Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E90398C26611EFB60DF64D762E951A.roa
File: C4E90398C26611EFB60DF64D762E951A.roa (raw, json)
Hash identifier: iogtbGEKeAAPfjo5aTtAmG1hW3oXnmoibCebrwV3UK8=
Subject key identifier: 2E:4E:67:5E:6E:E2:DA:6B:32:13:F4:E0:5C:21:75:44:83:52:65:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E90398C26611EFB60DF64D762E951A.roa
Signing time: Wed 25 Dec 2024 02:20:12 +0000
ROA not before: Wed 25 Dec 2024 02:20:08 +0000
ROA not after: Wed 10 Dec 2025 02:20:08 +0000
asID: 984
IP address blocks: 154.199.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74738 (0x123f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:20:08 2024 GMT
Not After : Dec 10 02:20:08 2025 GMT
Subject: CN=676b6bdc-5bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:a4:8c:01:66:1f:af:42:36:46:f1:c7:d3:
1e:a6:d8:18:97:99:a8:78:cd:54:02:31:99:13:10:
6e:77:6c:e8:e2:8c:7c:26:87:04:61:fb:09:65:ab:
a9:fd:4f:20:ed:00:31:ff:91:5e:99:ac:a8:ed:ce:
da:4f:54:aa:96:cd:44:f0:c4:d9:4a:c7:62:9e:89:
f5:24:45:65:9c:c7:78:f7:59:49:36:0b:cf:72:05:
5d:fc:f4:d3:6d:81:3d:93:d4:e4:54:58:4b:b4:d1:
75:57:d9:18:c9:c6:29:49:a0:9b:49:ca:af:20:a2:
87:81:ab:97:c5:18:4e:43:bf:ac:b0:5b:f0:e1:8f:
c2:32:7a:71:18:56:df:e2:55:47:2d:1d:0e:e8:96:
03:d0:53:70:3b:d7:a7:52:5e:11:15:10:82:a3:08:
1a:5b:56:90:79:44:a9:10:c0:b4:2f:92:ff:a2:f5:
8a:15:7e:a6:32:54:6a:7f:e2:7e:97:b8:e6:c0:b7:
18:43:f6:59:3c:9f:32:9a:2e:d7:37:38:4f:93:8c:
4d:e0:49:c6:f9:b7:bc:94:bc:72:a2:1e:75:18:0d:
61:1e:66:9f:f5:6e:7c:23:b4:2b:db:80:57:09:d4:
85:84:86:5d:b0:9b:b2:24:5a:52:50:bb:d7:86:8b:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4E:67:5E:6E:E2:DA:6B:32:13:F4:E0:5C:21:75:44:83:52:65:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E90398C26611EFB60DF64D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:92:5e:5c:9b:ee:64:d5:fa:57:6a:bc:ae:2a:66:2b:0c:a2:
34:41:30:d7:3c:e9:06:2d:f0:85:97:d6:3c:78:95:73:ca:13:
6d:12:a8:57:04:83:2e:8e:e1:75:1c:2f:74:0a:b5:f8:33:97:
84:ea:e6:ea:76:ec:df:07:82:81:4a:5b:f1:fd:fe:c7:b5:a0:
86:7e:c2:f3:87:b8:69:85:d5:78:a7:0e:24:2d:92:b5:a9:67:
a9:18:03:3a:d5:d9:07:34:5c:74:71:84:17:fd:f8:af:0e:62:
aa:e3:63:5e:34:8c:90:14:f2:2b:15:8e:c7:46:a2:01:8b:6b:
ae:09:f9:f7:28:24:e6:e8:b7:1a:60:78:88:b8:26:b4:de:0c:
be:e0:a0:16:12:41:a4:76:7f:e2:1b:e9:5e:f3:20:42:f9:d1:
74:3f:9f:5a:01:9a:44:90:87:54:35:08:0d:c6:28:9f:ee:4b:
b5:62:f0:37:13:47:07:da:d5:9f:ec:63:13:95:fe:43:81:76:
6d:c4:24:73:19:ee:20:e3:57:2f:8c:68:f5:10:7b:06:7d:19:
23:ca:1c:6c:fb:e4:e0:c6:87:b9:88:81:7e:65:53:6b:13:58:
5a:03:50:d7:73:39:52:63:31:8c:19:85:f7:4f:a2:fc:e0:ee:
79:92:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:37 2025 by rpki-client