Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51D5BA8C38211EF871C7A5A762E951A.roa
File: C51D5BA8C38211EF871C7A5A762E951A.roa (raw, json)
Hash identifier: M5d1Uvm1xVacZLUHrIMb2Hple6Bx/JMRlJsC+KXWSc4=
Subject key identifier: 06:CC:A4:E3:4B:6D:2C:35:1B:24:9F:BD:24:50:37:B3:69:C9:BF:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012770
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51D5BA8C38211EF871C7A5A762E951A.roa
Signing time: Thu 26 Dec 2024 12:13:09 +0000
ROA not before: Thu 26 Dec 2024 12:13:05 +0000
ROA not after: Fri 12 Dec 2025 12:13:05 +0000
asID: 984
IP address blocks: 154.94.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75632 (0x12770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:13:05 2024 GMT
Not After : Dec 12 12:13:05 2025 GMT
Subject: CN=676d4855-d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:5a:f0:09:99:a4:63:6c:0d:6b:f2:b9:46:
b2:ec:67:12:96:96:20:8e:64:98:87:35:75:f4:7c:
58:78:16:0b:2c:b4:d2:36:4d:f7:af:f3:b5:21:15:
43:a6:d9:b8:20:09:05:cc:bf:4d:75:48:3f:f9:ba:
04:f6:e6:68:d1:df:4e:b2:ab:41:fa:43:1a:98:74:
3a:de:ed:03:14:69:58:3d:e3:01:5e:81:6f:a0:20:
20:de:5f:d4:0e:d8:63:4f:5e:3a:8a:b4:cd:a9:60:
06:73:0b:83:64:9f:30:ba:d2:5c:0e:5e:d9:fc:0c:
d4:6b:0d:d3:5b:3c:4b:37:d3:d8:8e:6b:e1:77:7d:
ad:2e:13:96:1e:81:eb:47:85:48:b5:30:fb:ec:2f:
c9:66:fb:7b:db:05:5a:6e:42:ed:4e:9f:4b:90:91:
c2:82:33:0f:c0:34:87:3e:44:e5:b0:e0:81:1d:36:
99:9b:b4:d6:a4:13:e6:6b:a2:b6:8a:cd:f7:b6:11:
52:63:63:89:9c:8e:9b:7f:bc:4d:9b:b6:27:ad:7f:
a4:dd:7a:fd:ff:35:43:fe:9a:71:5f:7a:99:6d:5b:
cf:0e:9f:33:41:c4:a4:b0:88:67:26:01:72:a2:53:
75:6a:89:3c:18:3f:15:9b:86:df:ac:d2:b0:4a:a6:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:A4:E3:4B:6D:2C:35:1B:24:9F:BD:24:50:37:B3:69:C9:BF:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51D5BA8C38211EF871C7A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1a:df:77:bd:a3:bc:55:11:53:13:66:28:44:70:7e:4c:d5:
bc:9d:71:78:3f:bd:85:d3:c8:73:34:0e:fb:23:14:f2:04:f4:
5d:4b:5c:80:93:69:53:2c:cb:69:9f:db:82:a2:55:58:17:ed:
c0:66:a5:d2:7d:7e:5f:da:75:8a:ee:7d:87:52:e1:f3:19:95:
26:b4:ba:96:de:41:6f:63:5a:87:86:fb:f4:bb:d6:5a:0b:5c:
a2:4a:8b:54:a0:5b:46:9a:a4:61:60:4a:1c:e8:ca:dd:d9:08:
d0:8e:2e:74:c4:ed:f9:80:ad:9b:fc:e8:2e:72:2a:72:84:da:
8c:46:64:65:13:9b:42:de:cf:7a:2b:95:a6:cc:95:ff:61:34:
31:ba:32:ac:5d:85:f2:61:29:94:48:6c:7d:3a:04:9d:e1:ec:
fa:af:21:17:20:1a:3b:7f:af:3f:0a:f0:e8:3e:cf:e4:74:82:
1f:61:2e:1e:99:1e:72:f0:07:6d:d4:7b:89:a3:a8:8f:ae:c8:
8e:58:29:65:9e:56:28:25:59:75:7c:14:c8:fb:d4:b5:50:4b:
ca:73:fa:d4:de:4d:96:c8:df:02:bb:00:9e:43:61:70:07:86:
fd:9b:e8:b4:32:52:51:ab:04:18:62:44:38:d9:cc:b7:46:7f:
0f:00:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:34 2025 by rpki-client