Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2993250CC5EC11EFBCD6F2A9762E951A.roa
File: 2993250CC5EC11EFBCD6F2A9762E951A.roa (raw, json)
Hash identifier: tuvugaLbSdud7smjTW3KkhGbbkjEp/cjdBD83H1aE7o=
Subject key identifier: B4:47:5D:CB:59:CC:B8:DB:F7:D5:77:1F:17:CF:B5:B2:DC:8B:D1:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2993250CC5EC11EFBCD6F2A9762E951A.roa
Signing time: Sun 29 Dec 2024 13:52:37 +0000
ROA not before: Sun 29 Dec 2024 13:52:34 +0000
ROA not after: Fri 12 Dec 2025 13:52:34 +0000
asID: 984
IP address blocks: 154.211.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77230 (0x12dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:52:34 2024 GMT
Not After : Dec 12 13:52:34 2025 GMT
Subject: CN=67715425-a345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:2f:e4:9f:e7:0e:f6:cb:cf:4e:bb:f0:f7:
c7:66:05:77:b8:3f:25:1c:92:9f:93:54:17:eb:8c:
1a:9e:53:08:16:1b:b9:ac:ab:30:0e:bb:00:8d:47:
bf:19:b2:02:e4:51:b8:28:78:23:7e:6a:1e:8d:d8:
2e:90:f0:21:db:38:cc:62:da:b3:6c:ea:c6:eb:ba:
65:a6:90:a0:1f:70:0a:72:52:a8:e8:10:7f:08:ec:
de:94:25:01:1a:15:a6:41:9e:68:9e:2b:17:11:b4:
79:a3:b4:cd:23:b0:41:ea:e6:30:3f:1d:b5:92:03:
3e:9b:eb:1e:19:3d:63:c5:59:61:99:8b:fb:55:2f:
9b:19:59:ed:2d:00:ee:14:ff:ca:5d:8d:df:b5:81:
69:f2:4e:33:4b:81:47:84:0f:bb:76:f9:22:c4:6c:
06:58:05:ca:ed:61:d5:4f:44:0c:96:f0:a2:d6:15:
30:b4:4d:ba:cb:9c:1f:09:b0:d5:65:7b:15:b0:21:
fd:42:9d:ed:db:31:15:68:aa:2e:6b:3e:ec:52:bb:
6f:29:47:9a:fd:ed:88:2d:c9:7e:a0:e0:b3:53:d8:
c3:b1:89:8e:0b:be:a9:6f:10:66:de:5f:b2:ba:0d:
60:32:6f:07:af:e5:89:e1:dc:86:6b:8e:19:db:69:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:5D:CB:59:CC:B8:DB:F7:D5:77:1F:17:CF:B5:B2:DC:8B:D1:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2993250CC5EC11EFBCD6F2A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e3:b8:64:f4:58:fd:e1:03:d4:60:5b:8a:9f:90:70:d8:24:
c0:f9:de:69:18:ff:6e:b9:20:ea:34:1a:a0:4d:00:0d:b8:30:
a4:7c:ca:75:39:43:e8:72:22:86:e9:91:a2:dc:a6:2c:e2:4b:
7a:cb:5e:5c:24:0a:a1:12:37:e6:36:64:9b:20:90:e7:63:eb:
53:f1:b1:fc:02:e8:3a:dd:7d:ff:90:a7:e3:6b:39:bc:51:ef:
a9:f7:b1:e9:ac:14:ef:1c:58:44:52:42:1d:b7:b7:80:63:f6:
c2:9d:23:04:04:95:27:20:84:81:89:8e:d1:a8:ad:14:51:74:
39:ad:95:6c:a3:fc:9b:e7:8f:b0:a7:7c:33:60:55:63:ad:8c:
e6:52:eb:1f:c5:74:7e:e3:59:e4:48:5f:43:95:31:fe:97:13:
40:12:6b:13:39:cc:a2:de:77:b6:8e:28:1f:cc:13:f4:c3:f5:
f4:72:17:6d:25:4d:b6:e0:bb:21:07:7d:88:4e:37:2e:da:a5:
98:63:41:6e:40:32:0e:75:a1:85:3d:ad:29:33:ce:3d:7f:c2:
ca:c6:30:27:f3:1c:d1:a5:fa:18:69:6b:47:53:b6:ec:30:21:
f8:d8:db:b0:e5:94:9f:ea:0e:99:3f:ab:bc:db:33:ee:22:10:
f8:1f:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:27 2025 by rpki-client