Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA58D5BEBE9111EF8C85C496762E951A.roa
File: EA58D5BEBE9111EF8C85C496762E951A.roa (raw, json)
Hash identifier: Y0NhBBlgfpPGo6JVKvJ4BnTb9fQ/NtuIH+C8w3bZomE=
Subject key identifier: 66:97:FC:36:FD:3F:4B:88:7F:DB:B7:A6:A7:01:79:FE:38:A6:09:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA58D5BEBE9111EF8C85C496762E951A.roa
Signing time: Fri 20 Dec 2024 05:18:58 +0000
ROA not before: Fri 20 Dec 2024 05:18:55 +0000
ROA not after: Wed 10 Dec 2025 05:18:55 +0000
asID: 984
IP address blocks: 154.82.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72728 (0x11c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:18:55 2024 GMT
Not After : Dec 10 05:18:55 2025 GMT
Subject: CN=6764fe42-da9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:24:e3:5d:c3:c9:01:a0:40:a7:c3:5d:a6:
06:5f:e4:54:fa:4f:3f:59:2c:cd:bd:f1:5d:01:74:
55:46:21:04:61:6d:5a:6d:e6:ce:2e:a5:b2:9b:7e:
35:79:18:06:ed:87:02:e3:1a:18:83:66:06:02:e9:
2a:74:44:c2:09:4d:9a:6e:ee:ac:97:03:e0:df:42:
ff:02:b3:e4:07:2b:79:ba:eb:11:c8:ff:26:65:3a:
7c:be:56:c3:08:df:56:6a:3e:ca:30:93:39:8a:ea:
83:a7:de:aa:dc:dc:d4:e5:83:b1:48:5a:b4:5a:f0:
93:40:c3:89:b1:07:87:b1:f7:83:ad:a8:09:49:98:
06:23:04:df:86:3f:22:66:62:71:3a:cf:fe:7c:86:
d4:ac:41:ff:d1:b3:e3:5e:e8:d4:c5:1d:7c:b8:db:
73:ad:76:0e:82:93:d3:9a:7a:ba:85:ca:6e:35:dd:
7f:d0:56:53:80:3d:42:8c:19:f5:e0:02:84:3f:17:
24:25:49:86:ee:97:5f:00:b2:c9:a4:99:7c:0d:08:
ac:2f:45:ba:19:fe:53:f5:87:ae:7b:24:0a:88:1e:
0c:50:db:37:70:5f:4b:5d:a3:e0:9a:bd:34:5c:dd:
20:c5:fb:b8:ab:2d:ff:4e:0d:55:ec:64:90:60:45:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:FC:36:FD:3F:4B:88:7F:DB:B7:A6:A7:01:79:FE:38:A6:09:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA58D5BEBE9111EF8C85C496762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.185.0/24
Signature Algorithm: sha256WithRSAEncryption
20:89:e3:b7:dd:bb:9c:c3:b2:0f:ca:ef:86:02:9f:2f:48:62:
b3:16:45:7c:a2:47:e3:59:d5:f9:21:52:b0:f1:ff:4b:ac:b6:
1f:e8:0d:f6:71:00:76:87:8f:c8:3a:f2:0f:de:36:2e:b8:41:
b1:7b:4f:df:9d:1f:b0:6a:b7:a4:d9:59:6c:9c:51:00:27:42:
82:d6:98:61:79:2f:57:81:67:d8:2f:2b:48:69:89:b7:6a:36:
23:92:79:5d:8b:82:ba:c6:ff:96:bc:75:b0:8c:e0:ac:39:6c:
d0:31:55:fe:93:db:0c:67:da:d3:c6:41:d4:69:b1:aa:7b:8d:
2b:d7:33:d8:f8:f9:3d:98:05:94:ee:d6:a0:15:86:04:34:28:
ac:e5:30:17:31:c7:1a:ed:f3:11:c1:a9:a0:18:78:40:9a:b3:
53:3e:4c:4f:ae:8e:70:01:a2:f3:90:20:51:aa:d1:02:a9:2d:
57:23:07:07:88:ed:ca:cd:22:83:9c:9c:ba:53:28:a8:41:24:
e3:0d:a5:2c:39:2c:05:67:85:b9:d5:b9:45:95:91:8d:46:10:
bb:cc:25:e9:c8:8f:51:1e:7f:19:f2:7d:b6:fe:6e:92:19:19:
2a:84:c2:f1:db:7f:65:fb:a7:40:3a:bf:bd:36:2d:6c:d3:57:
e2:fd:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:37 2025 by rpki-client