Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2499290C1AA11EF8385FD97762E951A.roa
File: C2499290C1AA11EF8385FD97762E951A.roa (raw, json)
Hash identifier: 0tFm8ocUwtw1MvNDyxs/Ia00QlIwzDaYH48e9EXb/kM=
Subject key identifier: D5:85:DD:4F:D0:7D:CF:4C:94:7A:3E:BE:31:9E:8B:9E:B8:5A:93:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012129
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2499290C1AA11EF8385FD97762E951A.roa
Signing time: Tue 24 Dec 2024 03:54:22 +0000
ROA not before: Tue 24 Dec 2024 03:54:18 +0000
ROA not after: Wed 10 Dec 2025 03:54:18 +0000
asID: 984
IP address blocks: 154.92.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74025 (0x12129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:54:18 2024 GMT
Not After : Dec 10 03:54:18 2025 GMT
Subject: CN=676a306e-4ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:a4:2d:27:90:91:d3:7e:68:13:ba:cf:3f:
49:42:ca:7f:f8:17:ae:ce:83:0c:52:ae:0a:20:a0:
ac:99:e0:6f:df:71:2f:c2:b0:a8:c4:81:ea:18:8b:
0c:2e:45:9a:75:62:3e:3e:d1:38:49:f3:cc:82:68:
86:89:45:f1:74:bd:16:23:82:0f:03:6a:1c:71:02:
b2:b2:3e:85:9a:c2:c2:21:11:22:dc:d1:43:19:09:
7b:64:c4:49:d7:15:2d:1e:b8:7b:45:08:b1:0a:82:
b3:cb:f8:b4:f1:3b:2b:b1:cb:8d:0d:b1:04:ce:d7:
6a:6e:e2:bd:83:1c:9e:65:f4:0f:fa:37:18:ab:ed:
82:5d:a0:1d:4f:e5:ad:9b:fd:cb:d0:8d:6f:1a:7b:
16:ca:55:5b:f4:8e:cc:25:79:7e:01:48:e7:e3:70:
d7:c8:d2:c7:0c:e6:61:6b:e8:17:dd:64:d6:0f:ca:
d1:27:b7:08:73:52:7e:41:29:a1:62:5c:d0:81:e6:
f3:96:6f:49:92:f6:1b:ed:30:3d:e5:41:ad:1f:a8:
de:b5:8c:08:90:7a:29:f7:34:25:88:06:13:20:b8:
88:ca:ed:0e:24:c5:8c:4f:48:12:0f:08:04:66:bd:
6c:af:53:f6:e0:81:db:8d:32:ac:f7:87:e0:01:d9:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:DD:4F:D0:7D:CF:4C:94:7A:3E:BE:31:9E:8B:9E:B8:5A:93:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2499290C1AA11EF8385FD97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:28:c4:0b:f1:8a:ee:91:62:31:bc:b5:c0:23:ee:e4:50:1c:
a9:7e:5e:82:75:23:9a:cb:11:0d:6a:d0:58:ad:00:e6:26:20:
04:e1:d6:ea:0b:a5:8d:a4:a1:40:c7:47:fc:87:90:82:02:0d:
a9:c2:1d:9e:9f:e6:e0:ea:7e:6b:70:85:91:a8:3b:cc:70:32:
9e:f9:ea:3e:c9:aa:10:63:0e:67:ad:5b:78:bf:56:30:56:a9:
be:65:44:45:b6:33:47:a0:fb:41:74:2b:c1:08:48:b5:dd:b7:
14:3e:bd:d5:2f:22:62:bf:af:35:67:fd:f6:64:3e:1f:a2:53:
05:d8:2b:89:d6:48:62:f7:9b:4a:6b:6b:b5:01:2f:5e:bc:80:
81:d6:c1:c4:6a:01:6b:ca:75:c9:ad:26:bd:e7:f7:b9:6b:af:
0d:66:19:b8:de:ea:5d:d0:6d:07:5f:cc:52:05:ee:41:3a:c4:
03:d0:29:6c:99:78:eb:8e:69:8a:a0:4e:f0:d2:42:07:d1:8b:
de:26:25:de:b0:c2:87:5e:27:13:c7:e1:aa:11:12:03:41:95:
da:60:19:be:9b:58:88:db:56:15:2a:09:c3:fa:29:39:ae:5c:
5a:d2:96:eb:b7:38:46:55:d6:28:a8:6e:30:f5:69:03:a6:02:
2b:1f:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:45 2025 by rpki-client