Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA263502BB7611EF82BAAC8D762E951A.roa
File: CA263502BB7611EF82BAAC8D762E951A.roa (raw, json)
Hash identifier: js5J1UI7MawXvvHJxjth/iFK2XS74oQqVsg9aczmPO8=
Subject key identifier: 00:0B:DB:45:10:33:39:B2:AC:B2:F1:6E:73:A7:00:A4:67:6D:AB:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA263502BB7611EF82BAAC8D762E951A.roa
Signing time: Mon 16 Dec 2024 06:27:14 +0000
ROA not before: Mon 16 Dec 2024 06:27:11 +0000
ROA not after: Mon 22 Dec 2025 06:27:11 +0000
asID: 132546
IP address blocks: 154.197.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72578 (0x11b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 16 06:27:11 2024 GMT
Not After : Dec 22 06:27:11 2025 GMT
Subject: CN=675fc842-1997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:e9:9b:a4:2d:be:35:a5:75:f1:31:2e:48:
31:ec:71:b3:97:13:87:41:b1:21:15:fa:85:81:42:
65:2d:f2:26:77:29:56:70:0a:c7:32:bb:72:e0:c4:
66:8f:0f:26:6e:57:96:64:67:b1:ce:01:5c:7e:0d:
e3:8f:c9:a3:02:8c:c7:e5:bf:5d:ab:1b:77:c0:b9:
2b:6e:12:11:bd:50:41:24:58:aa:17:84:cc:84:fd:
11:37:22:57:b1:f2:79:a5:69:37:80:db:b0:73:c7:
e5:3b:45:c5:6d:76:8a:fa:99:c4:99:10:ba:c1:b3:
a9:e1:5a:61:27:22:ac:8a:c3:0a:e3:26:37:47:99:
5b:32:9c:f3:4e:84:24:22:ab:58:44:a7:30:81:23:
cb:5d:19:a0:38:d0:b7:a6:81:2c:9f:f7:6c:f4:fd:
40:5a:60:26:af:6c:81:3e:59:a8:a4:55:14:b8:02:
b0:4a:70:28:7c:3e:de:a5:1d:49:a4:56:20:a0:01:
30:ae:1e:6a:c1:bd:cd:5c:a6:8f:dd:5e:95:b0:9f:
81:40:98:18:24:7d:f1:86:c6:c2:d2:72:78:c4:cb:
cb:33:1e:1f:07:24:6b:c3:d3:83:84:78:4a:65:aa:
89:c9:d8:1f:58:a1:19:34:a4:8d:af:24:87:8c:bf:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:DB:45:10:33:39:B2:AC:B2:F1:6E:73:A7:00:A4:67:6D:AB:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA263502BB7611EF82BAAC8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c7:27:55:5f:0d:a0:e3:e2:ef:91:d4:d5:1c:68:02:d3:58:
ff:ed:3e:8e:6e:99:17:f4:69:f9:1f:3a:fa:3d:b2:11:43:03:
1a:3e:0f:42:91:77:36:df:f6:c0:16:1a:d5:10:cb:5f:9f:af:
4c:ed:64:d8:84:80:a8:0c:8d:08:f6:79:0b:72:44:1e:22:cc:
7c:0b:31:d4:61:52:2f:85:be:84:6a:91:4b:70:46:52:ea:75:
9c:13:3f:80:42:91:8b:04:39:7f:99:7a:c9:5a:5e:09:9a:b9:
98:0e:5d:09:92:77:71:80:2a:9a:59:ca:1d:da:29:cb:a6:bf:
00:a6:69:2f:28:05:93:f4:03:cf:43:66:85:50:47:dc:69:0c:
1e:d9:bc:7b:5c:6d:b3:1a:4a:34:79:f5:32:1b:c5:b7:07:37:
5b:1e:7a:eb:90:d6:65:34:ce:dd:64:67:96:a1:99:57:e7:29:
86:d7:81:6b:50:ce:bc:56:c6:43:9a:4c:92:64:5b:d8:f4:a5:
7f:d9:d9:18:c1:ce:60:7f:07:bf:63:b3:41:9c:98:04:53:da:
74:c5:9b:fc:79:17:40:fa:03:69:61:b8:fe:df:a7:5e:c6:dd:
9a:63:f0:e5:89:58:87:6c:e5:23:3b:10:de:d3:e1:bc:01:2a:
76:73:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:04 2025 by rpki-client