Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C40BECE0C1AF11EF8DB907B9762E951A.roa
File: C40BECE0C1AF11EF8DB907B9762E951A.roa (raw, json)
Hash identifier: u1GjytG2y1iZHGftcWJppat4Ipg794y6a4ZalEOrE4U=
Subject key identifier: 2C:F2:81:64:51:97:80:C9:82:0B:11:9C:F5:6A:01:7A:C8:2A:2F:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012165
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C40BECE0C1AF11EF8DB907B9762E951A.roa
Signing time: Tue 24 Dec 2024 04:30:12 +0000
ROA not before: Tue 24 Dec 2024 04:30:09 +0000
ROA not after: Wed 10 Dec 2025 04:30:09 +0000
asID: 984
IP address blocks: 154.193.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74085 (0x12165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:30:09 2024 GMT
Not After : Dec 10 04:30:09 2025 GMT
Subject: CN=676a38d4-1bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:3b:4d:80:29:29:64:70:bf:36:02:2a:eb:
f1:cb:f2:c5:a8:71:f4:cf:59:ee:ce:32:1f:5d:cf:
04:5b:bf:78:25:ff:08:82:69:a6:cc:6c:97:70:30:
2f:8a:68:f9:3a:75:aa:27:ed:b9:42:7c:b8:78:97:
1d:ad:22:ef:e7:53:11:f9:e3:29:71:a5:c6:c0:d2:
9c:96:e9:43:fe:16:6b:eb:a5:2b:d4:19:69:a9:29:
03:be:a5:3c:0b:07:b5:73:e7:f1:20:cd:d9:93:4b:
34:e7:36:47:5f:71:f3:bc:d6:04:49:15:da:d9:a7:
ff:5a:fa:16:57:83:ff:45:6f:bd:f7:9d:c3:29:91:
b0:fc:32:00:cd:d2:f0:55:61:8a:a1:c9:11:9d:23:
51:75:4c:8b:60:01:87:35:27:56:3b:60:e2:dc:74:
26:ef:be:73:36:f4:65:ea:da:f0:88:a8:6a:89:f6:
be:cf:21:de:04:e0:5f:df:ae:dc:83:9f:ac:71:84:
47:3a:0d:9f:29:69:98:6a:a6:7c:3a:e6:e7:95:a4:
75:44:03:f0:77:c9:e9:eb:43:89:65:6a:8e:52:b5:
2a:d4:4f:f6:ea:06:18:7d:ec:bb:0b:1e:30:e5:68:
a9:18:fa:ba:9e:e4:3d:6e:c5:f5:2f:24:91:7c:0e:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:81:64:51:97:80:C9:82:0B:11:9C:F5:6A:01:7A:C8:2A:2F:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C40BECE0C1AF11EF8DB907B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.88.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:1e:18:7a:1a:03:f2:ea:4b:63:89:d4:67:d6:81:5f:0c:dd:
49:60:62:57:12:6d:65:24:dd:29:7c:c3:6d:f7:19:5a:47:76:
d1:f0:ee:ea:72:40:2e:01:79:45:37:f7:18:5b:ff:14:bd:e2:
59:fe:1d:59:0e:19:95:6d:34:1e:2c:5b:c5:43:de:61:13:2c:
31:d4:b7:37:52:6e:63:c4:1d:94:fa:07:e6:8a:7e:bd:c9:c8:
59:6d:fa:65:d4:5d:1c:72:cd:2c:75:c1:e3:62:15:3b:4e:7f:
24:69:17:b0:ad:e7:60:23:be:62:d2:c7:3e:ac:ad:e0:22:44:
e9:33:f9:2f:7f:12:8f:39:a9:89:c5:cc:23:9b:a0:93:20:bd:
cf:28:f4:d2:12:ea:ef:75:6b:e9:1c:06:d7:ff:0f:e8:24:24:
5b:8c:54:13:6d:2a:f9:62:96:48:fe:c8:99:ed:ee:3f:0d:e3:
92:6d:b7:52:a4:e1:92:a8:f5:97:b8:4c:2e:0e:1c:f4:fa:a3:
c9:96:e1:f9:48:28:eb:67:35:bc:c8:4c:38:d5:d8:55:81:24:
51:10:25:ad:b2:09:c7:1c:8c:fd:e9:3c:23:80:b7:22:41:0d:
9b:6a:41:7c:a2:75:26:3b:a9:c6:8d:b1:3e:1b:4f:9c:9f:23:
1f:f1:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:36 2025 by rpki-client