Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F137F084C53C11EF803C6452762E951A.roa
File: F137F084C53C11EF803C6452762E951A.roa (raw, json)
Hash identifier: 9riyigxv7VrDhPKU6byAr9r8SNC6bba5YXpfGkCRNps=
Subject key identifier: 9D:23:C7:22:6A:39:9B:C7:89:00:39:63:2C:A5:F3:21:A1:B3:8B:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F137F084C53C11EF803C6452762E951A.roa
Signing time: Sat 28 Dec 2024 16:58:21 +0000
ROA not before: Sat 28 Dec 2024 16:58:17 +0000
ROA not after: Fri 12 Dec 2025 16:58:17 +0000
asID: 984
IP address blocks: 154.205.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76887 (0x12c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:58:17 2024 GMT
Not After : Dec 12 16:58:17 2025 GMT
Subject: CN=67702e2d-9e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:35:14:2d:fd:e6:c6:8a:bf:8c:58:db:bb:
51:01:5e:a6:32:d2:30:55:03:14:b1:9a:e7:58:c6:
48:7b:91:5c:94:a9:18:25:ad:12:10:1c:4a:da:da:
27:65:7c:3a:12:5a:1f:f9:6e:cd:b5:d5:59:19:57:
2b:e7:bf:55:46:c8:65:f4:7d:e1:64:e4:a6:06:e4:
ff:2c:e0:70:00:d6:95:dc:e4:92:24:b3:2a:10:d2:
5c:87:75:0a:cb:7d:8c:6f:39:6c:f5:cd:25:89:2c:
15:8d:36:c1:b7:9c:f4:9b:42:6a:ce:38:4f:ca:2d:
17:23:b5:3c:98:83:fc:ec:c8:23:67:ac:61:36:f7:
f1:d5:6d:9f:26:73:97:ec:ba:df:d3:76:6f:b8:d2:
b5:30:f5:5b:6a:80:55:40:73:a5:6f:d3:34:2a:77:
1f:e7:9d:8a:7c:17:f6:66:ff:d0:c8:dd:9c:f4:b6:
e3:76:d7:db:95:0b:93:a3:64:da:c3:35:e8:26:fc:
7a:0a:2c:fc:f5:09:c0:48:e3:77:e3:ce:be:79:fa:
a6:28:90:15:34:f8:70:f5:cb:76:98:d1:ab:27:8a:
8f:a7:1d:02:49:90:51:49:85:76:d3:a3:db:cc:11:
bd:79:d1:58:ff:34:f5:8a:9b:83:69:21:b4:38:eb:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:C7:22:6A:39:9B:C7:89:00:39:63:2C:A5:F3:21:A1:B3:8B:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F137F084C53C11EF803C6452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:a3:73:77:1b:5c:20:4e:0c:46:1d:53:73:33:f9:ac:99:
11:a6:30:48:d7:10:7a:b1:77:dc:a1:fb:4d:03:62:4d:c5:48:
c1:67:a1:62:4a:90:c3:84:95:0a:e9:f6:79:c9:6f:47:ff:ee:
75:41:c7:0c:ee:03:48:74:9b:0c:bb:eb:28:8a:81:1a:cb:4c:
9f:37:dd:e5:9f:38:3d:15:39:36:44:08:88:5a:39:66:18:e6:
ff:a5:95:c1:bb:b9:f5:de:31:a9:1c:a5:dd:4a:5e:e0:5b:7c:
51:82:fe:a5:04:99:7b:5f:09:5e:5d:56:cc:2b:6e:ac:16:9c:
f3:d4:a9:de:99:a3:3d:f3:55:22:6e:2c:61:c8:6c:1b:75:e6:
1c:52:7d:a0:66:e2:30:db:34:04:c3:e6:84:94:22:9b:63:b6:
de:82:5f:f4:eb:2d:d6:78:d9:2e:54:f5:1d:d7:16:e8:57:9a:
54:79:67:5b:a6:35:55:a6:3f:9a:a5:73:6c:3a:50:99:97:7a:
2e:88:a6:30:6d:7d:ca:69:49:36:61:d8:88:cc:d2:88:64:f0:
8a:68:7f:ed:9e:0a:5d:27:57:ab:73:49:3f:a5:ec:ae:32:95:
2f:04:9c:59:d0:e8:1e:95:01:8d:63:3c:c9:e1:39:1d:b8:b1:
64:4e:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:01 2025 by rpki-client