Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60C4940C92211EFB6591D97762E951A.roa
File: F60C4940C92211EFB6591D97762E951A.roa (raw, json)
Hash identifier: YLfwkGyuRXKOO6pgFcKzBkKwOgA9Eq8MiQfHYl4Z2qo=
Subject key identifier: 40:AA:B2:67:18:FE:0E:68:56:81:3B:2D:76:AB:2F:2D:D5:35:7B:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01333B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60C4940C92211EFB6591D97762E951A.roa
Signing time: Thu 02 Jan 2025 16:02:27 +0000
ROA not before: Thu 02 Jan 2025 16:02:23 +0000
ROA not after: Sat 13 Dec 2025 16:02:23 +0000
asID: 984
IP address blocks: 154.222.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78651 (0x1333b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:02:23 2025 GMT
Not After : Dec 13 16:02:23 2025 GMT
Subject: CN=6776b892-3082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:36:43:39:7e:f8:a5:53:fb:94:c7:1e:fd:
99:5f:7c:7d:99:67:d4:e8:26:21:77:ce:b3:e3:b1:
fb:45:9c:c4:a6:87:1c:a9:e3:9e:c0:55:90:e1:07:
05:31:ec:a3:73:ed:46:eb:f8:b9:d1:00:be:13:d8:
d0:0a:3d:ed:f6:60:4a:e9:5a:3c:2b:d7:76:87:c8:
97:61:53:94:88:cb:0d:88:63:d9:90:4c:95:a9:85:
ff:d5:00:e2:32:a9:34:1b:01:cb:fd:c4:b6:3f:db:
3d:4d:14:1b:44:2f:d0:9f:ca:eb:b0:83:9c:1e:92:
bc:dd:59:a0:d5:8b:a1:6d:4b:8d:eb:71:5b:eb:96:
9c:57:ce:7a:7b:0d:12:cc:ea:70:ca:7b:ea:50:09:
49:58:55:a8:f8:35:84:b1:b9:95:ed:34:ac:5e:96:
b0:c7:20:b3:1d:42:06:15:cd:59:0b:9d:36:1e:b6:
34:be:39:4d:08:7e:d3:69:71:41:e2:1f:02:e8:93:
0f:2b:66:06:81:55:49:29:49:7b:35:54:e8:1b:60:
ec:79:e9:80:ae:fe:e6:6a:68:0c:86:13:43:92:77:
2a:8c:59:af:cd:44:a5:c9:ed:38:ab:d6:44:43:66:
39:1f:1d:4a:19:67:e7:e0:3a:5a:30:87:e0:81:1f:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:B2:67:18:FE:0E:68:56:81:3B:2D:76:AB:2F:2D:D5:35:7B:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60C4940C92211EFB6591D97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c1:8c:b5:22:11:e2:a9:50:98:45:cf:37:bf:fc:d0:19:d1:
f6:5f:5a:0d:80:dd:cf:75:f0:c5:c0:04:f9:35:57:9e:2a:27:
a6:f9:b2:66:76:34:db:a8:c6:96:a4:e7:e0:df:7f:af:96:8c:
ed:29:50:ec:a6:f2:65:47:b4:3f:9f:44:5b:bc:f0:1b:46:a9:
11:ef:e7:d4:f4:bc:75:a1:19:a5:cf:20:df:fe:ba:56:60:de:
ef:fa:0f:01:90:23:29:fa:45:97:43:a9:74:f5:42:97:31:79:
ac:a2:95:35:f5:7b:a3:64:ed:79:db:ea:4e:4b:73:ae:33:a0:
c5:40:e8:21:b6:a7:db:d8:58:77:91:e2:f3:49:e7:97:3b:d4:
d3:aa:36:b6:0f:e5:cc:17:46:17:e4:06:6a:9d:99:b5:ce:4c:
22:2d:16:73:da:a3:6f:d5:ca:40:12:63:a5:8b:ec:ac:73:3c:
7d:22:a2:5b:1a:37:93:35:e2:af:8b:df:da:1d:5b:5d:87:4a:
1d:5f:18:f9:18:18:f6:28:8f:11:bd:36:7f:0e:18:8c:fd:8d:
9a:2c:44:d0:6f:92:aa:a5:72:3b:2e:a5:50:41:db:ed:64:7c:
8b:7b:34:84:ae:6e:9d:e0:ef:bf:d8:6c:da:28:03:66:7f:c6:
36:aa:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:05 2025 by rpki-client