Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C04B4EC5EB11EF902487A1762E951A.roa
File: 03C04B4EC5EB11EF902487A1762E951A.roa (raw, json)
Hash identifier: eI9yi1lqYKCycWjwClPthL7zd1IoHJAmWzhfabSayLM=
Subject key identifier: 26:8A:19:17:20:3F:89:B8:42:23:23:AB:13:22:68:B7:95:87:FF:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C04B4EC5EB11EF902487A1762E951A.roa
Signing time: Sun 29 Dec 2024 13:44:24 +0000
ROA not before: Sun 29 Dec 2024 13:44:20 +0000
ROA not after: Sun 12 Dec 2027 13:44:20 +0000
asID: 17561
IP address blocks: 154.211.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77220 (0x12da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:44:20 2024 GMT
Not After : Dec 12 13:44:20 2027 GMT
Subject: CN=67715238-e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:f4:35:ad:50:4a:04:77:c7:6d:19:c0:df:
a0:5b:95:33:ea:95:25:9b:14:1e:f5:6d:48:4c:da:
29:4a:cb:a3:da:78:2c:4f:5c:73:cb:6e:53:b8:92:
93:5e:be:da:1a:f7:e0:eb:99:2b:2f:e3:3b:7c:29:
fd:07:e7:8a:2d:3a:1c:8b:29:b5:3c:c3:20:95:f2:
96:62:a7:d4:f4:24:c5:69:48:39:90:dc:ac:98:8b:
7d:c4:fe:58:62:bd:04:3f:06:af:e3:63:ee:66:e8:
f0:20:21:df:0e:50:a7:d6:7d:e1:39:a4:45:20:78:
7c:43:f7:ef:ca:25:4c:12:06:ff:5c:2f:33:24:7c:
fd:66:5b:1b:df:e4:74:e5:e6:9f:23:14:82:3d:16:
5a:75:3f:34:f9:a4:bc:90:03:07:e5:a6:fb:38:ed:
05:aa:21:d1:ec:5a:04:47:19:52:67:12:3e:28:f4:
ed:ae:b9:da:20:c2:08:e4:33:d2:0f:a0:01:32:c2:
07:a3:47:d4:4c:c8:ad:f6:cd:25:d6:be:a6:18:3f:
21:00:09:64:5f:cd:f8:51:42:16:8e:63:58:84:8e:
6a:96:cf:14:8b:72:86:34:8d:b2:fd:0c:1a:29:e4:
f0:16:67:5a:fb:4c:ab:05:f0:66:84:95:9d:13:74:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:19:17:20:3F:89:B8:42:23:23:AB:13:22:68:B7:95:87:FF:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C04B4EC5EB11EF902487A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.25.0/24
Signature Algorithm: sha256WithRSAEncryption
af:68:a5:ba:03:3d:44:b3:ad:6b:10:d7:61:65:a8:45:1e:64:
5f:68:9e:ce:b6:02:b8:e4:74:cb:2e:5d:bf:10:78:f9:a9:f6:
5b:38:ac:d8:e7:a9:53:da:ed:f3:13:82:db:e5:7d:22:bc:8a:
50:0e:71:dc:38:e1:8b:9a:56:57:0a:e4:7c:b1:41:f6:56:ba:
86:93:90:4d:36:91:19:65:07:49:5a:6b:e1:ed:ea:32:f5:0e:
a8:71:89:6e:41:8a:30:0d:51:ab:f8:56:93:9a:90:15:ae:57:
4f:1a:c1:fd:78:94:61:d5:0e:00:5c:f3:04:b1:58:2a:03:63:
8c:f1:e8:42:33:82:0b:bf:a8:de:66:87:09:5a:e1:1c:8f:c0:
e0:a7:6b:f1:63:9e:43:1f:6c:6c:a0:6e:a2:2f:bc:f6:5d:7b:
75:83:d1:1b:29:5d:74:25:96:10:7c:66:d4:90:65:cb:1c:3a:
11:f9:c5:24:93:12:62:ca:87:12:6e:36:84:f8:9e:21:17:22:
2b:c2:fb:47:c5:bf:58:76:5e:d4:a3:45:ca:c7:c6:40:5a:04:
ad:8c:d2:9b:c7:86:8f:81:87:9a:3a:e9:cc:1a:3f:39:c3:2d:
07:67:f2:c5:e2:3f:f8:1d:87:3a:a8:5c:c2:8b:b8:a3:ad:4c:
68:89:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:26:20 2025 by rpki-client