Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EFC18F2C1BC11EF9045E785762E951A.roa
File: 2EFC18F2C1BC11EF9045E785762E951A.roa (raw, json)
Hash identifier: NxVeCdZLIdKhGbXhiq7Zje7/m8HZvvXKTC/oQz4MCTM=
Subject key identifier: 81:65:E2:65:01:B8:63:CF:4C:E8:7E:F8:53:E2:64:50:79:1C:DA:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EFC18F2C1BC11EF9045E785762E951A.roa
Signing time: Tue 24 Dec 2024 05:59:06 +0000
ROA not before: Tue 24 Dec 2024 05:59:02 +0000
ROA not after: Wed 10 Dec 2025 05:59:02 +0000
asID: 984
IP address blocks: 154.193.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74233 (0x121f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:59:02 2024 GMT
Not After : Dec 10 05:59:02 2025 GMT
Subject: CN=676a4daa-9771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:eb:f3:f0:7e:44:01:df:22:86:6e:89:cb:
be:d6:9e:d8:e8:1d:12:57:66:7b:d2:e2:3e:bf:cd:
31:7c:82:23:7b:f7:14:cf:fa:c5:a9:32:f5:59:6e:
55:0e:99:d8:b8:db:b0:7a:df:c3:b7:e2:e7:49:26:
ec:45:59:a2:e8:40:80:51:1c:22:d1:4d:de:da:35:
94:f7:95:cd:e6:79:50:d5:06:67:67:0d:3f:8e:22:
8e:79:39:53:cc:4f:3b:11:18:6d:3d:39:34:ac:65:
58:93:98:27:46:15:ff:5b:4d:b1:c9:37:3c:8f:84:
c6:38:36:4b:63:40:de:d8:a7:8b:9c:a5:26:1c:cf:
1f:fe:ab:0c:00:36:a7:3f:1f:98:67:88:5e:f5:db:
8c:dc:3e:54:dd:f7:a3:9f:44:57:bc:5b:a2:57:b8:
89:ad:ca:e1:a6:46:ac:f6:4c:50:f0:15:bb:8e:34:
f6:17:28:0f:2b:a2:2c:48:a3:50:84:87:e6:25:fd:
75:fe:8f:30:81:2d:3d:b3:c2:a1:ce:26:91:3b:3b:
aa:77:c3:7f:d2:26:eb:13:cd:78:c6:0e:7d:09:c2:
58:c4:9f:c0:75:bc:97:47:ed:79:d9:27:05:ea:34:
2d:26:2d:c9:8c:fa:e3:60:98:71:5e:be:87:a3:b3:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:E2:65:01:B8:63:CF:4C:E8:7E:F8:53:E2:64:50:79:1C:DA:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EFC18F2C1BC11EF9045E785762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.182.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:20:0b:92:86:01:08:f0:9d:a0:80:8b:c8:12:cb:f3:10:83:
72:6e:38:dc:56:d3:b6:3c:27:2a:02:db:3c:f4:3e:e0:72:45:
9a:0e:22:0a:72:7c:b1:d5:3a:0c:44:20:52:2a:2f:02:78:2f:
73:1c:1f:40:6d:de:d9:45:ec:af:5d:b5:4f:59:45:b0:3c:97:
18:cc:33:e3:4b:4e:25:87:38:fb:0f:0e:ae:d3:7e:99:e6:53:
58:56:b8:67:b5:ca:a2:b7:a0:1e:3b:b2:53:28:44:62:b9:88:
2a:d6:40:06:fa:52:c7:a6:67:a0:7d:aa:f4:68:82:9f:4f:95:
29:c1:ab:51:38:aa:e9:da:3e:ee:55:f9:b8:d9:35:eb:a8:b0:
8d:58:4a:72:84:03:8d:a8:6e:9c:d2:fc:2d:de:73:6d:9d:f1:
b5:38:a5:ea:9c:7b:11:d4:45:91:cd:4c:19:97:ca:c9:9f:a0:
d2:39:6b:09:9a:8a:46:c2:17:79:12:a1:3c:f6:41:6b:7f:fa:
07:f0:d8:cd:63:f4:ec:79:f1:f8:12:d3:15:62:ba:54:13:49:
fb:37:08:3a:c1:cc:82:36:82:89:45:e0:a9:d1:de:0f:84:a1:
17:8c:6c:e4:57:4f:10:2d:45:be:d8:6b:4d:db:e2:f7:f6:a3:
98:ee:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:39:57 2025 by rpki-client