3:36:af:1f:ae:04:14:0e:a4:46:b3:ec:25:75:e0:9d:
ce:05:f8:f3:9d:5c:c5:76:a8:c1:8b:ba:6a:60:50:e1:5c:60:
ba:97:8a:5f:01:78:c2:d6:cc:37:49:0a:a4:ab:e3:89:0b:ad:
00:c5:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:19 2025 by rpki-client