Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E631B74BE9411EFA3B764A5762E951A.roa
File: 1E631B74BE9411EFA3B764A5762E951A.roa (raw, json)
Hash identifier: fWmOVWMJZ3jAlv2X+ovT2L4WjjZYvWh44runjvdUUcY=
Subject key identifier: 3B:FA:40:9C:1F:E2:B2:15:9B:F2:B7:A2:42:CA:73:79:CC:03:0E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E631B74BE9411EFA3B764A5762E951A.roa
Signing time: Fri 20 Dec 2024 05:34:45 +0000
ROA not before: Fri 20 Dec 2024 05:34:41 +0000
ROA not after: Wed 10 Dec 2025 05:34:41 +0000
asID: 984
IP address blocks: 154.82.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72758 (0x11c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:34:41 2024 GMT
Not After : Dec 10 05:34:41 2025 GMT
Subject: CN=676501f4-baab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:b6:c2:ac:d5:78:69:c4:5e:0d:9f:61:27:
48:d9:27:04:98:ad:84:3e:a3:9d:bf:e8:db:cb:72:
43:84:1d:d6:b0:3c:57:63:50:57:19:89:f8:7a:bc:
f6:f3:c7:3d:d5:67:b6:26:b0:0f:7f:df:c5:a0:ca:
1d:db:cc:0d:13:09:8d:35:9e:13:bb:27:93:7e:26:
ab:30:96:58:2a:f5:c3:14:b3:92:c9:68:7b:ce:99:
c9:ce:d5:26:c1:dd:d9:8b:ba:e9:94:aa:ed:d6:38:
56:af:5a:50:ad:cf:22:0a:75:e0:ea:fd:21:80:22:
ea:eb:2c:9c:c1:7e:cf:d1:0b:0d:f2:db:0e:4a:17:
68:a2:52:4c:01:2c:ba:5b:b6:be:c2:65:d6:3d:29:
60:d8:5e:66:51:c3:87:a6:52:29:2e:18:09:1f:5b:
83:f5:1c:51:04:ba:d2:62:77:51:87:99:24:c6:53:
33:a6:c6:3c:10:37:13:90:e2:89:6d:35:3e:18:c7:
ca:fc:19:9b:7a:19:ab:5e:ae:63:d4:e7:36:de:ae:
55:d7:25:fd:4c:24:cd:d4:e2:2e:f3:f7:e3:ca:b6:
56:39:02:98:e5:5f:ef:be:e7:f9:82:6c:e8:bb:7a:
e1:54:16:b9:b5:8d:73:36:87:13:2b:bb:ed:26:8e:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:40:9C:1F:E2:B2:15:9B:F2:B7:A2:42:CA:73:79:CC:03:0E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E631B74BE9411EFA3B764A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:01:af:a3:09:07:19:c7:73:1c:eb:08:91:b9:eb:97:c2:7e:
6e:9f:ad:f5:d6:c5:05:de:7d:c3:86:fb:09:24:86:50:92:a2:
0c:af:04:28:d7:3c:0d:ac:ff:5a:af:f7:aa:96:57:ef:6f:3d:
20:76:61:19:61:b3:f3:91:a5:1d:07:f2:bc:1c:52:3f:d6:54:
9f:1e:8c:74:f0:f2:5e:e1:7c:22:b5:d0:33:10:17:14:bd:5c:
dc:65:6b:5a:b8:ce:99:f5:65:3e:50:bd:5e:df:e8:38:e0:d0:
54:70:79:9f:64:67:c5:8e:43:91:a7:88:5e:d3:77:bd:b6:c0:
4e:aa:6f:99:e8:e2:52:47:47:1c:b5:e8:8c:00:c0:ab:dc:9b:
f2:e1:96:69:84:29:56:18:2d:13:17:e1:01:fa:42:a4:8b:b9:
a5:14:5d:8f:52:1c:b6:8e:ab:a9:db:7e:9c:5c:f9:35:49:57:
de:f3:95:0d:12:8f:bd:5f:cc:c5:95:7c:83:77:e7:ef:c0:64:
7f:71:c5:9a:ab:ac:00:3e:f0:b2:f0:53:cc:93:1c:3e:16:a5:
10:e7:64:83:8e:81:79:90:57:df:a3:ab:97:f3:39:2b:55:98:
ae:e7:2d:aa:bc:af:d5:c2:8e:76:60:a7:af:2d:df:40:da:57:
7d:72:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:35 2025 by rpki-client