Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB6BAF0C3D411EFAD2B075E762E951A.roa
File: FFB6BAF0C3D411EFAD2B075E762E951A.roa (raw, json)
Hash identifier: 6bg3hJjt0fVWoSYFfC9JpBvtPYSTwsaeqikWq2K9fdM=
Subject key identifier: 03:62:D0:CA:61:14:66:99:68:47:42:95:1F:88:80:2F:E8:B7:33:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012868
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB6BAF0C3D411EFAD2B075E762E951A.roa
Signing time: Thu 26 Dec 2024 22:01:46 +0000
ROA not before: Thu 26 Dec 2024 22:01:43 +0000
ROA not after: Fri 12 Dec 2025 22:01:43 +0000
asID: 984
IP address blocks: 154.83.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75880 (0x12868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:01:43 2024 GMT
Not After : Dec 12 22:01:43 2025 GMT
Subject: CN=676dd24a-9669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:b5:2f:25:de:6e:e7:b5:e9:0f:c0:5b:87:
48:8a:50:90:f5:66:c9:2b:fe:c2:fd:cf:93:38:80:
fa:e2:b6:1a:96:74:21:ae:87:c6:b8:a5:21:90:db:
24:41:65:f1:16:aa:a7:75:48:60:a9:63:04:e5:d7:
7c:67:18:5b:25:28:cf:95:2b:6c:c0:9e:4d:0a:09:
67:d8:d9:ef:7b:3d:ce:d5:7a:e7:63:9f:6f:5e:5f:
bf:54:14:ad:7d:8a:b1:77:a6:67:18:6a:35:12:9b:
9a:48:12:4c:a9:75:7c:ca:4b:e7:62:e0:65:e3:ff:
5d:e9:db:24:64:f3:5a:b9:61:e1:2a:61:d5:cf:64:
30:f1:9b:08:e1:87:75:08:1a:09:c4:24:f5:72:48:
0d:8e:27:ab:e9:5c:5b:2e:8c:d7:2e:07:92:90:fd:
74:06:4b:d8:0e:12:f7:13:f0:28:ff:26:c0:cf:88:
93:af:4b:e4:bf:24:4c:f0:28:07:6b:c7:76:fa:0d:
2c:90:49:69:5f:39:f8:38:cc:b5:46:15:e1:fe:e2:
cb:67:d8:3f:c4:da:4d:91:43:ed:ef:1d:22:ae:12:
b6:71:c8:4c:95:1e:8d:3a:6f:e0:29:96:56:2e:28:
70:f7:a5:af:08:ca:9f:e8:3d:a7:69:01:0b:37:97:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:D0:CA:61:14:66:99:68:47:42:95:1F:88:80:2F:E8:B7:33:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB6BAF0C3D411EFAD2B075E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:c9:76:6b:57:85:d1:a1:d9:09:c6:08:d7:dd:44:ca:16:
6e:ea:0c:94:45:98:68:bc:cf:57:4f:35:50:73:d2:f8:08:e3:
ad:c7:0e:a0:8e:4a:f5:13:37:d1:95:e7:f5:60:78:43:f0:10:
8a:4b:84:0d:33:60:2e:b7:8f:dc:21:55:e8:02:a1:95:d0:0d:
1e:2e:43:ef:c9:f9:3c:aa:32:f2:b7:7f:8b:d5:13:b5:92:82:
26:1f:3a:1d:8e:cb:3c:34:77:1e:93:3a:8b:a7:8b:06:33:78:
d1:f9:a1:d3:2b:7e:4b:c8:ea:50:39:89:ba:5e:83:bb:13:db:
e2:30:3e:cf:8e:c8:5e:9f:3d:22:df:6a:7f:6f:e2:bf:66:95:
db:65:ba:30:4c:4f:17:c4:df:07:e9:31:19:cd:11:97:6c:02:
a2:8e:c1:7d:38:e9:9f:05:02:12:79:36:5d:63:d1:41:61:4d:
ce:6a:43:5a:a2:fb:d3:9a:53:ff:67:e0:e4:56:fc:8f:94:6c:
50:b1:31:5c:15:5c:36:03:f8:a9:06:95:3e:e0:e6:53:5a:92:
e9:28:a1:86:70:1d:de:f0:25:6b:c0:31:f7:49:cd:f2:37:1b:
67:8c:03:cd:dc:d6:ad:3c:76:1f:ac:5e:80:7f:9e:ab:e7:ae:
80:9f:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:43 2025 by rpki-client