Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC6C40A0C3C411EFAB29A178762E951A.roa
File: FC6C40A0C3C411EFAB29A178762E951A.roa (raw, json)
Hash identifier: TIMMZKqc7BEPKfi+cHsCrH/1I5MN8SNSIRN0cRJfkfU=
Subject key identifier: 8D:EB:99:57:75:69:C0:06:9E:E8:C9:DF:BE:BF:AC:0D:10:EA:95:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC6C40A0C3C411EFAB29A178762E951A.roa
Signing time: Thu 26 Dec 2024 20:07:09 +0000
ROA not before: Thu 26 Dec 2024 20:07:05 +0000
ROA not after: Fri 12 Dec 2025 20:07:05 +0000
asID: 984
IP address blocks: 154.83.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75718 (0x127c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:07:05 2024 GMT
Not After : Dec 12 20:07:05 2025 GMT
Subject: CN=676db76d-e2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:71:9b:e5:84:7d:78:fe:62:53:4a:84:b6:
2c:4a:9a:15:5b:7b:e6:40:f6:5d:ec:cc:33:f3:f2:
51:6c:75:8c:26:8c:e3:0a:e2:74:6a:fa:d6:cc:c9:
61:6c:51:80:50:89:83:36:47:cf:12:57:4d:cf:e4:
77:a9:7b:c6:c1:19:ec:b6:57:c6:af:51:c2:81:9d:
47:cb:24:ea:a7:57:83:d6:2c:29:2a:5c:26:8b:33:
8d:0e:a2:a0:27:f4:fd:bc:ad:5b:3e:77:42:7b:a8:
3b:2f:52:42:c4:45:26:2a:45:44:8e:73:ac:2d:20:
1c:8b:d5:50:a7:5f:d2:d5:e9:11:be:e8:9d:60:4c:
d7:5d:43:7e:73:b0:ef:78:1e:96:54:d1:8e:9a:c8:
35:94:82:42:de:e4:4e:09:02:39:4a:a1:6a:de:79:
d0:18:0b:56:47:a6:96:31:67:9b:4a:45:43:e7:cf:
6a:10:c5:3c:92:7e:bb:a7:60:0a:10:75:6c:b2:29:
02:4a:5d:42:37:97:55:f8:3b:38:6d:d4:46:71:5f:
5b:84:09:a4:e3:8e:c7:39:a8:a1:b9:7b:f7:2f:11:
74:fc:fc:15:7a:2d:fd:c7:14:ce:cb:1b:4a:54:07:
6f:0d:0b:07:4a:82:eb:11:1e:c6:83:a9:81:15:85:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:99:57:75:69:C0:06:9E:E8:C9:DF:BE:BF:AC:0D:10:EA:95:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC6C40A0C3C411EFAB29A178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.7.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5c:3a:cb:b9:2b:26:6f:1c:94:06:f8:e8:db:28:e5:f9:2e:
ff:72:c0:05:57:3f:d0:9f:f1:a6:a4:ca:fe:e6:ee:32:7a:43:
f2:b9:96:30:3b:65:d3:af:b3:64:60:48:93:c6:5a:86:6b:e2:
63:d2:19:52:e5:29:8f:23:61:2d:d6:3b:f2:57:d9:23:c1:0c:
0a:9e:a0:bd:48:42:d5:cf:72:28:04:65:0b:2f:fc:57:8a:1e:
df:42:5d:26:5c:12:5a:e5:62:92:4d:ca:50:86:08:44:c7:76:
ae:79:61:14:d8:ff:54:d0:d7:fc:96:f7:23:d1:00:20:9c:72:
bf:76:97:60:71:a9:2d:0e:fa:41:92:d5:26:cb:65:4f:35:2e:
4d:3a:46:ae:c6:2f:6c:97:8d:e9:b0:56:62:6d:ba:49:42:c0:
4e:6e:9e:5b:f8:b7:56:95:e5:1b:a8:47:8a:61:b7:97:a9:05:
05:f8:7a:25:ce:db:a3:a0:04:00:7e:10:ee:45:65:cf:9a:75:
ef:d0:2d:b3:9b:d8:45:d6:2e:45:5c:b2:8f:39:62:fe:2a:34:
e0:82:44:7d:9c:ab:5b:e6:0a:8b:0b:73:9d:b4:6e:68:8d:40:
62:04:c3:53:88:62:b2:e8:72:1d:30:f4:16:d2:d4:c9:f6:b1:
df:5f:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:34 2025 by rpki-client