Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDD916C1CA11EF866C7462762E951A.roa
File: C4CDD916C1CA11EF866C7462762E951A.roa (raw, json)
Hash identifier: RbZZVTdaqXZ3Bzxnm1V5knDsjKNO+adfOf/xTZT8nVw=
Subject key identifier: C0:E7:BF:80:BE:5F:6D:CA:E9:12:DF:AA:70:60:ED:EF:68:81:93:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012259
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDD916C1CA11EF866C7462762E951A.roa
Signing time: Tue 24 Dec 2024 07:43:30 +0000
ROA not before: Tue 24 Dec 2024 07:43:26 +0000
ROA not after: Wed 10 Dec 2025 07:43:26 +0000
asID: 984
IP address blocks: 154.193.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74329 (0x12259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:43:26 2024 GMT
Not After : Dec 10 07:43:26 2025 GMT
Subject: CN=676a6622-98c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:79:df:98:95:a7:e5:1c:90:53:63:d0:e5:
b2:23:28:69:73:c3:f6:1b:51:f7:67:3a:d5:64:6e:
d7:2f:ec:85:6f:d6:89:37:9b:5e:8e:50:6a:1e:61:
e2:62:bc:29:a7:08:28:73:2d:f8:4f:52:e7:57:42:
a1:09:b4:27:29:6e:4d:35:30:49:f7:d7:05:61:5a:
87:70:e2:48:1d:57:b4:70:f1:f3:20:bd:fa:3f:ae:
de:a2:0f:96:c2:a7:28:a9:e5:21:f6:45:81:de:fb:
ed:7b:2f:63:c1:7f:6c:36:43:e2:49:1d:03:b4:bd:
09:af:48:cb:91:6c:e8:3f:50:9b:85:ea:d9:55:cb:
b3:c0:26:a2:c3:bc:f1:d2:08:e0:ff:45:b3:eb:71:
f6:38:1c:28:76:27:e1:6f:d7:49:d1:f3:9a:49:d1:
d2:ea:86:e3:db:c0:8d:8f:8f:02:49:10:09:cb:c8:
d3:b8:d8:20:53:8e:30:1b:fa:43:83:e3:9b:02:74:
8e:8e:a8:08:c5:3a:bf:9d:72:30:77:29:d4:b3:70:
a9:69:09:c9:04:42:11:b6:87:da:42:57:0f:09:95:
28:04:d9:a0:cb:bb:fa:8e:6d:b2:59:31:5d:de:38:
78:9f:50:90:a3:28:d4:ab:d8:e0:c1:ba:dd:12:a8:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:BF:80:BE:5F:6D:CA:E9:12:DF:AA:70:60:ED:EF:68:81:93:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CDD916C1CA11EF866C7462762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:26:37:d4:4e:7a:1e:ef:97:00:3e:08:2b:83:bb:14:2e:83:
36:41:7d:ba:dd:b0:15:72:5a:8b:f7:49:ad:f1:32:01:dc:79:
f8:93:5f:d0:7b:33:43:e1:38:8b:ac:ab:34:f5:9a:58:ca:ab:
08:d1:38:66:56:bb:58:9a:a8:6e:62:ba:ff:51:a1:18:ec:9c:
9e:a5:11:51:ce:50:8c:0f:30:bd:02:06:a0:f6:18:b0:9d:d0:
1e:6f:43:dd:19:e2:3b:4e:46:ac:3f:8c:66:d6:41:b8:04:e1:
98:d4:2b:0f:b0:5b:47:b1:30:04:73:81:fb:26:c3:5f:db:7b:
47:b5:6d:f2:da:2b:98:18:86:e6:8a:22:5a:da:95:b1:06:41:
63:96:29:d8:20:aa:53:02:b8:77:4b:73:bc:48:a8:85:29:83:
40:37:40:7c:e7:9d:94:6f:d3:bf:6f:b7:cd:6b:d6:43:82:05:
b5:fe:3e:66:b3:95:6b:2e:89:79:d2:ec:bc:3b:8a:a2:6b:91:
78:62:66:3d:e2:22:2e:32:a5:3c:94:99:ab:03:e8:6f:a1:59:
59:64:99:dd:06:74:cd:8f:ef:12:a1:a5:68:85:6f:05:61:3c:
14:e0:35:62:ff:37:54:b5:b3:59:ac:cf:ee:f4:c7:ad:a6:c9:
91:83:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:06:03 2025 by rpki-client