Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC475350C3DC11EFAD66018F762E951A.roa
File: EC475350C3DC11EFAD66018F762E951A.roa (raw, json)
Hash identifier: mGK+p8Yb0BN5xFGSPDee0dRlyOHjWQ2hxI9Tn5vHax4=
Subject key identifier: ED:70:1D:1B:DA:F7:CE:B2:77:EB:32:58:F2:04:84:D5:4C:CA:CE:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC475350C3DC11EFAD66018F762E951A.roa
Signing time: Thu 26 Dec 2024 22:58:30 +0000
ROA not before: Thu 26 Dec 2024 22:58:26 +0000
ROA not after: Fri 12 Dec 2025 22:58:26 +0000
asID: 984
IP address blocks: 154.86.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75960 (0x128b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:58:26 2024 GMT
Not After : Dec 12 22:58:26 2025 GMT
Subject: CN=676ddf96-8aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:51:a3:b7:e4:e7:85:8d:77:01:64:bd:a1:
27:7e:88:41:cf:d8:bd:75:b0:74:c9:38:61:c6:3a:
de:21:8f:0d:87:95:27:4a:46:39:28:ab:2d:df:5c:
c4:96:ed:40:09:5f:89:19:66:28:b8:ed:1f:6e:96:
17:f7:ce:f6:7a:81:73:64:5e:d7:2e:34:ff:e4:4e:
8d:47:cb:d4:c0:37:99:63:1f:8b:9a:57:e9:58:3d:
7b:96:a7:4b:38:ee:ef:fc:10:96:34:23:bf:6e:31:
64:12:e1:fe:84:63:d8:8b:48:bb:ba:8e:69:0c:92:
47:14:3f:a2:3f:06:01:74:2d:e3:ac:91:b0:37:1c:
e0:c4:49:09:9f:2e:61:45:83:f3:47:51:9b:a6:67:
09:3e:8c:93:28:c3:65:b8:fa:79:6e:dd:27:2e:4e:
f4:26:47:bb:5c:a7:06:7c:77:38:73:d5:87:23:82:
3d:aa:03:7c:91:bb:a1:ab:f7:ad:1c:46:7f:21:6a:
cc:1a:a1:91:c9:66:12:b1:06:82:7a:b8:29:e4:70:
03:f4:c8:57:31:0f:a6:af:2b:91:10:f8:6b:8b:11:
a5:a9:02:d2:c9:93:6f:64:1f:84:5b:0b:56:f5:d2:
75:f7:05:5a:6b:04:e8:50:af:e6:3e:d0:10:d2:89:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:1D:1B:DA:F7:CE:B2:77:EB:32:58:F2:04:84:D5:4C:CA:CE:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC475350C3DC11EFAD66018F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.13.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b0:6d:56:ba:88:33:02:5e:b0:09:81:80:ce:1b:ba:9a:49:
26:60:0e:67:ba:31:78:08:ec:f6:4c:a8:99:27:9d:ba:c3:f4:
53:84:ee:2e:fe:1f:ee:bc:bc:66:ad:52:52:a5:fb:20:fb:d9:
85:b3:a2:45:b7:8d:4a:6f:e6:d4:84:01:ca:70:12:c6:bd:3e:
32:f8:47:9e:65:70:f6:ac:61:8c:a0:5f:1a:8e:d4:99:74:89:
ec:2a:8c:8a:1b:c3:26:12:9c:ae:07:ac:26:16:0d:97:54:4b:
1d:5d:f8:30:15:f9:5c:cc:5b:8d:0f:fa:76:2f:e3:46:a3:e2:
eb:bd:6c:21:91:d8:36:b9:f7:e5:b2:80:66:40:fc:f8:db:16:
6e:f5:64:f8:23:bf:98:1c:97:c0:08:19:53:60:09:c9:ac:a7:
46:db:84:62:b6:dc:c3:a9:dc:2e:b6:9b:62:e4:06:30:88:17:
41:77:a2:6f:55:c8:bf:e5:48:90:8b:5d:9c:b8:36:5e:05:a4:
16:46:ea:39:37:92:ed:25:00:6a:6a:62:3a:9d:e5:bf:9e:f8:
a7:5b:f2:5b:37:58:a4:28:0f:fe:fe:ba:00:82:11:16:e6:9d:
e9:30:44:c9:35:96:5a:43:c9:8f:b7:15:f9:c5:7c:38:76:c9:
34:84:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:21 2025 by rpki-client