Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC9693ECDEE11EF81F391A1762E951A.roa
File: FEC9693ECDEE11EF81F391A1762E951A.roa (raw, json)
Hash identifier: 49fIpeQ/myk6i7XzTjorVhJTitqVNsc9TVk88htOiJQ=
Subject key identifier: 39:2C:7D:B5:57:C1:66:3B:98:63:CC:51:74:42:83:F4:1A:B6:3B:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013827
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC9693ECDEE11EF81F391A1762E951A.roa
Signing time: Wed 08 Jan 2025 18:33:03 +0000
ROA not before: Wed 08 Jan 2025 18:32:59 +0000
ROA not after: Sat 03 Jan 2026 18:32:59 +0000
asID: 984
IP address blocks: 154.196.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79911 (0x13827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:32:59 2025 GMT
Not After : Jan 3 18:32:59 2026 GMT
Subject: CN=677ec4df-0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:a5:11:93:5a:31:de:fb:4d:74:82:09:da:
2a:c4:84:3e:8d:3d:86:25:9d:c8:30:8b:6b:e4:78:
ef:bf:7f:7d:63:4a:6d:a0:31:95:18:02:5f:4b:06:
a1:89:a8:8d:ce:06:ba:a0:f6:53:16:fd:93:33:16:
ac:2e:8a:6d:65:f0:0a:b3:db:8f:5a:63:fb:cd:b9:
96:be:e2:cc:53:31:65:45:fa:5b:e5:a2:ae:2b:70:
0a:85:a2:1d:04:30:76:bd:8f:4d:5e:74:34:bc:29:
1d:62:04:cc:00:7e:80:bd:96:e2:77:6b:ba:95:0b:
c8:3c:90:98:ea:9c:38:10:04:a1:b0:72:ab:1f:15:
b0:59:b3:b5:51:c4:56:de:62:9f:29:de:a0:8f:73:
36:84:c2:0f:f1:1a:49:9e:7a:bf:2b:75:ba:4c:f6:
36:ec:1b:b1:b7:63:98:a5:25:ee:3b:0d:ac:ec:b0:
77:46:eb:c8:57:48:9a:cb:83:eb:8a:2a:df:e8:3f:
e0:61:fe:11:e0:dd:e9:e7:a9:66:6c:4a:7d:fb:35:
85:ee:49:53:77:7d:f9:c2:38:33:a8:60:5f:e3:27:
87:20:0a:a2:d2:70:f2:7b:a2:a6:ee:15:df:68:5c:
f8:98:dc:6a:22:93:5a:a0:e0:59:13:aa:d1:45:25:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:7D:B5:57:C1:66:3B:98:63:CC:51:74:42:83:F4:1A:B6:3B:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC9693ECDEE11EF81F391A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e5:ce:06:dc:d2:37:ba:e8:be:6b:bb:ba:8b:3a:0f:2f:be:
d5:85:90:38:68:e5:ed:1b:e6:7a:e7:e9:a6:f6:48:8e:80:d4:
f2:6a:bd:b8:dd:3f:10:b4:84:e2:76:96:56:3e:e7:50:b1:bc:
cc:c2:78:97:ad:d1:76:da:fc:95:86:39:d2:ad:71:48:0e:7b:
89:fe:7b:d6:e1:9d:11:ba:2f:04:7f:37:6c:92:3b:5d:87:d8:
90:d9:c0:44:29:39:14:34:f8:56:07:c1:96:81:67:47:89:04:
07:9d:ba:f9:57:79:fd:5c:e1:99:ae:b1:25:3d:12:dd:df:6c:
4c:d9:61:6d:79:ab:01:2a:a1:88:ef:6b:8f:33:25:57:a7:83:
c0:20:af:51:14:1b:41:6d:38:30:80:b7:c1:1a:bf:c1:35:e6:
96:03:d7:a1:f3:ad:9d:3c:8a:dd:03:ae:a0:d7:f8:5f:19:46:
ef:99:a4:59:20:fd:af:07:59:dc:69:fe:50:d8:d0:3c:7d:23:
dd:41:f4:41:f6:76:61:1d:0a:55:c3:f8:3d:2c:b0:47:ab:5d:
b5:0b:c9:0c:35:d5:e5:29:77:0a:68:89:cc:0e:95:0e:2d:78:
a0:bf:e1:44:15:e9:63:0a:96:0c:60:93:39:86:80:81:e1:7f:
99:7e:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:09 2025 by rpki-client