Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32512F9EC40811EF9AE4BEB6762E951A.roa
File: 32512F9EC40811EF9AE4BEB6762E951A.roa (raw, json)
Hash identifier: p57qjIs/9A7scHnMUPEnQ1CwCsGmINCn9L8KNYgHOno=
Subject key identifier: C2:F9:CA:8D:7E:F0:B3:40:C7:91:84:2B:82:24:CA:2D:0B:5C:87:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32512F9EC40811EF9AE4BEB6762E951A.roa
Signing time: Fri 27 Dec 2024 04:08:15 +0000
ROA not before: Fri 27 Dec 2024 04:08:12 +0000
ROA not after: Fri 12 Dec 2025 04:08:12 +0000
asID: 984
IP address blocks: 154.195.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76023 (0x128f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:08:12 2024 GMT
Not After : Dec 12 04:08:12 2025 GMT
Subject: CN=676e282f-9bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:f8:c6:55:66:24:2c:4b:00:68:24:6f:75:
83:88:bf:a0:73:1a:dc:61:5f:a7:38:d7:ba:69:23:
51:cd:e5:04:89:92:82:9a:43:7a:66:7d:24:64:51:
91:eb:ba:6b:78:36:75:61:7b:27:5e:5a:b6:c3:0f:
90:0a:8e:43:00:e8:78:e4:c8:d8:a9:84:2c:9f:84:
e6:75:96:81:e4:b1:92:63:69:10:cf:4b:92:43:3b:
2d:e1:2e:09:3f:39:a4:a0:c0:aa:76:ca:7b:82:fa:
94:48:43:2e:a2:a7:a9:80:9c:b3:f0:bb:6a:88:a3:
b5:58:f7:44:bd:ce:7b:f2:ff:4b:23:52:39:db:8c:
49:dd:9a:19:5b:97:ae:39:c8:f1:b7:d1:b7:78:d1:
75:a0:00:5c:e0:17:b4:41:67:85:5a:fe:39:49:13:
b1:9a:b4:1b:08:bd:ef:ec:c8:e4:a2:3a:c5:e8:10:
8c:1d:87:bc:69:82:e0:26:55:df:92:d6:b1:e9:98:
bb:e7:7f:84:9d:56:59:fd:93:c7:03:fd:b1:b0:c9:
9c:73:85:8e:12:81:a0:13:69:e7:18:ef:e6:4e:a8:
c5:03:e3:7c:8a:12:f2:42:28:f8:6f:05:cc:cd:dc:
d9:56:a1:a0:1f:28:06:95:e1:4b:77:72:18:33:05:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:CA:8D:7E:F0:B3:40:C7:91:84:2B:82:24:CA:2D:0B:5C:87:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32512F9EC40811EF9AE4BEB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fa:20:55:75:1d:5d:df:4e:89:90:3b:f8:9f:00:a9:99:6d:
a2:0e:53:2e:6f:a1:33:d1:d3:cd:fc:45:8a:d6:1e:db:29:fa:
34:8e:57:db:3b:45:ed:df:e6:6c:db:3a:ff:a3:c3:cf:ee:57:
ff:a6:17:f7:65:35:87:48:b7:f9:09:f9:14:93:65:6a:c7:88:
2f:8b:44:14:e3:ba:0b:0d:aa:00:9b:bb:6b:12:3e:b8:1e:2d:
04:ef:d1:d3:a2:76:34:a9:3b:a1:4b:fc:fb:9e:71:61:ad:2e:
c0:b7:c1:80:05:26:b3:d0:2d:cb:89:45:04:82:b3:3d:19:45:
a7:10:78:25:66:fa:ee:80:86:9a:59:54:53:26:d5:eb:ed:98:
82:4e:66:3a:9c:0e:62:e9:8f:ce:1f:c4:54:72:b1:69:77:de:
0c:68:20:d9:26:f7:60:14:54:10:d2:ad:dc:67:f7:24:f3:b5:
b8:11:4c:a3:b7:b6:89:4c:4b:4f:3d:2d:4a:36:54:1c:71:90:
2e:00:d7:98:56:4b:22:85:45:2a:6b:2a:cb:bd:b0:ee:39:19:
82:27:58:78:8e:86:00:90:de:6e:4a:3d:c5:e7:ac:43:cb:45:
b4:0d:33:fd:91:e3:7a:08:72:26:4e:7d:62:64:3c:12:9c:00:
71:08:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:19 2025 by rpki-client