Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F69840C35E11EFBD610478762E951A.roa
File: F9F69840C35E11EFBD610478762E951A.roa (raw, json)
Hash identifier: VowMPK0z+UzmISU39UhTBwvEehl7OSWDigS/3P53kUY=
Subject key identifier: 4C:B3:85:D3:1A:60:6D:D5:BE:FE:0A:2D:3E:B6:CB:2F:48:D8:50:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012626
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F69840C35E11EFBD610478762E951A.roa
Signing time: Thu 26 Dec 2024 07:56:56 +0000
ROA not before: Thu 26 Dec 2024 07:56:52 +0000
ROA not after: Tue 04 Mar 2025 07:56:52 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75302 (0x12626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:56:52 2024 GMT
Not After : Mar 4 07:56:52 2025 GMT
Subject: CN=676d0c48-dda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:65:6c:91:41:66:af:fb:9a:63:01:3a:44:
40:b2:10:ef:ca:6b:8d:77:6f:bc:0a:9f:2e:7e:19:
ed:70:c6:da:97:2d:50:6e:e2:c1:60:ef:75:7e:f0:
fa:8a:12:b0:92:d1:7a:5b:62:3c:a8:09:3c:96:2e:
da:e7:eb:22:4c:90:8f:69:dc:9e:44:fd:3e:74:a2:
40:64:5e:e2:61:de:c7:57:5e:f9:76:1b:6f:99:9a:
a8:96:53:5b:49:12:1a:e0:8a:df:5c:58:48:99:c9:
10:c1:82:0b:fa:b4:64:83:64:b9:43:6a:2b:51:53:
8d:3b:14:cb:d5:3d:83:10:e1:df:5a:fe:52:b2:5b:
53:9d:85:bd:29:3b:35:72:ec:5c:49:fc:a4:ba:38:
eb:86:b1:b8:cf:48:08:3c:fe:60:1c:86:0d:22:0d:
66:b9:ef:b9:e6:ce:8d:16:8e:df:f2:ed:a4:fa:c1:
af:c6:a6:8d:93:f8:47:d2:49:1a:48:af:14:9e:3d:
08:76:38:06:dc:f4:d4:e1:dd:f5:54:b8:d8:89:5f:
1a:fd:8a:28:13:b3:c3:8d:a4:52:f3:1f:e5:ce:ad:
60:7d:45:3c:8a:44:ac:19:4b:8d:c7:56:4b:b8:6b:
2b:77:69:aa:1e:7b:c7:50:71:45:d2:91:f6:01:43:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:85:D3:1A:60:6D:D5:BE:FE:0A:2D:3E:B6:CB:2F:48:D8:50:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F69840C35E11EFBD610478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d8:92:e6:c3:36:50:60:59:db:cb:cf:18:e8:2e:98:3f:40:
7a:22:b2:37:a4:72:9e:c3:26:88:7b:9d:f8:1d:d8:a5:a6:03:
4f:06:b3:fe:42:4f:7a:9d:7d:d9:dd:9f:85:c3:2a:f1:21:4a:
2d:b9:a3:84:58:39:b8:03:cd:c6:f5:ec:2a:21:6a:4b:6c:72:
05:8a:0b:2f:97:e2:d9:06:75:68:84:56:de:bc:8b:4a:1b:af:
3e:e6:eb:9d:b8:74:3a:76:2c:dc:a6:86:68:1d:c7:93:3e:ad:
0f:3e:90:98:4e:87:8a:c5:1f:aa:31:cc:48:29:ea:0e:91:d7:
a2:5a:07:4a:d4:0f:0d:ba:a2:84:46:ff:3b:4c:13:31:ce:b5:
8f:92:c1:81:07:14:e4:73:3e:28:02:6b:0f:9c:a8:60:57:58:
ca:df:b3:ed:15:63:9c:b7:29:74:95:55:90:11:f3:fd:cb:9e:
3f:45:33:3f:9b:b4:63:d4:9b:4e:9e:05:05:32:fb:93:06:3a:
42:d1:d3:2e:db:95:52:6f:28:a1:7b:1f:fc:fe:1a:a5:cd:9f:
82:84:0a:e1:02:83:0a:d2:73:42:9f:af:5c:cf:bf:f6:db:6d:
2f:9e:d1:c2:86:07:7b:3f:6f:d1:7e:b8:6d:36:98:e3:c4:39:
5b:8f:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:40:08 2025 by rpki-client