Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2944786EC1DA11EFB4623743762E951A.roa
File: 2944786EC1DA11EFB4623743762E951A.roa (raw, json)
Hash identifier: PcOTfHP6cY+WQIY4HbZcCp5UplpuXTmbG4xGiSCZfdY=
Subject key identifier: B6:BF:D6:9B:FB:CB:6E:EE:A9:33:4F:D1:C2:ED:F2:39:D7:7A:F3:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2944786EC1DA11EFB4623743762E951A.roa
Signing time: Tue 24 Dec 2024 09:33:41 +0000
ROA not before: Tue 24 Dec 2024 09:33:37 +0000
ROA not after: Wed 10 Dec 2025 09:33:37 +0000
asID: 984
IP address blocks: 154.194.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74487 (0x122f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:33:37 2024 GMT
Not After : Dec 10 09:33:37 2025 GMT
Subject: CN=676a7ff5-c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:ad:27:b0:0c:e8:6d:6d:0d:fc:00:30:c1:
f3:79:a7:6c:dc:c5:e5:76:c4:1d:fa:7b:07:cf:57:
41:cf:06:96:73:99:91:27:cd:2e:5d:3d:cd:08:62:
5e:f9:4d:bf:0f:b4:8d:01:c9:1a:eb:6f:7e:17:fa:
ca:bc:fa:3c:d6:71:f4:0f:71:33:9c:34:8b:9d:de:
3c:5f:9f:25:aa:f0:c5:a8:f3:32:97:76:8f:7e:a9:
e7:5b:2e:aa:d3:ad:68:2f:f0:66:78:13:9d:17:09:
7c:b9:ae:7a:2a:39:62:36:c7:67:7b:2e:a2:18:c3:
41:76:01:af:02:12:dd:39:8a:36:79:27:ca:79:95:
c2:81:36:87:81:c4:3a:9e:4e:f1:dc:6c:a3:1c:78:
5f:9a:66:b5:ce:55:62:ae:f6:3d:bb:e4:fb:a9:c6:
15:32:79:b1:dd:2f:b8:e5:4a:ad:fa:51:85:68:ed:
fc:1a:b6:ba:c6:2c:95:4b:75:4c:f4:96:a0:9a:d9:
73:c3:de:66:55:ec:c2:c3:a4:d5:34:6e:07:63:95:
76:8d:ca:5e:ca:97:7d:0d:bf:71:1a:93:66:a3:09:
68:54:cf:bb:d9:b0:7a:d7:b0:d3:d8:53:03:cd:f8:
7d:e3:f5:29:35:de:59:13:49:34:87:cb:fe:3e:68:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:D6:9B:FB:CB:6E:EE:A9:33:4F:D1:C2:ED:F2:39:D7:7A:F3:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2944786EC1DA11EFB4623743762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:aa:6a:16:99:65:0a:c9:02:3a:d0:20:19:04:cd:ff:d4:b4:
12:e2:2e:43:8c:e6:ad:3a:86:5a:e5:77:49:e6:80:d4:0b:02:
3e:b3:eb:61:87:5c:0f:d2:70:a2:e7:32:49:03:8f:74:f6:d8:
cb:85:39:31:5e:1c:f3:24:3e:d1:6c:f1:96:c9:cc:67:c7:dc:
e3:5b:42:c5:15:cf:9e:b2:33:dd:60:82:da:54:8a:66:14:e2:
99:fc:41:ad:da:c1:93:ef:65:30:64:12:06:a2:66:c4:df:be:
34:f2:ed:1f:45:75:72:75:f2:6f:92:39:27:33:02:c9:2a:bd:
3d:4f:19:9b:c1:30:2f:84:63:cb:28:7e:e1:87:21:7f:34:4b:
03:57:15:cd:c8:18:66:3b:82:a5:92:23:0d:4f:85:82:33:11:
61:ea:89:d8:00:67:fd:c3:84:2e:67:dd:8f:14:95:69:6b:d5:
24:5c:7e:3f:d7:91:80:70:45:e6:93:8e:ec:4e:90:da:2d:15:
e9:20:52:c6:df:f7:09:d7:0f:e6:09:b5:82:12:7a:e2:29:b8:
0a:24:98:18:54:f5:d5:09:86:39:f9:9b:ed:49:1b:5a:e8:b7:
c6:9a:5d:4e:92:f4:7a:61:bd:6c:b2:38:57:f9:59:10:65:29:
22:57:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:57 2025 by rpki-client