Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC3C223CC38111EF835A6D54762E951A.roa
File: FC3C223CC38111EF835A6D54762E951A.roa (raw, json)
Hash identifier: o7VuEwGE0Jkj1sMZ4PE0Ftgg8Z41BhSrr4g2RR73p0I=
Subject key identifier: 10:EB:4E:2B:31:A5:83:65:88:79:EF:7A:CA:3C:59:6D:20:12:B4:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012768
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC3C223CC38111EF835A6D54762E951A.roa
Signing time: Thu 26 Dec 2024 12:07:32 +0000
ROA not before: Thu 26 Dec 2024 12:07:28 +0000
ROA not after: Sun 12 Dec 2027 12:07:28 +0000
asID: 17561
IP address blocks: 154.94.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75624 (0x12768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:07:28 2024 GMT
Not After : Dec 12 12:07:28 2027 GMT
Subject: CN=676d4704-89b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:35:3b:9a:82:fe:1e:87:74:11:ec:7c:6a:
31:57:38:7c:d6:ca:57:27:d4:ea:7e:9b:11:9f:87:
66:e0:c0:c0:47:44:93:65:9b:3c:a2:fb:3b:42:d2:
2b:93:7f:f9:f3:18:5e:7a:2a:f4:b5:1b:0e:68:be:
c7:c0:c2:0e:63:ed:d2:46:ae:41:c4:52:63:3a:b4:
60:8c:3f:4f:1d:90:a2:b4:d6:87:8c:0a:d7:5b:99:
f9:58:84:8e:ff:45:06:56:a5:b3:a3:c4:52:f4:25:
9e:e1:8a:54:35:00:1a:ae:d4:0f:6e:76:98:d4:28:
47:57:2a:3d:a3:34:38:2d:cc:16:5b:ab:e0:13:6f:
7f:54:28:3c:c4:7e:14:08:5e:08:2c:c3:91:78:a7:
64:e9:d6:46:4d:84:59:40:2d:ea:43:7b:77:e3:05:
87:f7:07:91:49:5a:82:97:2c:06:cd:90:92:a8:e1:
ec:9d:61:8f:d6:a7:ac:b3:cd:66:c5:d4:1a:bc:aa:
69:23:3f:f5:89:23:20:30:da:c9:dc:53:bc:2d:72:
ad:18:56:6e:e5:b1:d2:8e:82:07:cd:6b:35:ba:37:
1b:51:fd:85:5d:5c:88:b5:e2:6c:10:22:67:d9:b9:
ba:64:4b:29:7d:64:13:94:fa:ce:a0:f2:9e:b8:57:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:4E:2B:31:A5:83:65:88:79:EF:7A:CA:3C:59:6D:20:12:B4:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC3C223CC38111EF835A6D54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.203.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:00:7d:c5:c8:3a:18:40:79:fa:50:12:74:7d:8a:f0:36:4c:
14:91:5c:74:af:88:05:87:4d:31:6e:f1:0a:18:8c:ba:80:4b:
07:6c:49:c4:cd:c7:da:e0:c6:ec:0f:d5:98:9c:5f:89:81:6a:
1e:21:ac:42:bd:60:84:22:23:15:fe:4f:78:6e:c9:2c:0c:d3:
6d:61:df:27:37:4a:75:73:a9:db:da:21:9c:00:09:ed:21:30:
46:e6:51:b3:48:f0:32:11:66:4d:ce:18:49:c4:18:60:47:e4:
41:41:7e:89:9a:c4:7d:0d:e8:c9:ba:94:d3:e4:bb:60:92:f4:
24:be:17:0d:7e:b4:8c:50:b6:6d:78:37:fd:36:4c:fc:15:71:
44:72:6d:9c:bb:7d:3b:d2:39:a8:a3:52:47:cf:92:fb:84:0d:
81:68:3a:56:d2:d5:55:6f:05:f0:8c:39:d6:cd:75:29:b4:0f:
f7:c4:7b:0b:29:0d:76:de:05:9e:a0:aa:0e:73:40:83:44:94:
aa:f6:fb:93:9f:38:08:16:d7:bc:90:ac:60:ff:a3:d5:4e:b7:
c3:53:56:ec:77:71:0f:10:f5:b3:8b:64:82:13:85:a8:6b:dd:
c9:df:cf:72:d4:57:a9:96:ea:b7:f7:d0:f3:7e:f1:45:e6:4e:
33:7f:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:13 2025 by rpki-client