Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8147F86C36D11EFBEB76056762E951A.roa
File: C8147F86C36D11EFBEB76056762E951A.roa (raw, json)
Hash identifier: lVSC8Krk6HkMBk/+/6GTsEJQAXIX4gSxSq03nu3SEP4=
Subject key identifier: 34:1D:F6:1D:07:54:9C:A0:95:BD:26:DE:47:7C:CE:A3:AC:94:B2:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012708
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8147F86C36D11EFBEB76056762E951A.roa
Signing time: Thu 26 Dec 2024 09:42:55 +0000
ROA not before: Thu 26 Dec 2024 09:42:51 +0000
ROA not after: Sun 12 Dec 2027 09:42:51 +0000
asID: 17561
IP address blocks: 154.94.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75528 (0x12708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:42:51 2024 GMT
Not After : Dec 12 09:42:51 2027 GMT
Subject: CN=676d251f-15b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:50:9c:0c:f2:20:bb:fa:db:34:f1:fb:fa:
c5:75:76:cb:1c:a1:95:11:22:af:33:70:d1:bb:bc:
c5:c5:0e:3a:ea:8e:c4:60:58:4b:7c:93:6a:88:c2:
2b:21:02:29:f0:5f:cb:88:a8:09:e4:ae:de:79:8a:
0e:7c:a1:b9:68:7e:b2:28:22:1b:1e:9d:f4:09:56:
aa:0a:ee:3e:b0:41:c9:e9:6a:62:f4:8d:0e:30:4c:
6a:59:af:c6:bd:02:88:e6:f5:3e:0a:0f:e7:c9:48:
23:54:fa:3c:c0:c9:d7:28:e4:9d:62:b0:8a:9a:85:
24:9c:12:7b:0e:11:49:92:40:7a:7b:f7:9e:39:fc:
d0:31:66:a8:9d:0f:4e:e7:2b:97:ba:f9:9b:00:28:
b1:f5:49:ab:f4:3f:b3:7b:86:96:60:cf:5b:65:db:
76:4f:86:52:c4:ac:b1:a3:1a:04:80:3f:fb:96:10:
1b:98:bd:0a:2b:91:ed:81:54:ff:75:49:87:d7:91:
e1:8a:f1:c2:f1:78:67:1a:b4:67:38:d9:0a:ec:19:
29:59:97:dc:2a:22:9d:c5:d9:ad:a5:2b:19:28:38:
3a:49:48:16:90:fc:a3:82:96:5a:86:eb:d8:1a:3b:
19:cb:0e:6a:e9:1b:0f:31:11:79:c9:cb:d7:40:28:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:F6:1D:07:54:9C:A0:95:BD:26:DE:47:7C:CE:A3:AC:94:B2:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8147F86C36D11EFBEB76056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5a:3b:91:79:6a:ca:07:61:72:c9:99:ba:86:d8:7a:18:34:
97:dc:df:f8:e9:46:f7:c2:4d:1a:0a:21:44:d7:06:8a:73:b9:
41:e1:df:d2:a4:b8:26:b3:74:b8:5a:24:47:88:46:d7:b5:a1:
37:88:fd:fd:5d:c9:12:b0:3e:07:c0:74:53:f5:e9:81:af:19:
b7:73:bd:fb:6b:c4:bf:1d:bd:d9:1c:76:8c:9a:b0:4c:79:99:
81:d6:6a:ee:f7:09:ff:e5:48:e4:80:c8:66:99:d2:3d:46:12:
4f:aa:43:81:84:1f:31:c7:53:85:f5:b6:e4:35:d5:35:60:a4:
be:68:28:79:c1:1e:7d:23:f4:28:5c:44:56:1a:9a:11:23:82:
fb:f5:a9:a3:f1:16:77:a6:e4:da:3a:f2:50:55:b2:8b:5a:8c:
2f:e6:6a:d6:7d:5f:57:31:58:bc:a1:1d:5d:3a:12:ee:76:d8:
8e:20:d4:b0:02:8c:2a:29:52:7e:9d:ad:f0:b2:da:04:4e:cf:
fa:c9:f3:26:4a:48:d8:e5:9b:37:d0:e5:98:76:0e:1e:58:a3:
41:48:97:1f:c3:b4:75:87:f1:8b:cc:7d:d0:10:43:92:17:57:
d4:f0:c3:68:3d:7e:26:75:47:b6:83:9a:fd:52:3a:d8:8a:1e:
75:3f:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:13 2025 by rpki-client