Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB940C46C1AC11EF9820A2A6762E951A.roa
File: EB940C46C1AC11EF9820A2A6762E951A.roa (raw, json)
Hash identifier: vwDgscAFoI31hCPgsEB7JWj/HXQMQ8aCehGDpQA/W+8=
Subject key identifier: 24:74:8E:B5:E8:0B:87:2A:41:85:A6:D9:6D:BE:FA:93:C1:E7:B8:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012143
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB940C46C1AC11EF9820A2A6762E951A.roa
Signing time: Tue 24 Dec 2024 04:09:50 +0000
ROA not before: Tue 24 Dec 2024 04:09:47 +0000
ROA not after: Wed 10 Dec 2025 04:09:47 +0000
asID: 984
IP address blocks: 154.92.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74051 (0x12143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:09:47 2024 GMT
Not After : Dec 10 04:09:47 2025 GMT
Subject: CN=676a340e-5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:68:83:9a:3e:65:4f:21:e8:b0:62:1e:ef:
07:3a:80:45:25:e9:9d:7c:28:07:88:b5:1a:81:d8:
bf:76:42:ba:39:be:ef:a5:7c:65:cb:62:76:fd:0d:
f2:36:af:03:cc:23:03:b9:ef:75:76:bc:4c:e5:e9:
cb:57:98:fa:b7:c7:c7:99:d4:e7:f8:a4:be:6e:19:
41:b2:3a:9f:fb:2b:94:fb:1a:a9:f7:c5:22:75:9b:
8c:f1:23:10:f7:70:1b:ab:c5:85:b9:9b:11:74:28:
44:d9:d3:76:06:71:34:93:a7:7b:0b:82:58:c8:b7:
9a:0f:f7:d5:56:e9:c5:f2:23:b0:45:2c:20:ba:4f:
69:c3:a4:e5:b7:2b:25:fd:09:e8:17:6d:47:e2:ab:
86:d0:80:38:8a:b4:34:6f:a8:90:59:b7:5a:80:ef:
6e:1f:59:15:4a:34:01:4c:f5:a5:e6:aa:67:f9:16:
ae:2e:2e:35:c7:6a:25:63:dd:67:e7:72:80:c6:c5:
b5:8b:cc:07:01:c7:03:63:ac:7a:f5:c0:1b:0c:ae:
d5:c2:dd:d4:3d:8b:0d:24:f5:b1:ab:12:57:78:39:
63:e1:6a:d9:51:05:da:54:1a:41:0e:e9:83:cb:f4:
7d:b3:af:82:fb:6b:83:03:90:04:8c:90:14:ca:25:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:8E:B5:E8:0B:87:2A:41:85:A6:D9:6D:BE:FA:93:C1:E7:B8:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB940C46C1AC11EF9820A2A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d7:16:30:39:d5:28:e9:1d:19:c2:d9:a8:74:0c:62:15:b3:
8f:82:3c:61:6b:dd:9e:c8:de:55:b0:d4:34:f8:ef:d4:86:3b:
74:4c:1a:a4:89:78:0d:16:94:fb:31:c2:fd:fe:27:bb:b9:2c:
ad:13:d2:b8:a6:33:1a:1e:8a:9d:8a:e0:bf:f8:c6:9f:c8:e9:
d1:4e:ae:27:a8:45:29:df:32:0e:a5:d9:7e:79:59:8d:6f:77:
65:5a:6e:5d:47:e6:2e:2d:de:a6:14:01:8f:7a:0c:f1:ab:2d:
13:3e:42:3f:cb:10:55:f6:e1:b0:7f:b0:b5:cc:29:03:bd:82:
fa:7b:13:5a:f4:b9:da:5b:5e:df:7c:73:81:a5:1e:6d:54:4e:
c0:de:98:e9:84:f9:9e:ae:eb:88:0c:0d:5e:92:ca:e9:27:7f:
a0:3b:c3:c1:92:b0:dc:16:bd:dc:34:82:68:e8:ed:21:c0:4c:
70:d3:9a:a3:44:93:20:18:b6:13:ad:36:47:05:a8:fb:cf:e6:
f4:44:bd:e3:1c:aa:2a:5c:b3:56:6a:17:43:80:73:f4:dd:fd:
99:77:b9:8f:a9:3d:73:db:c5:3c:50:90:00:5b:64:53:cf:b7:
1a:c9:ab:7a:32:e6:21:c5:6e:b8:2b:b4:cf:4a:2d:4f:2f:1c:
8a:d6:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:58 2025 by rpki-client