Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F68C1EC1AE11EFBB72BBB2762E951A.roa
File: E8F68C1EC1AE11EFBB72BBB2762E951A.roa (raw, json)
Hash identifier: kD21YgIXsAkhc2UZLZpB1dIc9jAdAd0b+GBOPxSeU9E=
Subject key identifier: 68:62:7F:B4:4A:C4:74:AF:C5:3A:1C:98:32:1A:B5:ED:68:02:D0:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01215B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F68C1EC1AE11EFBB72BBB2762E951A.roa
Signing time: Tue 24 Dec 2024 04:24:05 +0000
ROA not before: Tue 24 Dec 2024 04:24:01 +0000
ROA not after: Wed 10 Dec 2025 04:24:01 +0000
asID: 984
IP address blocks: 154.193.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74075 (0x1215b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:24:01 2024 GMT
Not After : Dec 10 04:24:01 2025 GMT
Subject: CN=676a3765-e2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ed:ee:0b:fe:8b:b3:34:d2:7a:6c:cb:29:05:
77:bd:c1:5e:78:8a:91:ab:a6:97:20:b9:81:8a:84:
42:0f:80:fc:8e:54:9f:52:f2:12:4d:a9:7d:1f:ae:
54:26:c4:0b:f0:ce:63:7a:99:20:1e:6c:b9:90:a6:
51:ac:4a:1f:e5:4a:78:c9:51:99:b9:fb:43:a7:c1:
a1:49:c6:5b:6f:ef:05:9e:1b:f7:ec:3b:e3:e2:0b:
18:4f:dc:9b:bc:fd:44:70:cd:a4:8e:6d:53:a3:12:
70:01:79:38:57:01:91:be:b9:16:45:6b:9d:6b:f2:
55:15:70:72:b3:81:1b:10:1e:70:a7:15:71:83:06:
f1:3b:87:10:d2:5b:a0:a5:1b:30:06:ac:fa:67:ab:
84:3b:99:1f:1c:4c:22:4f:83:de:94:25:3e:2a:ff:
f6:8c:d8:bd:e9:bd:d8:6f:fc:b6:c4:9b:98:42:07:
61:66:f6:26:56:78:16:63:dc:48:60:70:09:09:c0:
59:d0:bf:12:92:06:1a:c9:19:be:00:2f:69:1c:dd:
90:36:91:10:2c:cf:0b:c7:58:61:66:7c:6a:ff:c7:
a7:97:57:27:2d:06:b1:69:b2:5a:cc:31:7e:6e:90:
49:49:a7:8d:69:94:79:bd:ba:72:09:49:0e:79:4c:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:7F:B4:4A:C4:74:AF:C5:3A:1C:98:32:1A:B5:ED:68:02:D0:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8F68C1EC1AE11EFBB72BBB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:df:89:06:e6:17:93:11:c7:9f:4a:01:60:f1:13:e5:1d:22:
83:3f:9d:f7:9f:3d:e2:e3:53:4c:77:da:61:ed:13:04:32:b4:
b1:da:d1:33:fe:af:9c:a7:ea:5c:96:be:6d:cd:d5:75:d8:79:
d9:c5:20:72:65:b0:86:d7:b5:4d:56:fb:e9:c3:f4:c5:55:5d:
6d:36:e6:c0:32:27:eb:5e:86:7f:bf:a1:30:56:ec:af:3e:b6:
0c:22:70:77:12:b9:a3:f1:cc:c8:d9:c3:7a:00:f7:b4:06:01:
dc:2a:2b:fc:92:e0:18:66:e3:0b:ec:0e:18:0a:85:5e:62:7f:
38:6e:7d:98:b0:44:c6:9b:5f:94:98:37:67:a0:69:81:de:e3:
a4:d0:70:c1:13:d8:4b:33:e7:cf:0a:03:a7:c6:20:20:93:3b:
56:21:8e:b2:25:a7:fa:02:f8:6d:d6:d4:71:cb:dc:e8:15:f3:
f2:16:6a:1d:ee:f8:c9:0f:8b:ab:43:4b:22:8a:45:1e:c5:5d:
9c:0b:8c:36:d5:3e:7a:de:68:8d:9b:40:45:81:46:c9:7d:28:
46:b0:ec:22:01:48:31:69:f0:23:18:46:58:39:30:c6:36:5c:
f9:7b:46:5f:c4:58:34:e3:00:5b:85:33:46:bd:46:80:76:c8:
ed:d0:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:24:38 2025 by rpki-client