Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2061ACC3C411EF8D785178762E951A.roa
File: CB2061ACC3C411EF8D785178762E951A.roa (raw, json)
Hash identifier: wIgy6h4PTgcWHN9ITI9yNWPi1aHnV/u65nJJUkHgdoA=
Subject key identifier: 15:60:4F:04:8A:A5:8E:1E:48:A9:E9:D7:6E:F6:74:CA:AC:32:A9:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2061ACC3C411EF8D785178762E951A.roa
Signing time: Thu 26 Dec 2024 20:05:46 +0000
ROA not before: Thu 26 Dec 2024 20:05:42 +0000
ROA not after: Fri 12 Dec 2025 20:05:42 +0000
asID: 984
IP address blocks: 154.83.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75716 (0x127c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:05:42 2024 GMT
Not After : Dec 12 20:05:42 2025 GMT
Subject: CN=676db71a-9b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:5f:84:ec:6d:69:30:d7:ab:24:36:f3:55:
a3:d8:36:1f:6a:13:b1:24:e1:9a:1e:2a:13:2f:e7:
c2:35:34:4d:5d:34:fc:ae:93:c4:a2:ed:04:98:a9:
b7:32:84:c6:18:6b:5e:83:94:43:9d:e6:49:89:46:
26:b8:f9:0d:64:a1:18:f5:9e:50:1c:88:18:6c:da:
d4:d7:82:96:c3:4d:f7:f8:09:f9:4f:de:34:87:1f:
1b:11:ce:f3:65:06:99:3f:eb:94:a0:1e:dd:ca:bd:
56:03:c2:dc:71:4e:09:12:62:39:ba:a3:22:1b:4c:
fe:3e:84:e4:d5:cd:12:d2:68:70:2d:47:9e:f4:5c:
8e:e0:e2:0d:65:5b:2d:8b:59:fc:56:98:2e:e4:9b:
e2:cf:f8:8b:e1:48:49:91:4d:ee:3c:5d:f8:2f:fe:
36:23:61:fc:2a:6e:82:68:ac:52:63:19:80:55:d7:
9e:dc:39:4f:02:94:0b:31:9b:d2:76:91:ef:19:64:
13:2c:4d:ad:af:5f:5d:ed:4c:aa:8a:a7:7d:b2:f9:
d7:7a:da:36:50:06:be:e0:d8:fa:c6:31:b3:62:bd:
38:94:a6:f0:b0:fa:27:f7:e9:14:ab:a0:20:d4:82:
9b:1f:93:5d:77:60:a1:d6:a4:1a:c3:45:dc:42:ff:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:4F:04:8A:A5:8E:1E:48:A9:E9:D7:6E:F6:74:CA:AC:32:A9:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2061ACC3C411EF8D785178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1a:fc:d1:29:a8:2e:61:e9:04:71:b3:32:5a:ea:ef:2f:05:
b0:24:bc:6c:9f:ee:a1:37:94:1a:b2:1a:c7:1e:07:85:0e:1e:
f9:ca:9b:e9:6b:7d:a8:ec:27:8f:7d:84:77:66:11:87:6a:7c:
36:f5:4e:5d:9d:1d:62:f8:d4:34:f5:ec:65:24:3e:41:03:7a:
df:14:37:a3:b6:17:2d:cf:f6:4b:9e:91:39:79:b3:df:be:be:
3f:82:86:d8:e2:8a:00:e2:f3:77:79:c0:7c:65:93:53:d6:35:
2f:dd:60:4a:fb:e6:e8:bc:c8:4c:32:c1:3d:99:9c:c4:7c:2a:
26:ba:d8:48:30:9d:ef:f6:f9:d7:06:6f:3e:16:e1:22:9f:fa:
2d:b9:6c:cc:fd:f8:b7:38:14:74:e9:31:2a:b1:51:c8:8e:79:
e4:b1:b3:26:13:d9:10:de:a5:a0:4a:5d:13:db:34:8c:e2:fe:
8d:f1:ed:c9:2c:51:f0:97:a4:ac:21:0f:f6:f0:9d:22:e7:c6:
a7:88:41:34:c2:20:6f:2f:a0:b7:7c:d6:7b:6a:fb:54:f6:40:
70:5e:cf:9b:4c:9f:f0:18:b9:ca:b8:6f:ca:2a:0c:52:06:c6:
95:08:37:4d:a1:cc:b2:b0:aa:e6:c2:a0:3c:01:b1:20:8b:3b:
0e:ca:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:25:46 2025 by rpki-client