Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACDF37EC5F411EFAFDED45A762E951A.roa
File: 0ACDF37EC5F411EFAFDED45A762E951A.roa (raw, json)
Hash identifier: GOJCrEdZ4fnGDdKM6e/sgZrGkcIBS6l5aqJB27qqSaE=
Subject key identifier: CD:DA:3B:A6:84:1D:CC:80:6C:A0:90:BB:72:A1:56:FF:32:8D:BF:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACDF37EC5F411EFAFDED45A762E951A.roa
Signing time: Sun 29 Dec 2024 14:49:02 +0000
ROA not before: Sun 29 Dec 2024 14:48:58 +0000
ROA not after: Fri 12 Dec 2025 14:48:58 +0000
asID: 984
IP address blocks: 154.213.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77296 (0x12df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:48:58 2024 GMT
Not After : Dec 12 14:48:58 2025 GMT
Subject: CN=6771615e-fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1b:73:43:0d:85:6d:1d:e0:ef:bb:86:7a:3f:
d9:10:40:91:42:ff:e1:0d:1a:2d:d5:5e:f9:04:47:
ea:cf:b8:1b:6e:2e:dc:6b:20:60:f6:94:6b:12:8c:
8d:33:c2:7b:db:38:84:92:24:e9:16:38:ce:5b:96:
5d:73:3b:bf:33:71:ff:1c:1d:fc:76:3d:bf:37:48:
e5:03:0c:3b:f9:9c:62:7c:54:0b:4d:2a:dc:2b:e4:
06:10:b7:6b:5d:21:c7:a2:68:a1:a7:7c:cd:68:34:
b6:13:35:0b:58:69:89:2c:3e:8c:6c:5a:8c:f4:e5:
5b:94:14:11:5c:02:15:17:16:0c:97:6f:ac:89:5e:
d1:c3:5c:21:c6:f4:13:ed:61:e1:4e:e7:fc:d1:e2:
a1:e1:ef:c3:8c:7a:bb:2d:46:e8:d7:83:4c:11:64:
2a:37:7c:91:83:da:f6:b8:85:97:0f:84:f7:21:a9:
00:f8:c0:9e:a8:cb:93:90:76:f6:7c:23:0f:5f:50:
b5:59:a8:b7:23:78:74:9c:91:51:9b:c0:5a:ce:9c:
08:e3:ac:51:f4:fd:b3:82:42:a8:ff:9c:89:b7:f9:
73:56:e0:01:66:41:6d:11:7c:c9:6e:08:bb:82:8f:
44:d8:3f:94:9d:93:51:65:98:87:28:f0:48:40:87:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:3B:A6:84:1D:CC:80:6C:A0:90:BB:72:A1:56:FF:32:8D:BF:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACDF37EC5F411EFAFDED45A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:30:61:57:16:2f:2e:3f:e1:76:b0:62:7f:99:ec:a1:35:a2:
3a:18:e5:0d:b6:17:57:28:ec:15:c6:66:6e:8e:9a:92:cc:6a:
b1:4c:6c:f0:08:7a:98:b3:f5:27:5b:36:0d:cf:1a:c3:ca:0f:
ac:19:d2:56:ec:5a:6e:c9:4a:23:d2:60:10:53:73:29:1c:0b:
1e:16:3f:b8:68:11:91:0b:b7:f9:06:67:ed:6d:b9:4b:85:5c:
95:7c:b8:fa:57:76:44:7c:bc:23:aa:eb:c8:20:78:52:c7:cc:
73:90:94:3e:4d:0a:dc:60:1b:57:63:66:af:f4:88:da:6d:03:
81:0c:48:b4:e5:02:63:92:63:1e:80:11:d6:09:ac:a0:2b:81:
30:17:cd:f5:8e:33:bb:35:3b:50:1b:d2:a7:6f:b7:f6:7e:e3:
5d:56:a6:a6:e2:7b:f0:cd:12:f7:48:15:92:81:b1:a0:80:ea:
00:b9:61:18:f9:09:3a:ba:b1:e8:26:52:fc:4c:86:00:93:ef:
db:09:a7:64:f2:b6:f4:41:90:4e:24:e7:81:05:e2:f8:b3:2e:
ab:0e:53:b9:38:82:d5:e5:28:fc:7a:66:2c:02:c6:3b:f1:28:
f9:e8:66:1b:86:43:20:f0:2b:3c:dd:42:ef:75:db:1f:6e:aa:
54:76:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:09 2025 by rpki-client