Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43270BC8C52411EF8065A2B5762E951A.roa
File: 43270BC8C52411EF8065A2B5762E951A.roa (raw, json)
Hash identifier: EvMhnmRQq/ulud6curXKUEFXibZeOCcIV9l/LHAqCqE=
Subject key identifier: E2:23:CE:41:0B:1B:42:04:F6:D3:CC:FC:7B:3D:1A:A0:FA:EA:2A:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43270BC8C52411EF8065A2B5762E951A.roa
Signing time: Sat 28 Dec 2024 14:01:41 +0000
ROA not before: Sat 28 Dec 2024 14:01:37 +0000
ROA not after: Sun 12 Dec 2027 14:01:37 +0000
asID: 17561
IP address blocks: 154.203.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76661 (0x12b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:01:37 2024 GMT
Not After : Dec 12 14:01:37 2027 GMT
Subject: CN=677004c5-2db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:d6:57:14:9b:ac:8f:48:1b:bf:dc:70:d0:
62:39:27:4c:63:a2:ee:e4:27:e9:b4:2c:21:79:ab:
eb:07:75:10:bd:6a:76:f4:25:42:6f:8d:8c:51:1a:
32:8b:66:90:ae:a7:89:2d:81:01:e9:a3:9d:d9:e0:
3f:34:e0:6a:72:14:03:81:1b:24:cc:87:f1:ed:d1:
a9:2a:1a:ba:22:f2:a0:35:9a:e4:3e:9c:b6:7b:f1:
37:8e:d4:81:2b:71:94:65:0a:32:14:a1:ce:14:be:
dc:de:7c:50:61:1d:95:43:26:76:03:f9:e9:64:34:
96:3d:e4:d9:c6:05:65:ca:9f:d4:7a:fe:c9:76:9d:
34:14:87:42:89:fd:b7:ff:90:17:ee:6f:3d:f2:d0:
6a:26:e8:0a:9d:33:06:a4:c2:d0:ce:64:8d:06:9d:
77:be:d1:35:95:53:ef:72:14:ec:3a:43:bc:ae:4f:
d3:03:13:a9:2d:c9:4f:2a:fb:bd:94:16:46:bb:01:
5f:cf:32:75:b5:25:94:cb:9b:7a:93:c6:fd:ad:e6:
ae:22:3b:4e:bf:0d:9e:1d:01:18:df:22:8a:6c:30:
ce:be:8e:d4:b6:44:09:99:8d:57:9e:cd:2c:67:66:
68:e4:01:6a:b5:b4:92:c0:31:52:8e:f4:a6:09:0d:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:CE:41:0B:1B:42:04:F6:D3:CC:FC:7B:3D:1A:A0:FA:EA:2A:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43270BC8C52411EF8065A2B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e3:aa:ec:8c:a9:2b:c1:01:9e:da:9e:58:96:b1:8c:0d:e0:
16:fe:35:ff:96:23:ab:49:99:aa:05:62:60:b7:27:58:6b:65:
16:b0:f7:a2:ff:7f:58:4b:c1:03:b1:1c:06:ee:58:05:46:f8:
d1:04:ff:9d:5b:30:9a:8d:7e:62:1b:fa:3d:a2:89:74:a0:11:
1b:cc:fa:cf:39:f0:f6:7b:d0:57:ea:5c:9b:1b:a3:23:3d:b8:
dd:aa:68:fa:6d:dc:be:5a:5d:08:02:04:a2:4c:7f:6b:6a:13:
a1:22:b0:2c:65:a6:1c:59:1d:e2:13:5e:7f:70:d2:9b:cc:ac:
43:1d:40:d6:55:0b:0f:fa:8e:31:3b:e9:0c:56:1b:42:65:c7:
da:90:62:f5:84:2b:bc:62:28:51:46:6d:51:a6:3c:e2:6c:74:
2a:14:57:eb:a4:91:ba:23:48:7c:cb:78:38:64:5a:c9:94:58:
f2:eb:b7:93:fd:38:a3:fa:d8:e6:89:52:0f:d6:a7:f8:66:f3:
50:d7:89:af:21:98:9b:6f:21:61:50:f3:fb:6a:9f:ff:4b:64:
7d:7c:e5:62:97:63:a8:f4:64:23:f6:c1:ba:84:5e:30:81:f3:
df:63:b6:9a:bf:72:69:d1:cd:8e:38:98:c8:91:c5:6a:e4:83:
26:a6:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:45 2025 by rpki-client