Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D584DDD6C1A711EF9A8BC886762E951A.roa
File: D584DDD6C1A711EF9A8BC886762E951A.roa (raw, json)
Hash identifier: rKi6l4cafSCJFO0JMWyp1tlJ8+dFugrFRCebKnt2tSY=
Subject key identifier: FF:C7:8E:6E:52:CE:06:0B:63:8D:8F:0E:9C:9E:99:84:D9:90:22:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012105
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D584DDD6C1A711EF9A8BC886762E951A.roa
Signing time: Tue 24 Dec 2024 03:33:26 +0000
ROA not before: Tue 24 Dec 2024 03:33:22 +0000
ROA not after: Wed 10 Dec 2025 03:33:22 +0000
asID: 984
IP address blocks: 154.92.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73989 (0x12105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:33:22 2024 GMT
Not After : Dec 10 03:33:22 2025 GMT
Subject: CN=676a2b86-cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:62:fc:09:51:12:0b:a5:b4:6e:23:99:21:
e9:8c:b3:e4:cd:55:b0:3d:ad:df:b1:1c:56:fe:19:
b2:31:db:65:cb:25:36:cb:cc:83:f6:94:5c:c0:20:
eb:2d:ad:04:22:e7:c2:30:df:57:cb:99:da:fc:17:
09:03:f0:82:e0:68:bd:c1:15:c7:45:46:3a:e5:61:
ec:ad:bf:03:62:d1:df:c5:29:c8:08:1d:70:9e:78:
f6:d8:16:c0:47:5c:5c:8c:54:c4:5b:cc:f2:6b:d8:
63:63:c5:e3:c7:ea:42:ac:a9:d9:68:e5:c5:9a:56:
13:75:4c:25:81:3d:33:fc:3f:82:c4:89:3a:19:53:
37:02:93:4a:df:3f:14:fc:bb:f0:90:3d:37:6a:b0:
75:6a:0f:50:99:94:46:85:7c:c2:2a:00:ed:a5:27:
66:a6:eb:e0:63:7a:67:46:52:39:12:fb:a3:4c:c6:
1d:60:97:fb:68:48:02:7d:4f:0a:d4:76:80:6c:0b:
a9:8a:74:fd:03:84:74:3b:52:3b:6f:c5:21:02:a8:
5d:a7:5c:e5:57:23:a5:06:04:a0:89:8d:d5:42:19:
83:30:ca:93:bb:2f:db:c7:fc:67:f7:46:90:d6:d0:
f5:d5:f0:b4:6a:e6:13:9e:f5:04:98:04:7b:6f:5b:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:8E:6E:52:CE:06:0B:63:8D:8F:0E:9C:9E:99:84:D9:90:22:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D584DDD6C1A711EF9A8BC886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c4:87:c5:48:f6:90:c9:e1:90:78:e2:e2:c1:96:42:46:52:
db:03:6c:b7:61:86:f4:54:8f:d1:90:03:1a:68:1d:ec:ce:6b:
63:8b:cd:88:97:97:66:dc:cd:46:af:bb:98:69:35:fa:c2:c4:
cc:8c:8f:bd:d2:57:85:f0:17:70:f7:ce:8d:a6:13:9d:54:6b:
62:83:1a:5c:ae:9b:4b:f4:a8:fa:9b:5e:35:b8:f1:78:5b:d9:
cc:12:6e:1f:94:29:07:80:86:95:99:65:71:fb:d2:29:59:90:
48:70:b9:bd:b3:d2:b3:e8:34:64:32:59:e8:f3:3d:e5:89:22:
0d:97:9f:9f:d1:4c:d8:47:7c:3c:58:99:7d:d7:cc:f3:9d:49:
74:c7:ae:76:14:b1:05:4d:2c:33:69:ca:87:93:7a:bb:9a:03:
e2:36:d3:c0:ff:b7:6c:d6:f2:bb:dd:11:1b:1e:c9:a7:0a:4c:
04:29:9a:ab:b4:a0:e0:f2:a4:57:32:ab:9a:9a:3f:44:cc:74:
03:05:9d:f4:4e:87:88:88:b8:99:37:29:31:bb:d7:39:6e:3c:
a6:0f:b0:04:32:d1:f9:51:d9:cd:93:fd:39:c4:0c:5f:1c:2d:
45:0a:96:c0:b6:00:00:ff:79:d7:92:52:8e:68:75:8a:cf:d8:
ca:8e:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:53 2025 by rpki-client