Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1FA4630C41911EFA6A068A5762E951A.roa
File: F1FA4630C41911EFA6A068A5762E951A.roa (raw, json)
Hash identifier: aRVs1vtqB8p4dib33HVlId0E0OmT1cz6ejBboGePnOY=
Subject key identifier: E9:92:26:27:CF:26:57:4D:C0:A1:59:05:77:91:33:3D:01:EF:32:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012983
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1FA4630C41911EFA6A068A5762E951A.roa
Signing time: Fri 27 Dec 2024 06:15:18 +0000
ROA not before: Fri 27 Dec 2024 06:15:15 +0000
ROA not after: Sun 12 Dec 2027 06:15:15 +0000
asID: 17561
IP address blocks: 154.198.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76163 (0x12983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:15:15 2024 GMT
Not After : Dec 12 06:15:15 2027 GMT
Subject: CN=676e45f6-67a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:2e:28:8d:85:24:f9:9e:e9:de:6e:7d:af:
82:09:45:eb:08:02:b2:04:3f:c7:e8:b9:66:b0:74:
41:75:8e:45:cb:e8:ce:ae:f3:40:91:61:ed:5f:a9:
7e:d4:b2:d5:83:90:79:1d:a9:43:d4:1a:6c:2c:a9:
f9:68:ed:99:24:21:e9:ee:b8:63:b6:f0:a0:21:3f:
e9:0d:fd:59:e2:53:7f:04:52:93:55:7b:b7:eb:9b:
b9:1a:de:a6:0e:d9:29:e0:99:85:fa:c9:94:bf:2b:
44:f9:c9:1c:6f:cd:1a:a5:47:d9:6c:42:dd:1e:24:
5c:b8:83:0c:91:92:fa:42:81:c2:6f:70:5a:1d:a2:
58:9f:af:08:52:4f:d5:85:47:eb:07:df:98:b4:83:
95:d2:bd:4b:82:a7:b2:28:7d:a3:f5:1f:17:7a:c8:
69:ae:6f:7f:ed:27:c7:aa:37:cf:75:e6:9d:f7:2d:
28:9e:89:0c:9a:4a:87:ef:1c:b1:63:41:c2:22:b5:
b3:fa:02:53:2f:d9:d7:c0:69:f3:1e:12:ff:8e:1b:
8f:03:14:dc:6d:d2:a2:57:68:2d:af:6e:78:ab:bd:
a7:37:f7:2f:c7:78:dd:75:59:af:b0:f7:c1:39:61:
9c:3c:3f:a4:e8:6e:b3:f4:51:c1:ba:a3:29:61:83:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:26:27:CF:26:57:4D:C0:A1:59:05:77:91:33:3D:01:EF:32:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1FA4630C41911EFA6A068A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7a:f1:4b:ce:d3:66:66:7b:3b:82:d1:d3:9c:5c:a6:5c:5e:
24:26:09:0e:eb:47:ce:f9:ad:42:ff:35:23:a4:bb:2a:dd:65:
58:df:34:9b:4a:0c:fc:97:a9:44:bf:86:6d:36:2e:c3:e9:c9:
ef:4c:bb:c4:6e:d5:bc:7e:dd:16:b6:1c:26:9b:01:5c:c6:d3:
c0:55:8f:4d:1a:5b:34:94:2a:09:29:25:9e:24:3c:87:5b:e6:
1f:c2:59:33:d7:f8:96:5f:e6:5d:7d:40:1f:97:72:ea:6c:58:
f9:04:73:14:d7:28:50:87:c1:f9:8f:2a:91:05:de:80:3e:6c:
88:3f:3d:10:cd:87:20:7b:c4:c6:f2:cd:d6:35:79:ca:8e:2f:
37:44:17:0d:5a:74:a9:52:65:56:5c:da:a6:7c:bd:2b:e0:75:
70:76:ea:fb:4f:7f:fe:4a:34:cb:13:5f:9a:1f:93:cc:c0:3b:
6b:0b:00:ec:7b:23:f2:31:60:df:ff:ec:01:e0:ff:b2:cc:7d:
49:ff:7f:81:d0:e6:c1:b6:b2:4d:66:70:ad:0c:ee:d0:5d:d7:
96:ce:61:b2:41:ba:4f:b6:af:4f:dd:34:9c:77:5c:31:9e:6a:
3e:08:06:14:1f:28:16:f6:5b:d5:7c:90:5d:ee:80:0f:dc:c0:
50:48:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client