Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED2556CC36811EFBFC819B8762E951A.roa
File: EED2556CC36811EFBFC819B8762E951A.roa (raw, json)
Hash identifier: nZyL0M5BUuO9P3Eg1ZG2yelzFreFWaouCizqy6H6mPY=
Subject key identifier: 94:89:EA:D8:60:C2:20:45:E9:CD:92:A4:36:9D:CF:54:04:50:3D:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED2556CC36811EFBFC819B8762E951A.roa
Signing time: Thu 26 Dec 2024 09:08:12 +0000
ROA not before: Thu 26 Dec 2024 09:08:09 +0000
ROA not after: Fri 12 Dec 2025 09:08:09 +0000
asID: 984
IP address blocks: 154.94.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75476 (0x126d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:08:09 2024 GMT
Not After : Dec 12 09:08:09 2025 GMT
Subject: CN=676d1cfc-3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:51:19:70:31:b0:ca:24:8c:c8:8a:90:45:
29:00:51:dc:57:82:e4:64:96:5f:fc:6e:8b:87:cf:
64:1a:42:dc:cd:c9:2d:fb:05:82:f7:98:c8:91:b3:
3d:ec:ae:f6:61:f1:2b:a5:a9:b4:ee:f9:a4:4b:5a:
9d:1b:d3:95:47:ab:84:1e:41:7c:6b:46:76:e7:cb:
68:8a:83:62:3f:71:b5:c7:11:aa:2c:34:fa:2d:05:
12:86:47:d2:96:4f:2c:b6:b6:06:2c:7d:0c:0b:f7:
fc:03:7c:6b:ec:72:29:90:93:2a:98:90:41:7b:12:
72:71:79:a0:8f:f8:1c:3f:0a:8c:80:cf:f6:a6:83:
18:63:81:ca:df:70:bb:aa:31:8a:11:7c:41:ad:32:
c9:1a:75:5f:d5:6a:76:12:2e:25:a3:00:5a:f3:fb:
82:ce:a6:e6:ee:20:85:4d:af:bf:dc:83:f6:3a:4f:
af:6d:52:36:20:ab:67:24:5c:68:97:5c:34:8e:1d:
e6:3d:5c:01:01:cd:01:ac:a2:09:d8:ae:fe:05:33:
3e:54:2f:7a:67:5d:c5:52:d9:fc:2a:9f:10:96:4e:
9e:f4:18:0f:c9:d2:43:1e:ca:35:5f:40:ce:e4:7c:
9f:d5:54:fc:95:b2:e2:75:75:62:1c:a1:a6:09:a5:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:EA:D8:60:C2:20:45:E9:CD:92:A4:36:9D:CF:54:04:50:3D:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED2556CC36811EFBFC819B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:60:ae:fd:98:42:b8:ec:58:81:2d:cd:c6:3d:02:5b:a1:80:
65:5f:dd:e7:b7:a2:10:32:cb:96:80:36:ec:02:b6:e6:e2:89:
2a:ed:6a:8f:3d:6d:e0:9a:3f:14:29:fc:19:be:69:0e:8a:68:
3d:63:46:6a:29:d3:22:59:d1:31:54:0a:ac:4b:3e:c0:1f:ca:
a1:15:60:2a:8e:a1:4c:11:92:97:e4:f3:97:6a:24:07:5e:81:
85:da:1f:61:e5:e2:b4:93:7f:f9:10:9d:d4:e7:e0:05:16:92:
c4:7b:37:38:08:24:f7:1f:71:53:36:f2:d3:71:d6:28:5f:86:
ec:dc:fe:2d:83:ae:4c:54:ca:3e:6c:ba:0b:5c:13:87:2b:06:
b9:fe:b5:2d:96:90:d6:20:bf:b7:b0:99:be:0a:32:2f:0d:8f:
1e:8c:31:84:5d:59:1b:20:c8:67:e1:1a:da:d0:52:8d:87:30:
f5:6d:d6:ab:5c:28:f0:64:07:80:72:de:af:10:d3:42:99:c0:
70:8c:11:27:f2:36:3a:0f:a4:e2:46:eb:cf:a9:28:d6:99:c6:
d4:dc:a3:96:fc:a5:81:e8:c1:e9:f0:18:56:12:20:18:ba:af:
61:80:f7:57:32:19:a6:44:01:ff:54:c4:cf:38:66:1d:d3:0d:
11:ab:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:53 2025 by rpki-client