Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9CE522C1B511EF9054625F762E951A.roa
File: CF9CE522C1B511EF9054625F762E951A.roa (raw, json)
Hash identifier: cV6FvXo3PjPx6TNuNQm029WTMmwy6XBs+XJlcX8YFco=
Subject key identifier: DD:83:17:A6:A1:95:87:F1:FE:3D:3F:B9:C4:98:EA:74:2B:2A:67:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9CE522C1B511EF9054625F762E951A.roa
Signing time: Tue 24 Dec 2024 05:13:29 +0000
ROA not before: Tue 24 Dec 2024 05:13:25 +0000
ROA not after: Wed 10 Dec 2025 05:13:25 +0000
asID: 984
IP address blocks: 154.193.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74157 (0x121ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:13:25 2024 GMT
Not After : Dec 10 05:13:25 2025 GMT
Subject: CN=676a42f9-e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:d5:60:00:15:4a:ca:8c:69:29:0a:3a:12:
20:25:8e:11:6e:c9:9e:fe:14:16:47:8f:93:7f:7c:
53:8a:0d:e9:25:bc:1e:a8:4e:e3:69:38:5d:94:9a:
d1:19:7c:0f:3b:ec:fc:df:54:39:c4:b4:21:2b:84:
af:ea:de:d5:d6:57:d1:a0:8e:50:17:ed:11:54:90:
a4:db:72:7e:b5:ca:33:4c:de:ad:6d:5d:41:49:50:
f8:18:2f:15:0f:76:e6:90:b7:48:fd:ef:6c:a7:df:
1f:ff:52:2c:e0:3e:b4:2e:1c:df:8a:f7:01:65:e2:
89:ee:97:5b:8f:29:de:e0:e6:75:74:5e:13:c8:b3:
46:f4:56:f1:73:a7:d3:a4:57:71:b9:23:87:c3:66:
2f:f7:62:cd:c6:f1:af:b4:11:82:91:6d:1d:14:ec:
1c:da:bb:08:5a:47:cf:8f:27:4e:ab:97:b0:88:2d:
e1:3b:22:92:3a:9d:fa:1b:c7:76:0d:97:8c:4a:26:
99:3f:d0:01:f5:93:c7:d3:88:3a:46:5a:74:0b:c3:
32:cf:27:b7:e8:b8:c9:da:63:07:d9:ec:ee:8c:a7:
42:92:89:89:f7:86:77:7e:d3:06:80:05:c2:b7:7e:
00:3c:6f:86:50:56:c9:13:0e:3f:a6:c4:6c:1b:2e:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:17:A6:A1:95:87:F1:FE:3D:3F:B9:C4:98:EA:74:2B:2A:67:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9CE522C1B511EF9054625F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:51:f4:09:34:28:a4:33:7f:da:83:52:1d:24:94:b2:fc:
bf:7b:c1:9c:bc:6d:4c:ef:35:78:14:b1:e2:8d:ac:83:7b:eb:
1c:74:13:0b:ce:84:f9:e5:73:36:bc:77:5b:c0:b4:42:c3:f5:
9b:7b:5b:73:b4:ea:63:39:ee:c3:40:66:c2:be:39:90:2e:88:
97:b5:27:1b:99:33:45:89:37:04:30:39:61:29:b8:3e:87:0c:
0f:e0:c7:b7:b6:3d:e2:a3:82:75:46:1f:9b:47:97:23:70:d5:
f5:4d:59:2f:2e:7b:2f:20:0a:f9:3e:47:bf:23:ff:dd:ff:d8:
79:b2:be:8e:82:ba:0b:f7:38:8d:7a:f6:93:d7:69:24:8a:ce:
22:b9:2a:2b:63:47:a3:1e:b4:47:b6:4b:ef:62:74:73:69:1f:
63:85:63:8f:fd:c4:7a:57:e3:ac:ed:19:69:b1:33:c1:91:d3:
f5:b1:81:17:fc:8a:c2:b6:b3:a1:90:ed:67:7a:3c:bd:c6:f8:
e3:8b:fe:26:4b:2c:20:35:c8:8f:e9:5d:c0:81:cc:38:e7:ca:
7e:d4:d7:cf:38:75:91:71:e7:76:71:c2:75:86:20:41:f6:cd:
e4:cb:a0:b2:38:a9:3f:ba:c8:d5:86:6a:fb:ab:f7:20:6a:b7:
2e:f6:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client