Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/154229D2C0CD11EFB6B8F78F762E951A.roa
File: 154229D2C0CD11EFB6B8F78F762E951A.roa (raw, json)
Hash identifier: yETs1b5iRE0Y0ThuVsW3GaLnvuN3Tu9xkvBX24049oA=
Subject key identifier: 11:B4:E8:56:B0:DC:FA:84:AE:31:26:58:C0:EF:48:B4:0C:56:9D:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/154229D2C0CD11EFB6B8F78F762E951A.roa
Signing time: Mon 23 Dec 2024 01:27:33 +0000
ROA not before: Mon 23 Dec 2024 01:27:29 +0000
ROA not after: Wed 10 Dec 2025 01:27:29 +0000
asID: 984
IP address blocks: 154.82.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73236 (0x11e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:27:29 2024 GMT
Not After : Dec 10 01:27:29 2025 GMT
Subject: CN=6768bc85-0ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:8d:4e:b5:9f:93:c2:c0:fc:1a:a3:7d:44:
12:19:c9:f6:2e:ad:cd:83:70:f6:61:dc:9e:76:25:
b0:7b:dc:96:46:65:4d:fe:03:96:31:16:95:99:9f:
90:2a:24:84:27:1c:a6:6f:b3:45:16:1a:bb:a9:15:
d7:95:25:01:31:18:c6:e6:96:a8:a9:9e:e4:cd:21:
c9:48:3e:61:e2:5d:e0:2d:c9:5c:7c:b0:12:07:d0:
40:b7:1e:8d:f6:17:e1:58:79:87:04:d4:0a:88:59:
aa:1d:8b:55:b2:2b:21:23:fd:65:88:f8:84:5e:2c:
d7:91:cd:11:90:b1:0b:f9:d1:bb:59:da:5a:cb:81:
32:25:c9:70:9c:6d:7b:d7:b9:5c:06:49:d3:3c:ba:
57:0a:73:82:26:85:32:ac:5d:70:57:62:9d:cc:b8:
5c:cc:3c:10:77:c6:72:4d:d5:f4:07:95:e9:05:f2:
d2:73:2d:53:f1:09:de:ed:98:da:3f:87:42:20:9d:
81:67:1f:b6:3a:94:dc:ca:9e:bd:0d:07:6b:df:93:
a9:8f:9e:fa:2d:ce:20:48:7e:b2:7a:c5:9a:79:70:
99:69:56:50:d0:4b:09:35:eb:6c:82:05:90:e6:02:
0e:b8:f4:db:90:a7:a1:48:4e:a8:d4:41:73:32:d7:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:E8:56:B0:DC:FA:84:AE:31:26:58:C0:EF:48:B4:0C:56:9D:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/154229D2C0CD11EFB6B8F78F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:00:74:3a:e0:4a:0c:05:0a:e5:0d:d5:2c:bf:5a:06:64:14:
47:b5:b9:43:57:c1:e0:04:6f:fc:5b:0d:3e:4e:6f:5b:b1:35:
7f:fb:da:c4:2b:a1:67:5b:05:59:4d:bc:08:18:c1:61:e9:3c:
44:c0:62:92:e5:67:2b:e3:ef:a9:1a:b7:2c:0c:60:5f:25:47:
33:35:43:e8:57:4d:21:3a:49:14:ec:7f:98:1e:71:f5:03:e1:
a7:e6:dd:1f:91:57:e5:c0:29:22:3a:11:02:86:96:d7:00:47:
83:25:70:5b:09:ac:31:b2:86:f3:00:42:d2:d5:7c:d0:23:f0:
0e:5d:dd:c3:1e:48:34:f2:fc:eb:f8:bf:d2:7a:ed:6f:c9:a6:
b6:07:9c:2f:45:11:6b:06:31:e7:12:47:fe:5c:fb:03:64:ef:
dd:80:d0:20:00:14:01:6b:9f:ee:3d:9c:49:e8:47:86:b0:d1:
b2:96:47:50:74:63:9c:7f:b1:d4:b2:d7:84:79:1f:74:f0:5d:
a1:8b:2d:59:16:29:97:1f:07:08:87:5e:b2:7d:13:75:f0:43:
f1:e0:56:29:0f:2b:22:9e:57:c7:67:63:6a:19:23:07:cd:d4:
ea:60:6b:90:0b:b4:30:b6:85:52:9a:50:62:1b:d9:00:7b:02:
a7:79:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:06 2025 by rpki-client