Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F893AC74C41F11EFB698A44C762E951A.roa
File: F893AC74C41F11EFB698A44C762E951A.roa (raw, json)
Hash identifier: WHmcqJ4er0hhkaTETedUOkEpQKo93llTMFnLq5747s0=
Subject key identifier: 23:DD:D5:B5:64:21:26:DF:DD:CE:55:46:A6:3E:FB:E6:31:7C:64:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F893AC74C41F11EFB698A44C762E951A.roa
Signing time: Fri 27 Dec 2024 06:58:27 +0000
ROA not before: Fri 27 Dec 2024 06:58:23 +0000
ROA not after: Sun 12 Dec 2027 06:58:23 +0000
asID: 17561
IP address blocks: 154.201.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76213 (0x129b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:58:23 2024 GMT
Not After : Dec 12 06:58:23 2027 GMT
Subject: CN=676e5012-5350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:dd:09:2f:99:c1:be:a5:d5:93:ce:66:8d:
64:3c:f4:8c:e3:0e:27:c3:65:e1:5b:8e:7e:d8:23:
b1:73:1d:e7:0c:18:ff:c8:fc:a9:3f:e8:58:04:fd:
a6:c5:e6:7f:00:3b:fc:e8:f9:2f:9e:c8:c5:e2:52:
a2:f2:fc:1f:e3:cd:93:2d:03:50:d8:72:05:95:f7:
9a:2f:ff:97:03:5c:9c:5a:a5:a6:65:9b:67:fe:c7:
c9:f4:66:33:0f:d9:25:f7:e6:35:be:f5:d5:58:4b:
d5:ac:3e:4d:e2:a3:d8:61:3d:a3:94:d8:a9:a1:a5:
10:56:5c:b6:aa:b5:f2:6c:53:7d:ba:08:f2:4e:fc:
4f:c8:65:28:da:fb:ff:f1:21:9f:8c:c9:d6:c7:5c:
53:ae:77:96:90:38:1e:2d:44:8b:84:63:e8:51:94:
21:f3:b9:1b:14:5d:76:a6:14:4e:2c:77:76:63:ca:
9a:1f:2b:a5:39:be:9c:b0:81:ca:62:3e:6d:f9:04:
c6:4c:ea:a8:05:b0:49:75:69:e5:b6:1e:f4:1b:d0:
7c:f3:6c:f0:a9:e2:f0:56:36:bf:30:db:14:44:15:
51:30:7e:ba:43:d4:6e:9f:be:1f:bd:8d:be:5e:df:
ed:00:a4:7d:f8:ac:28:8e:d2:6a:30:85:a3:b8:bc:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:D5:B5:64:21:26:DF:DD:CE:55:46:A6:3E:FB:E6:31:7C:64:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F893AC74C41F11EFB698A44C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.45.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cd:31:e9:ab:fa:a2:0c:ad:21:10:64:7f:e6:a3:92:04:b4:
00:89:04:aa:71:73:b7:7d:9c:80:8a:22:9f:e8:1b:e8:10:48:
64:71:45:0a:50:36:6b:92:d7:42:f0:20:6c:a0:0d:7d:d7:7b:
64:b2:40:0b:54:cd:dd:f7:32:4d:ae:40:bd:97:b0:ff:32:2b:
34:87:95:61:b3:00:51:b6:17:11:91:f9:32:cf:77:8f:d9:5e:
13:0a:6e:27:e0:29:46:4a:42:dd:84:5e:bb:d0:a8:ea:ab:b3:
92:62:d5:12:1a:e0:fd:69:86:68:0c:9d:73:6a:7b:2f:b1:b9:
ce:3b:e1:5b:dc:76:98:3a:57:78:3e:aa:b0:b6:ca:d6:9b:c8:
55:bf:ff:f0:d5:cf:86:fc:d5:f4:7d:16:77:57:9f:a7:e7:24:
17:ae:c6:2a:ba:8c:29:03:29:1d:09:d0:3e:2e:48:f6:b2:ba:
a7:ef:df:cd:37:cb:42:b0:66:96:0d:e4:56:53:59:c3:b8:91:
1c:1f:bd:24:bd:da:37:e8:93:bd:04:45:9a:30:ca:3f:fc:ff:
5f:45:1a:7d:29:b1:56:5a:21:82:20:39:2a:99:46:37:f5:3d:
c3:a6:56:c2:a7:c5:b7:aa:9d:bc:1b:a7:84:dd:49:8a:76:b7:
58:a0:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:58 2025 by rpki-client