Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213E1168C26E11EFB4682E80762E951A.roa
File: 213E1168C26E11EFB4682E80762E951A.roa (raw, json)
Hash identifier: K6LQfi4oarLnt0ij0v1wmc+wP0fbZMbtlYeTwbxCxSc=
Subject key identifier: BF:F2:F6:54:90:7E:FC:1F:E1:BF:07:F8:36:9A:6C:F9:60:A8:2A:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012444
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213E1168C26E11EFB4682E80762E951A.roa
Signing time: Wed 25 Dec 2024 03:12:53 +0000
ROA not before: Wed 25 Dec 2024 03:12:50 +0000
ROA not after: Wed 10 Dec 2025 03:12:50 +0000
asID: 984
IP address blocks: 154.211.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74820 (0x12444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:12:50 2024 GMT
Not After : Dec 10 03:12:50 2025 GMT
Subject: CN=676b7835-3e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:a4:12:9a:91:51:aa:7b:3e:93:e2:f8:77:
a1:89:1a:e7:89:56:0a:38:a8:6e:8f:c2:57:a3:3c:
c4:ae:72:27:b7:c6:e8:91:be:46:0b:59:fc:4c:0b:
98:0a:50:6f:0c:bf:38:4f:11:b6:f3:ab:09:60:05:
28:b2:a5:04:00:d7:99:9d:e9:c6:a7:5a:23:1b:b9:
35:73:34:15:9b:bf:ba:0b:49:44:2e:bc:7e:b7:55:
b4:2e:9a:74:76:8b:f9:9c:af:1f:b0:44:a4:02:6a:
d5:59:9e:3e:7a:1d:3b:62:23:68:e3:41:1b:8e:78:
53:c9:d9:e1:f1:e4:5d:8c:f7:68:91:b5:2e:da:d2:
b3:16:01:59:0f:d8:91:ab:b6:64:8b:81:30:e0:8e:
75:e1:2c:ce:b6:99:dd:5c:2c:68:ee:26:75:e8:86:
f3:fb:6e:d3:19:f7:e3:03:5b:84:48:36:9f:9d:3f:
80:16:4d:8c:b2:c9:da:98:0e:4f:42:7f:61:d8:ad:
94:6a:e5:6b:22:01:9d:5c:9e:e4:77:e1:a1:c6:4d:
a4:e3:23:07:71:5a:a1:a0:0b:20:7b:48:fe:08:8b:
74:96:9b:10:10:7e:b4:d6:92:da:33:d9:93:f0:d0:
fd:2d:f9:f2:5c:ae:e0:28:36:e2:e0:03:9e:16:3b:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:F6:54:90:7E:FC:1F:E1:BF:07:F8:36:9A:6C:F9:60:A8:2A:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/213E1168C26E11EFB4682E80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:98:82:60:f6:20:5e:9c:72:09:2f:2d:34:52:05:bd:63:
a7:9b:67:51:2d:36:39:3f:68:93:3a:de:04:4a:96:a8:2d:95:
2e:b8:b2:8b:61:04:99:7b:1b:7d:8d:b9:6b:22:37:89:71:01:
a2:3d:80:30:df:78:66:77:72:54:4a:28:dd:5c:01:db:1f:3d:
f9:e7:53:d5:f9:98:ba:c9:4f:9a:33:d8:76:6f:83:ed:36:aa:
6f:04:06:15:a4:c0:1e:e2:d3:84:d4:de:71:18:8b:ff:ba:92:
7f:f0:54:ea:da:ab:96:fd:c9:80:ac:c1:ed:b8:14:93:de:51:
7a:40:fe:f5:5c:30:5b:02:67:8e:12:48:e9:24:3a:b3:e4:bf:
d9:f9:25:ef:49:1b:c7:31:d2:41:33:5f:65:81:61:54:fe:82:
8a:37:bc:48:c9:06:df:c5:2e:9c:0b:22:b2:db:66:18:7f:a4:
de:e7:2c:9e:17:e8:4b:6a:50:0f:22:c3:16:97:d0:8c:c3:fd:
6b:bb:7e:92:2a:1b:b4:ed:d3:4c:ae:6d:a6:2c:cd:e6:47:95:
92:09:b8:ea:78:ec:d4:a7:d8:7c:e2:91:d4:4c:a9:9c:60:cd:
d0:db:35:c4:f9:4a:09:5d:bd:fd:df:f6:21:eb:88:c0:f2:f7:
d8:f8:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client