Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508E8CEC1DC11EFBE99A24E762E951A.roa
File: 1508E8CEC1DC11EFBE99A24E762E951A.roa (raw, json)
Hash identifier: QAm5SzhwnWK4p0WSor/q7REltIzIReeqyHXwVJnkgBo=
Subject key identifier: 7D:49:3C:79:DE:79:77:B7:B7:0F:B8:64:63:40:27:12:CE:EC:15:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01230D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508E8CEC1DC11EFBE99A24E762E951A.roa
Signing time: Tue 24 Dec 2024 09:47:26 +0000
ROA not before: Tue 24 Dec 2024 09:47:23 +0000
ROA not after: Wed 10 Dec 2025 09:47:23 +0000
asID: 984
IP address blocks: 154.194.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74509 (0x1230d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:47:23 2024 GMT
Not After : Dec 10 09:47:23 2025 GMT
Subject: CN=676a832e-bd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:74:cc:94:d0:18:9d:5b:2a:bc:6e:b0:00:e6:
ef:f3:4a:2c:65:ac:40:be:3e:ba:0f:82:bc:6b:55:
d0:d5:69:8f:19:32:9d:67:83:48:f0:0e:d0:82:b5:
84:e1:be:9f:c4:c4:2a:21:3e:69:2a:75:65:7a:b9:
4e:e8:e2:9d:41:39:49:f6:57:01:95:41:e8:57:1d:
98:50:bf:25:54:89:15:ed:35:12:b3:10:fa:dc:b8:
90:e4:6c:b7:ca:55:dd:c5:f2:d3:32:a1:c3:67:79:
22:36:d6:12:cb:0f:27:f7:fd:e5:65:08:1a:de:b4:
11:37:08:be:fb:f5:24:ae:e6:82:7c:56:ba:8a:83:
57:9b:4f:87:5e:2e:e2:12:6a:e4:56:cf:5f:a2:de:
6c:90:f5:ce:eb:ff:26:9b:7d:cf:e8:35:3e:61:bb:
5a:26:00:53:62:dd:35:85:91:8d:9c:c3:81:65:63:
c8:3f:b2:8b:ee:6b:36:26:59:54:57:0c:f7:33:fc:
fc:29:b8:1f:45:eb:fb:83:c8:d8:05:22:b1:27:6e:
c0:43:fe:96:bf:78:23:5b:df:b1:9d:9b:4d:d9:fe:
f9:1e:d7:3d:92:a2:f5:cc:6f:dc:6e:09:fe:2e:77:
f3:34:cc:fe:5c:ba:61:fa:50:fb:33:80:be:d7:c0:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:3C:79:DE:79:77:B7:B7:0F:B8:64:63:40:27:12:CE:EC:15:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1508E8CEC1DC11EFBE99A24E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.251.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:3f:0b:8c:cf:9f:48:1a:fd:63:f0:af:e7:29:6f:e3:74:7c:
24:b9:7f:0c:f3:45:e8:a2:d7:28:71:93:83:22:d0:15:73:a0:
20:ac:ed:c3:2a:30:1b:12:98:7e:69:83:f0:b8:e4:ca:0b:70:
f9:52:e9:ef:18:43:eb:f9:81:43:88:0a:c9:b1:70:b4:c8:df:
d2:30:fa:35:43:af:df:c8:85:e5:90:64:db:ac:d9:da:5c:61:
92:2b:32:60:c0:2c:57:c0:b4:a3:09:45:52:f9:f2:6d:fe:c6:
1c:e7:55:05:9a:47:5f:f2:5d:ac:d2:b6:e3:76:82:85:b0:42:
45:8e:c4:98:2b:93:ec:87:e5:56:52:ed:45:e3:58:a5:f6:cc:
d5:dc:82:06:1a:32:ae:0b:f5:2c:c5:a9:1d:97:da:d4:86:dc:
ee:ef:37:61:ca:98:f4:ef:f3:01:db:e4:29:32:9a:e5:a3:5f:
17:dd:f3:c8:c1:bb:5b:59:3c:df:1d:2b:d6:11:58:66:b9:dc:
6d:e7:21:2f:b9:d0:a9:5a:34:47:89:af:0f:6a:82:46:82:fb:
7a:29:8b:e1:0d:b9:c6:7d:82:ce:44:52:84:7f:cf:93:44:c1:
42:91:fd:f1:e0:92:0e:cf:4c:48:d9:4d:a8:76:e9:45:36:08:
be:fa:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:32 2025 by rpki-client