Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08834152C91711EFBE57224E762E951A.roa
File: 08834152C91711EFBE57224E762E951A.roa (raw, json)
Hash identifier: o6rAgvGqLetIJHrLnVQ8PC2g8ecE5NsYDtqdWcUtC4A=
Subject key identifier: FF:DC:7A:98:0D:C8:42:9B:B9:13:9E:0C:95:A1:5D:38:FB:1A:4A:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08834152C91711EFBE57224E762E951A.roa
Signing time: Thu 02 Jan 2025 14:37:04 +0000
ROA not before: Thu 02 Jan 2025 14:36:59 +0000
ROA not after: Sat 13 Dec 2025 14:36:59 +0000
asID: 984
IP address blocks: 154.221.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78553 (0x132d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:36:59 2025 GMT
Not After : Dec 13 14:36:59 2025 GMT
Subject: CN=6776a48f-2361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:8d:08:92:6e:e6:e6:a1:22:36:d2:ed:ec:
cd:2a:63:71:07:48:d9:24:e4:2c:5b:03:75:1f:b2:
9f:34:75:14:11:16:74:38:a3:16:9a:19:3c:df:aa:
cf:81:9e:cd:3f:8b:12:df:fc:a6:5b:8d:e9:50:97:
ff:4b:06:56:bc:2a:50:ea:74:19:63:2f:69:0f:c8:
0d:08:15:6e:03:c8:c7:41:24:25:99:db:cb:72:f7:
0d:66:ed:6b:b8:bd:2c:f9:cd:43:0b:6b:59:c1:e3:
de:0b:d7:d2:2b:b2:66:ab:57:fc:53:1b:f3:d2:06:
8e:c5:a2:f1:58:84:be:6b:ab:60:77:37:5d:12:21:
7d:bb:04:ef:0b:0a:8c:0c:1d:44:4c:ae:c5:25:7e:
8b:4d:66:a6:a6:25:1b:52:6a:93:c6:fc:ad:22:44:
ce:8f:9c:4d:6e:22:c4:f2:1c:d1:46:7c:cd:67:30:
be:70:bf:51:99:e9:ab:3b:97:8a:cb:9a:ed:99:c2:
f4:97:6d:af:49:2b:52:14:ed:c8:e8:62:12:84:d5:
c0:a4:2e:6c:d5:4d:06:d3:44:e9:55:7e:1c:0d:1a:
aa:23:fa:0f:42:0e:c8:88:d6:a4:b2:6d:f9:93:c3:
2e:bb:26:f3:91:33:53:6a:59:15:95:04:41:3a:36:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:7A:98:0D:C8:42:9B:B9:13:9E:0C:95:A1:5D:38:FB:1A:4A:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08834152C91711EFBE57224E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cb:ed:f2:e3:e5:f1:17:67:dd:95:f8:bc:d6:9e:3e:3a:f6:
08:1f:35:02:47:35:78:47:90:46:78:30:b2:1f:58:23:d1:ed:
89:ff:ac:3a:13:bf:ae:04:c4:49:9f:15:0c:6b:f2:b6:a3:22:
b8:42:ee:ef:07:f7:74:8c:1b:a3:99:68:2f:25:7e:3c:2c:d9:
72:71:90:e9:25:fb:48:b2:68:c1:04:b9:f1:02:3c:2c:95:1c:
70:22:35:c3:70:57:83:29:23:ee:31:05:2d:56:a7:dc:ed:06:
69:b3:0b:06:8c:eb:f3:1a:5e:92:8b:4f:c1:d0:ed:6f:89:56:
a3:78:04:78:3c:7e:b0:7b:84:7b:ef:34:fe:f4:ed:97:9b:2c:
36:de:cd:8f:f4:3c:01:2b:26:ad:3c:33:56:d2:f7:1f:4a:ff:
30:57:c0:3b:3e:50:b8:83:b9:22:11:6c:53:72:ce:98:bc:2f:
81:27:d5:64:18:53:ce:c7:bd:80:a8:66:2b:39:4c:65:e3:dc:
86:26:ca:08:33:c2:a8:4e:45:d6:b2:8d:9b:63:06:79:13:d3:
d3:47:19:24:ab:ca:e4:e0:21:68:a2:ca:ab:bc:d2:d4:a5:09:
65:ed:b7:68:57:1e:f1:e3:d8:61:42:01:26:0b:35:08:4d:e1:
23:83:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client