Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB2441EB92211EFA9844567762E951A.roa
File: 2DB2441EB92211EFA9844567762E951A.roa (raw, json)
Hash identifier: aL8DnSpSGO4cfOOcskAO375fKnwI4kcq/9eZfYhYj7A=
Subject key identifier: 3E:78:09:11:20:48:6E:95:E7:E3:33:11:D5:61:95:34:C5:CD:AA:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011AE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB2441EB92211EFA9844567762E951A.roa
Signing time: Fri 13 Dec 2024 07:16:32 +0000
ROA not before: Fri 13 Dec 2024 07:16:28 +0000
ROA not after: Tue 21 Oct 2025 07:16:28 +0000
asID: 133585
IP address blocks: 154.84.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72423 (0x11ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 13 07:16:28 2024 GMT
Not After : Oct 21 07:16:28 2025 GMT
Subject: CN=675bdf50-d696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:c4:68:be:42:16:9f:30:73:0d:a1:61:33:
b2:c8:57:e5:45:ad:bc:63:85:54:81:c3:f8:18:1d:
68:52:68:90:34:2b:d0:57:47:95:53:4e:a9:6a:42:
a8:dc:3c:cf:31:fe:fd:ff:9e:7f:c4:8d:87:d9:41:
77:10:c3:fd:61:98:62:0e:1f:ba:be:29:ad:8e:01:
1e:87:e6:65:93:07:69:22:63:1b:90:32:70:17:76:
71:e8:43:09:3f:1e:0c:b9:b0:d8:24:f5:ec:30:2f:
23:b4:ec:d0:35:4f:ac:db:79:80:65:5a:2c:43:b2:
b4:c1:f0:c6:63:04:17:5a:38:2a:58:ac:ac:d2:e1:
2d:6b:00:42:3f:c5:f1:20:75:8f:db:88:63:52:9e:
cb:ee:93:f6:47:97:e0:5a:88:7b:a1:28:1a:3b:ab:
93:d8:e7:49:62:31:66:1f:f9:00:11:6e:22:ca:f3:
b6:e4:25:96:69:d5:3e:3c:44:7f:54:dd:c1:68:27:
7b:5c:ae:3f:6b:bf:b6:74:9a:ba:31:cb:3a:01:3d:
4c:f6:69:95:06:db:91:47:87:9b:e8:d5:3c:2a:67:
b4:57:da:1f:26:5c:7e:a4:07:0e:61:6c:2c:ec:56:
bf:3a:17:b5:e3:2c:4d:d4:37:c5:4a:f3:c0:fc:52:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:09:11:20:48:6E:95:E7:E3:33:11:D5:61:95:34:C5:CD:AA:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DB2441EB92211EFA9844567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:44:7a:c3:98:14:93:29:fc:07:5a:6b:0c:9b:a4:24:15:e7:
b8:b2:4c:6d:87:ad:df:18:eb:81:40:63:cc:40:aa:52:5c:86:
85:0a:90:a2:4c:c4:b3:45:c4:36:e4:be:d5:c2:ea:08:23:52:
24:b0:44:3b:be:1c:c0:02:81:f2:fb:15:c5:34:52:5f:0f:b9:
cd:1d:45:18:37:e3:1d:a6:f1:1d:ef:f0:23:fb:35:9b:f2:ed:
1a:72:a5:a4:fd:38:28:fa:e7:c3:31:da:52:43:82:3e:20:bc:
88:83:d4:cb:d8:3b:3e:b2:23:88:b0:ec:f6:ce:d4:5c:53:13:
f0:b7:25:fe:41:6e:6d:1f:7b:20:0e:e2:c8:a5:3d:b3:1f:a5:
e5:c0:ff:36:ea:d2:8b:be:4d:52:c4:01:41:26:95:c5:d6:f9:
11:21:b1:18:10:f2:bc:75:06:a5:8e:f8:24:8b:1a:04:6e:f3:
33:b1:92:7f:e9:dd:aa:bb:8c:ff:de:47:64:6b:a0:41:87:8c:
e4:93:e4:63:37:54:a0:e2:6c:f7:3c:4e:ca:3c:78:c6:7f:cf:
13:68:08:1c:22:dd:f6:60:b9:54:34:49:8b:fe:58:3f:87:a9:
a8:66:17:87:e4:1f:87:c0:a7:6c:16:f9:fa:ee:2a:bf:84:02:
b2:37:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:06 2025 by rpki-client