Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266DC60EC1D011EF9119ED82762E951A.roa
File: 266DC60EC1D011EF9119ED82762E951A.roa (raw, json)
Hash identifier: 2hjP+8tR+m/Cl7hfPEV+MbQ14ycxTmJodXSWbg3lz3A=
Subject key identifier: C0:A5:31:C6:3D:BA:B4:B3:0D:CE:85:09:E0:D9:C4:8E:34:50:FF:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012297
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266DC60EC1D011EF9119ED82762E951A.roa
Signing time: Tue 24 Dec 2024 08:22:01 +0000
ROA not before: Tue 24 Dec 2024 08:21:58 +0000
ROA not after: Wed 10 Dec 2025 08:21:58 +0000
asID: 984
IP address blocks: 154.193.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74391 (0x12297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:21:58 2024 GMT
Not After : Dec 10 08:21:58 2025 GMT
Subject: CN=676a6f29-1042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:0a:44:35:68:76:d1:c2:93:38:c1:22:ce:
7b:b1:de:1d:46:a7:ba:13:de:65:76:31:6a:db:c1:
e1:bd:34:14:6d:f0:d1:c6:11:ce:20:b7:43:c0:83:
49:11:88:18:74:cb:48:0c:fe:83:b8:62:4e:ef:ee:
2b:b9:8c:cf:e6:3c:a1:a9:b0:db:61:fb:56:a0:8f:
5c:78:dd:a3:89:c3:fb:0c:fc:1d:5e:29:cb:09:81:
f8:c1:df:21:08:e6:b3:ba:2f:be:be:f9:98:a3:4b:
66:45:d4:58:bd:09:27:d0:f9:5f:d2:76:43:76:2b:
80:2b:bc:45:fa:2e:c8:32:51:ef:67:ee:88:e8:e2:
ec:42:bb:93:62:6d:ce:f9:24:1f:e0:c0:b1:ef:f2:
79:19:4a:db:ab:9c:79:ba:55:f8:1b:3f:c1:d7:f8:
ce:45:f6:b6:19:1d:74:1c:da:75:e3:00:da:8c:d1:
2b:27:4d:65:76:53:f4:8d:9f:72:13:d6:2d:2d:13:
f2:d6:12:57:8c:c7:85:f9:86:e0:9e:b6:49:95:43:
c4:5e:27:8d:ae:e6:db:20:f2:ac:b5:e6:a8:b4:99:
dd:a1:43:d8:4f:1d:47:ea:3f:b9:6d:e3:6b:3a:80:
93:a5:65:11:06:c4:3a:ab:0d:8a:7e:12:8a:7b:63:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:31:C6:3D:BA:B4:B3:0D:CE:85:09:E0:D9:C4:8E:34:50:FF:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266DC60EC1D011EF9119ED82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.235.0/24
Signature Algorithm: sha256WithRSAEncryption
55:38:39:e5:36:2c:8d:62:c6:b4:cf:97:46:ed:e4:da:a1:8d:
99:6e:ec:a2:9f:7e:1c:14:e3:6c:a2:5c:35:91:c3:5e:25:0d:
73:84:7a:d0:2d:35:e3:bd:df:94:61:ab:25:d6:81:73:b0:aa:
04:f6:9e:fb:d6:f5:01:98:2e:3b:e3:e6:00:4c:33:42:26:e0:
05:f2:4c:f0:03:1a:43:11:aa:c9:c1:cd:fd:31:95:75:4e:87:
4c:47:82:d7:78:0f:c6:1b:dd:64:6b:c3:2d:2e:c8:6c:ee:2c:
6d:68:98:45:0d:b6:77:e6:dc:9a:12:19:8e:27:75:4c:d0:cc:
9e:85:96:b7:bb:13:f8:ed:21:bb:41:3d:8c:7b:5c:04:39:4a:
91:3c:43:ab:56:da:f8:cb:ba:7e:dc:6b:19:c0:cc:67:56:ac:
ef:94:02:b5:c2:0f:28:59:18:ed:81:f1:b5:17:3d:52:2b:09:
de:2f:5f:af:56:44:06:9f:42:55:ef:89:9d:da:ea:a9:b6:3d:
f6:ac:9f:ce:6d:09:3c:7f:67:8a:9b:5e:3b:ca:90:e2:b0:1e:
99:26:f5:b0:9f:ff:6b:e5:27:a2:64:c4:02:02:0c:d5:94:39:
33:a8:2c:43:0d:2e:87:86:cb:20:70:7e:70:41:49:57:f4:b0:
2f:a4:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:50:34 2025 by rpki-client