Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6ED09CC3DD11EFB02B6D95762E951A.roa
File: EB6ED09CC3DD11EFB02B6D95762E951A.roa (raw, json)
Hash identifier: ljAF62qPcG8inQmltYsWxsuu9XBGbYqmtZgrEOiNn5U=
Subject key identifier: 15:07:C8:47:8B:AC:0D:BC:C7:34:C0:73:F9:73:BD:DF:4B:45:6D:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6ED09CC3DD11EFB02B6D95762E951A.roa
Signing time: Thu 26 Dec 2024 23:05:38 +0000
ROA not before: Thu 26 Dec 2024 23:05:34 +0000
ROA not after: Fri 12 Dec 2025 23:05:34 +0000
asID: 984
IP address blocks: 154.86.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75970 (0x128c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:05:34 2024 GMT
Not After : Dec 12 23:05:34 2025 GMT
Subject: CN=676de142-f57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:0a:64:0f:22:dc:a7:c5:07:f5:7d:9e:01:
a9:0a:8d:0a:cc:da:60:f9:21:1e:fd:b9:aa:b8:64:
4c:d5:e3:25:54:a2:5b:29:54:a5:fd:c6:93:68:25:
9f:81:e1:bd:d5:b8:54:6c:46:92:42:4c:09:35:12:
25:7c:17:bb:1c:cb:58:5a:b8:f0:78:03:95:c7:2b:
50:9a:b6:df:d2:fd:b3:ec:c9:4c:be:71:76:b8:fd:
dd:3d:22:97:5e:47:bd:e3:c1:8b:72:e8:cc:65:7a:
e1:44:11:5f:ff:40:d3:54:cd:8c:57:dd:8a:25:29:
97:3a:8b:f3:07:2e:37:99:ec:15:eb:c3:88:4f:bb:
b0:e7:3d:4e:75:5a:b7:20:f3:5a:52:69:bc:47:1b:
14:ef:33:33:4c:07:cc:5d:6f:ff:4b:c5:7d:c0:f7:
3b:38:fa:62:c6:66:51:7a:39:e6:b1:57:32:51:47:
dc:4c:57:d7:b6:d9:8d:10:74:5b:bb:a4:23:16:52:
66:20:c4:70:03:e6:a6:82:35:b7:6f:83:27:15:f8:
e6:d4:9b:31:20:3e:84:08:87:ad:a5:2d:60:93:15:
91:fb:fa:b4:7a:2c:0c:38:ae:62:c7:b9:f8:aa:17:
6b:85:e3:56:92:de:88:63:fb:60:0a:71:ea:47:72:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:C8:47:8B:AC:0D:BC:C7:34:C0:73:F9:73:BD:DF:4B:45:6D:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6ED09CC3DD11EFB02B6D95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.114.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d8:b1:b7:a6:4a:5b:ea:53:5b:9b:b0:32:7b:64:5d:8f:a1:
8f:de:7d:21:c8:42:45:a5:ea:94:4f:a1:e0:64:74:50:b8:c4:
1e:12:39:06:27:ff:3f:58:eb:62:ae:cd:2d:32:ab:0b:cf:4d:
18:e2:de:95:d1:79:66:03:77:94:30:11:da:5c:b0:25:73:5e:
57:bc:d5:59:ec:a1:b3:c7:2c:b6:02:cb:17:01:6e:08:1c:4f:
a7:0d:f5:c0:dd:b4:25:64:00:c9:98:7d:06:15:fa:c4:bc:2d:
f1:dc:5b:5f:82:25:bb:9d:a1:50:24:25:7e:c5:85:70:ae:fb:
63:88:90:bb:68:fe:d3:71:da:9e:11:a0:1f:61:18:ce:6d:ff:
0a:06:e5:b0:31:9d:29:3e:d4:36:3d:06:db:c2:1b:11:2a:ce:
1b:f2:ec:39:80:ee:b5:8c:dc:b2:a0:cd:5d:1c:84:a6:82:19:
8f:0c:01:46:ef:be:41:f0:09:96:df:a5:34:53:52:3e:14:c8:
b5:5c:f0:2f:87:30:30:bd:ac:57:a2:10:ef:8b:85:5f:5e:01:
81:9b:b8:30:3e:78:93:3b:46:19:7f:05:e5:0d:32:2d:68:37:
7c:32:83:62:05:9e:03:d1:52:4a:8f:a8:1e:68:09:14:d9:30:
e1:ab:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:02 2025 by rpki-client