Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD2B8D4C3C211EFBA884667762E951A.roa
File: 0FD2B8D4C3C211EFBA884667762E951A.roa (raw, json)
Hash identifier: ri1/YikDrfzIeLcOslrhUIP5OJhYZNC16NIQeDhoKdg=
Subject key identifier: 38:1F:5A:6E:08:4E:23:D8:7A:E4:4C:DC:64:33:67:A1:1F:CB:88:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD2B8D4C3C211EFBA884667762E951A.roa
Signing time: Thu 26 Dec 2024 19:46:13 +0000
ROA not before: Thu 26 Dec 2024 19:46:09 +0000
ROA not after: Fri 12 Dec 2025 19:46:09 +0000
asID: 984
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75688 (0x127a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 19:46:09 2024 GMT
Not After : Dec 12 19:46:09 2025 GMT
Subject: CN=676db285-cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:08:f1:59:5a:de:b0:d3:9f:c4:b2:ae:e6:
d9:ce:df:49:e7:69:11:90:30:75:04:d5:ca:7b:ac:
e7:59:72:31:a3:8f:23:2c:d9:b9:40:25:2b:20:99:
c1:e9:85:b8:15:df:75:8c:84:b7:46:2f:0c:90:b0:
f7:62:2c:64:35:d6:61:78:e4:c9:d9:a7:e8:7f:4d:
14:97:18:a4:c6:96:5b:ee:81:94:9e:66:c3:10:14:
fd:46:66:00:23:80:06:8c:61:44:3a:0e:5e:34:f8:
61:0a:fd:53:be:a3:60:32:c9:87:59:eb:fa:90:03:
e0:0a:3b:30:8f:48:78:39:e4:02:c4:29:d3:cd:20:
3a:15:72:7e:7e:ad:9f:50:54:3e:ae:4f:ea:87:93:
6f:0a:fd:e3:b6:cd:55:5d:0d:d7:36:e5:13:3f:7d:
f5:4f:0c:bc:f0:2e:5d:fc:41:01:17:4e:3d:43:42:
25:75:d7:ad:bc:ee:9e:fa:a3:56:a3:b3:ab:4b:12:
f3:25:85:eb:8d:e0:9c:e8:89:56:75:d9:28:5a:87:
60:07:0f:4c:75:be:43:77:af:d8:87:ea:d1:bb:26:
82:e8:16:4a:01:d8:27:54:0a:c1:75:64:21:97:49:
b3:2d:67:f2:aa:97:44:cb:6d:2b:66:48:f8:f4:bd:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1F:5A:6E:08:4E:23:D8:7A:E4:4C:DC:64:33:67:A1:1F:CB:88:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD2B8D4C3C211EFBA884667762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9c:18:d6:16:a6:d1:56:0c:f0:39:1a:4f:f3:34:69:82:30:
9e:1e:b0:e1:ce:34:c7:e1:3f:c5:47:1b:1b:89:19:43:78:a2:
23:26:e1:b0:fa:18:53:82:68:e9:85:25:5a:e1:33:fe:e7:d2:
50:46:67:19:14:26:54:bd:82:db:d6:ec:f9:46:49:2b:9d:26:
f0:97:e2:e9:e2:2e:32:28:ba:c6:e8:ab:c5:46:d0:95:5a:49:
58:0d:54:a8:21:e4:bb:31:7b:20:66:19:1b:cb:b1:13:7a:1a:
0a:2c:19:e7:c3:6d:4f:56:38:2a:5e:ba:d7:e4:c6:79:a6:1e:
83:95:4f:5f:d9:03:26:9c:91:4f:19:ec:a8:30:7b:c4:38:ca:
e9:72:ad:b3:61:5c:14:d6:9e:63:cd:c1:39:0c:6d:68:ef:f1:
10:45:e7:55:25:70:20:45:bf:8e:f2:d3:73:ca:9a:9e:8b:54:
3a:7d:b9:9a:ef:e7:6c:03:e7:91:51:48:26:98:6d:cb:09:26:
6f:16:d4:de:41:fc:59:41:50:91:48:c5:fc:f6:a3:1c:91:43:
12:f1:1e:44:cf:f0:f6:a0:16:a3:14:00:53:2c:27:06:c7:c6:
fc:9c:27:f9:71:35:9b:72:6e:3d:e6:e5:b5:18:0e:ba:ba:0a:
7e:3e:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:28 2025 by rpki-client