Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB52246AC1CF11EF8EAA9A82762E951A.roa
File: FB52246AC1CF11EF8EAA9A82762E951A.roa (raw, json)
Hash identifier: Cs2jY+tmwOB4ves5tD0wN5DaLTLcaGgK1BriuNMjP1o=
Subject key identifier: 9A:AB:69:76:99:A5:71:D2:46:D7:0B:96:4B:D4:A8:B0:BF:2A:84:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012295
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB52246AC1CF11EF8EAA9A82762E951A.roa
Signing time: Tue 24 Dec 2024 08:20:49 +0000
ROA not before: Tue 24 Dec 2024 08:20:45 +0000
ROA not after: Wed 10 Dec 2025 08:20:45 +0000
asID: 984
IP address blocks: 154.193.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74389 (0x12295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:20:45 2024 GMT
Not After : Dec 10 08:20:45 2025 GMT
Subject: CN=676a6ee1-5983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:b5:36:1e:56:8e:42:61:91:4a:07:54:a4:
30:b1:e2:ae:9d:08:d7:c4:cf:94:da:37:2e:08:61:
21:9c:cb:60:9e:11:5c:f2:8d:4e:14:0d:60:33:23:
43:31:a7:cc:59:8f:56:f6:c9:55:ef:a9:8c:4c:1b:
e8:98:ec:89:85:83:94:22:4c:05:e5:c1:c9:32:55:
e4:ff:28:f4:c0:90:fc:be:1b:d7:dd:27:71:fa:3a:
41:11:39:0d:53:f4:08:47:7c:ee:69:63:64:0f:aa:
9d:16:ff:4e:de:5a:49:04:f8:76:fa:fa:74:63:26:
4a:fb:8d:99:05:94:9c:4d:4f:5b:1f:8f:ae:a0:73:
73:58:90:52:a7:78:dc:e6:e9:3a:11:1c:16:09:90:
85:24:53:22:08:d0:2c:71:bb:10:d3:f4:e5:0f:2d:
0e:c9:57:19:9b:0e:b2:d7:0a:66:b1:76:76:3d:6a:
20:67:04:7f:4a:01:13:ff:21:fd:90:a3:6f:a1:9e:
4f:b7:18:fb:00:c9:b2:a6:1c:ae:20:01:28:76:75:
b4:6c:58:ca:80:e5:17:e2:d2:17:dc:0b:43:5b:67:
23:d3:65:24:bc:ba:e7:61:51:a3:f0:84:45:93:78:
c6:6b:83:2f:28:ac:db:75:c2:ce:82:79:bc:82:72:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:69:76:99:A5:71:D2:46:D7:0B:96:4B:D4:A8:B0:BF:2A:84:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB52246AC1CF11EF8EAA9A82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:04:ae:1d:f4:30:6d:9e:f0:85:91:20:b7:b9:99:52:7e:13:
1b:97:65:40:48:ae:93:b1:2e:c9:8b:01:fb:37:c1:a9:3c:71:
e1:ce:d7:e8:d3:b4:73:4f:d2:79:f0:d6:ef:80:c1:46:06:09:
76:8b:96:80:75:0e:ef:d5:c3:5e:7c:fb:c3:31:0d:00:b4:e8:
c8:be:68:d8:c4:62:24:3a:26:ef:73:be:b2:70:dc:ed:76:07:
2b:53:7a:60:cc:70:48:8c:3d:20:50:29:dc:f3:f3:93:f7:af:
ed:19:d9:88:db:15:7d:e2:4b:13:cb:ea:c0:60:ab:73:49:e4:
3e:6f:99:2f:17:7f:3a:2a:12:fd:a7:fe:bb:fc:eb:3b:d8:49:
a5:4e:36:96:90:b6:ee:38:b2:73:ce:44:96:48:59:21:e5:22:
96:37:aa:43:5c:71:25:92:b3:33:e2:b7:48:1e:58:78:ef:83:
2c:66:b0:47:06:45:41:a5:e3:c3:af:16:3a:80:2f:88:f1:db:
75:b2:3c:bc:6a:21:57:d3:39:9a:ed:dc:3c:75:86:6a:99:11:
9e:c4:88:2b:06:01:92:b7:9c:cf:75:d2:6f:87:34:c3:ca:cb:
5b:34:e0:0b:f1:74:84:69:f7:46:3e:e9:6f:05:dc:0e:b2:0a:
5b:2f:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:55 2025 by rpki-client