Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46E52CEC3D211EFBA041651762E951A.roa
File: D46E52CEC3D211EFBA041651762E951A.roa (raw, json)
Hash identifier: C6A9BOwzKHpr8pgOpbojAAg2WwdrazN9z+9zffgmvLA=
Subject key identifier: 05:D9:6D:76:80:8B:FC:F4:FA:46:B6:2D:2F:B0:09:8E:D7:9D:2D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46E52CEC3D211EFBA041651762E951A.roa
Signing time: Thu 26 Dec 2024 21:46:15 +0000
ROA not before: Thu 26 Dec 2024 21:46:11 +0000
ROA not after: Sun 12 Dec 2027 21:46:11 +0000
asID: 17561
IP address blocks: 154.83.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75858 (0x12852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:46:11 2024 GMT
Not After : Dec 12 21:46:11 2027 GMT
Subject: CN=676dcea7-df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:0c:b5:a3:aa:06:59:23:d3:b2:39:61:26:
8e:c9:b9:ef:8e:95:1e:c5:db:26:fc:ab:42:c1:8a:
00:fb:3b:d4:32:46:3b:bf:23:4b:e5:76:e1:66:2e:
2c:66:34:b0:d4:d0:44:30:7e:01:e6:45:6f:8c:42:
c9:c3:b2:78:e5:99:b0:ba:f0:ee:92:ff:a8:8a:eb:
62:a5:57:f1:e2:c4:51:5d:e0:66:0a:38:c6:fa:48:
cb:b8:9f:88:b5:75:1a:8f:f6:9e:44:b6:cc:f3:e4:
42:16:11:fa:ea:76:00:17:dc:e6:50:c1:ac:06:c0:
34:d4:70:11:39:77:d4:77:8c:5a:46:6a:6a:7d:45:
b9:69:db:09:13:89:e7:cd:11:7f:1d:19:72:a0:a7:
fa:aa:77:06:d9:e4:3b:df:e1:58:50:96:9b:fd:75:
65:79:34:ad:b2:d7:b8:2b:83:84:29:a8:9a:79:46:
fd:b3:68:8b:c1:40:f1:43:0d:74:21:d5:2e:1a:07:
06:aa:87:43:02:63:88:75:4a:33:44:a2:59:fa:67:
0f:c4:52:60:6f:ca:53:29:b0:01:fa:00:98:12:26:
64:fb:9a:cc:e2:09:18:f9:09:dc:87:3c:85:2f:c5:
ab:2e:9e:d9:2d:9f:42:a7:6d:fe:fc:f2:c1:3b:8f:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D9:6D:76:80:8B:FC:F4:FA:46:B6:2D:2F:B0:09:8E:D7:9D:2D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D46E52CEC3D211EFBA041651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.191.0/24
Signature Algorithm: sha256WithRSAEncryption
88:08:d0:5e:fa:11:17:ee:fe:4b:86:28:a9:d0:4f:ca:83:e5:
4a:b3:b6:42:5a:94:2b:e9:ae:3c:b4:82:75:52:69:e8:2f:b4:
20:a6:8e:78:54:e5:8e:ad:71:35:25:5c:92:09:94:2c:d7:d9:
fa:a4:91:9c:d7:ca:63:b4:b0:b7:6d:07:de:7b:39:6c:3d:2d:
37:13:e2:e8:02:d9:36:ce:e6:6d:e5:05:fc:ac:ff:84:9e:ee:
62:bb:f4:49:79:9a:59:54:97:1a:fc:b6:ce:ee:ed:fc:01:83:
c7:99:06:2e:c8:30:58:89:29:c3:20:a8:76:a8:c4:a0:f3:d5:
de:dc:6b:19:2d:8a:76:a1:60:28:d6:f3:01:e2:31:de:97:1e:
8b:38:86:ce:34:82:4a:62:0a:a9:c3:90:3c:74:41:2b:1f:37:
8f:2f:c3:4b:fd:24:11:3b:29:0c:e6:0a:98:9f:81:49:e5:b1:
ba:d6:f5:45:ef:9a:e2:01:f5:de:8e:73:41:0b:5d:9c:94:1a:
e0:46:ac:96:8b:8a:28:9f:74:78:ef:aa:5b:fd:5d:09:26:4a:
ac:a1:66:51:ae:bf:81:1b:6c:3f:1b:cd:21:66:d3:f4:f0:53:
14:87:84:09:ad:7f:1d:ab:bf:b6:78:1c:ef:59:83:72:f2:ff:
c7:63:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:42 2025 by rpki-client