Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBCAA164C25811EFB51BAF66762E951A.roa
File: EBCAA164C25811EFB51BAF66762E951A.roa (raw, json)
Hash identifier: 8ffA36uLF9xnC5bog6pfa6rQqcB7is0rohsF3gUE2P4=
Subject key identifier: 87:12:15:A9:B0:10:6A:9E:63:25:01:62:9F:CA:A4:B0:B4:4D:89:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012353
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBCAA164C25811EFB51BAF66762E951A.roa
Signing time: Wed 25 Dec 2024 00:41:04 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 10 Dec 2025 00:00:00 +0000
asID: 984
IP address blocks: 154.199.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74579 (0x12353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Dec 10 00:00:00 2025 GMT
Subject: CN=676b54a0-adc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:3f:1a:6f:a0:75:a4:f9:b2:44:db:37:94:
00:ae:5c:ba:07:28:c1:48:90:7e:9a:82:cf:82:74:
66:81:c2:ab:17:95:04:87:05:00:ad:5b:a9:52:61:
25:b5:8b:d5:2f:af:9c:7e:ac:86:8b:dd:e8:a1:69:
09:e5:c6:30:ec:a9:b1:71:ef:5b:0e:da:77:b1:ac:
c2:cc:a8:aa:a0:b4:74:66:11:67:78:9d:7e:67:cd:
d8:1b:92:50:93:60:01:34:05:73:35:c3:85:73:e9:
be:10:da:72:92:4d:07:92:ab:b2:b8:c6:55:f8:ac:
14:33:ee:ff:33:cb:16:5e:89:ba:3b:51:b7:f9:c5:
d1:21:4b:26:c9:56:5d:a5:c5:5a:6e:87:26:b9:89:
1a:5e:f7:4e:40:59:2c:1b:54:40:f3:2a:9c:60:e1:
2f:38:3f:32:c4:18:73:ff:07:af:2d:a8:56:2f:d0:
fb:8f:bc:ec:8a:ca:bc:f1:9e:52:06:2e:4d:f2:20:
ac:62:03:3f:1a:62:43:4b:f4:07:10:94:b7:be:1e:
0c:1b:87:fd:f2:e4:03:15:9d:f7:7d:ff:87:23:b5:
e9:4d:0c:5c:c3:16:ce:a1:97:20:07:0e:da:82:ec:
68:02:32:35:f0:5c:2a:8e:5f:63:80:be:28:a4:39:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:15:A9:B0:10:6A:9E:63:25:01:62:9F:CA:A4:B0:B4:4D:89:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBCAA164C25811EFB51BAF66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5b:f1:01:cb:b8:e9:e0:a1:cf:68:d1:76:ed:b0:34:82:a3:
f7:dd:2f:ec:8b:95:21:39:3a:c6:cb:2b:8f:47:2d:fc:a1:27:
fc:88:6d:73:f3:eb:33:8c:b9:be:3e:9c:d3:dc:86:00:99:a0:
50:59:7e:8c:43:8e:a9:de:3b:c5:f9:4a:10:e6:ac:fc:24:f0:
9f:8d:2c:30:40:48:10:6d:ec:aa:82:08:27:fc:82:28:7b:c4:
32:b0:ec:29:bb:18:91:46:9f:2b:22:3f:7e:be:65:24:10:eb:
0d:b5:5f:ac:a7:dd:b2:12:b1:57:ed:39:da:c8:35:a9:83:92:
11:47:3b:e2:fd:56:51:cc:31:b5:a5:0a:40:d9:77:8f:17:6e:
22:57:9d:e0:e2:dc:b6:ef:bf:e3:b2:4b:9c:1b:0c:af:0f:66:
2b:5c:70:83:64:f4:95:66:9a:19:75:a1:54:8b:0c:cc:ab:df:
f5:0a:6d:6c:01:b4:68:d7:88:8a:07:36:e0:87:b6:33:61:ba:
ca:fe:bd:d0:a1:5b:1f:0a:ff:11:f9:cd:31:6e:71:c9:35:8c:
7c:f2:d5:ed:d6:7e:1d:11:6a:3e:6d:4c:98:0c:2c:f3:32:75:
a0:02:97:be:e0:db:f2:30:52:77:65:17:29:24:15:aa:a3:94:
5b:3a:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:07 2025 by rpki-client