Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD0E2BEC1B911EFBEBA0179762E951A.roa
File: FDD0E2BEC1B911EFBEBA0179762E951A.roa (raw, json)
Hash identifier: tfLzeklKgR1dVKRrTtlNYkFuOiKCpaB8q+P8P7JMazg=
Subject key identifier: 6A:CA:47:90:05:94:D2:4F:E5:10:50:AF:50:C0:15:BF:B5:D3:DC:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD0E2BEC1B911EFBEBA0179762E951A.roa
Signing time: Tue 24 Dec 2024 05:43:24 +0000
ROA not before: Tue 24 Dec 2024 05:43:21 +0000
ROA not after: Wed 10 Dec 2025 05:43:21 +0000
asID: 984
IP address blocks: 154.193.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74207 (0x121df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:43:21 2024 GMT
Not After : Dec 10 05:43:21 2025 GMT
Subject: CN=676a49fc-596f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e8:e4:8e:da:2d:a3:79:fe:a0:56:1f:cd:d3:
73:4a:83:47:e0:b8:07:84:8d:5f:fe:c5:f4:16:ba:
57:28:11:3e:80:68:81:46:7e:37:fb:30:9b:9d:b2:
e0:9a:d1:ae:e9:1a:47:15:f7:1a:18:2b:99:c2:7e:
bc:93:68:45:33:f8:8d:f5:bc:20:1d:db:9b:3e:36:
6a:a4:a4:66:72:72:70:8c:e1:d2:06:fc:34:3b:44:
67:09:a9:fd:a3:7e:df:50:16:5b:38:11:2e:27:f4:
31:e5:59:2b:87:c2:e7:8b:b4:aa:27:5c:e3:ec:0d:
bb:9e:2a:59:a1:17:1a:ee:b2:41:0c:b4:dd:2a:59:
cf:88:45:ec:8c:0b:7b:d5:91:12:10:d2:10:2c:06:
ef:1a:d8:c3:1f:9b:e0:c8:ff:cd:e0:04:d1:6a:ef:
ee:f2:ae:f2:02:94:5f:81:d3:6b:50:dd:76:41:e3:
8c:c2:fa:65:66:e1:f3:19:a1:1b:58:c0:e2:9e:a5:
f5:39:49:4b:b2:67:f6:c8:db:41:5b:b6:f4:cb:bc:
b1:1c:c4:24:91:2b:de:c3:3c:23:83:0c:80:b7:8a:
00:36:31:ac:56:36:22:29:97:07:43:cc:8b:0e:4a:
5f:0a:89:da:16:98:3c:a8:47:55:7e:b7:2a:72:68:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CA:47:90:05:94:D2:4F:E5:10:50:AF:50:C0:15:BF:B5:D3:DC:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD0E2BEC1B911EFBEBA0179762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f5:82:62:b4:12:a7:f6:fe:68:e7:f5:6e:91:20:5f:b9:88:
e2:f8:8f:53:e9:78:18:cc:4c:3f:c3:03:d3:2b:d0:2d:66:3e:
09:33:86:9a:30:46:d2:ab:3c:de:04:e8:e4:b0:a6:a7:33:cd:
08:ef:87:a1:aa:04:1b:0a:90:8b:ce:ce:1e:4e:d4:11:62:42:
40:a1:8c:df:0d:30:7b:0d:48:2a:ca:39:b5:be:e7:a6:99:c4:
ee:18:a0:3e:c6:29:64:1b:5e:84:6b:30:3b:38:33:a5:8b:f1:
23:28:e5:4f:09:df:d2:d0:7a:93:bf:51:e9:8f:9f:73:a4:d6:
96:32:a5:a4:27:cc:37:89:81:e0:b3:6d:c9:65:5b:f2:54:18:
fe:ad:a7:6d:1b:ed:08:ea:78:f8:99:d7:6a:ea:30:8b:66:80:
63:67:ba:eb:d6:e7:af:be:59:a1:11:e9:75:55:f1:fe:f1:d6:
d1:cc:ec:18:44:ae:78:da:0a:c7:58:f2:13:de:ac:54:e9:c1:
dd:3b:af:6f:fe:1f:f4:2e:4b:e1:a9:ef:a0:73:66:88:a3:18:
97:f8:e3:fd:87:fc:d2:bc:f9:9d:dd:a0:e7:d5:c9:03:ff:9a:
67:fb:b3:61:3f:38:2a:05:40:d0:34:ab:87:73:04:cb:da:0e:
b2:50:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:48 2025 by rpki-client