Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA8254C26911EF8D55EB5F762E951A.roa
File: 48FA8254C26911EF8D55EB5F762E951A.roa (raw, json)
Hash identifier: kvpFIqJgEEOcnK2a80tJGN4XrpVT6KwUzQ5pyHC3yo8=
Subject key identifier: E3:38:0B:8E:33:B7:CD:75:32:87:37:6E:DF:31:4C:54:96:6C:E8:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01240E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA8254C26911EF8D55EB5F762E951A.roa
Signing time: Wed 25 Dec 2024 02:38:12 +0000
ROA not before: Wed 25 Dec 2024 02:38:09 +0000
ROA not after: Wed 10 Dec 2025 02:38:09 +0000
asID: 984
IP address blocks: 154.211.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74766 (0x1240e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:38:09 2024 GMT
Not After : Dec 10 02:38:09 2025 GMT
Subject: CN=676b7014-b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f6:08:ed:29:5f:04:e2:8d:de:63:25:15:45:
c4:5a:31:9f:a7:1b:58:01:0e:89:d1:be:dc:58:05:
f2:96:3d:de:87:e4:95:b9:18:62:1a:94:84:8c:01:
b4:77:c1:64:b6:a7:1e:8b:49:28:8c:26:f6:3b:fa:
2d:6f:63:a4:39:49:be:18:cf:3a:2f:ae:05:b9:01:
a9:14:1c:75:b9:4d:fa:aa:d2:b1:51:e0:d1:a8:62:
7b:8c:a4:d0:bd:77:50:94:59:3d:32:fe:3b:bc:e8:
31:2c:5c:df:ca:7e:6a:b6:2b:1a:7f:b5:da:fc:0e:
ef:ee:35:ea:a3:04:ec:6a:54:5b:4d:da:01:2c:a4:
51:2e:17:e8:d4:74:03:0e:13:05:ff:66:9b:1c:30:
bf:fe:5e:ab:8d:43:4f:c7:db:da:2e:01:3a:be:c2:
b9:0e:a1:50:93:c7:5f:1e:84:0d:a7:9c:cd:57:15:
ca:fe:90:9d:74:f9:34:75:3e:e4:15:31:1d:69:87:
6c:f1:e9:ce:f9:f4:83:8d:2d:e0:d4:b6:87:0f:7c:
eb:c8:d6:ea:66:90:5d:f9:06:bd:f3:8e:d0:5c:10:
45:b8:64:ae:74:c0:08:b8:b3:d1:a2:17:59:1b:3b:
6d:ab:8a:4e:b8:85:b4:3a:bf:9f:9d:47:f5:ff:13:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:0B:8E:33:B7:CD:75:32:87:37:6E:DF:31:4C:54:96:6C:E8:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA8254C26911EF8D55EB5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.147.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:50:95:7e:63:cb:27:8d:35:ca:2a:fa:dc:fa:3a:b0:81:
e8:5c:a2:81:46:89:c1:de:84:21:e9:50:1c:47:24:f3:f5:b6:
8c:58:82:86:cf:be:66:d6:35:a3:e5:5a:db:75:74:f5:97:08:
1d:d3:56:c1:d5:a9:13:bd:63:ab:09:fc:05:12:c5:52:96:75:
87:f8:d1:af:0b:d2:ed:23:ad:e8:c3:63:48:8d:78:a2:1a:dd:
86:3f:e8:0f:58:ee:3f:07:98:e3:9f:7b:66:28:f1:84:51:98:
82:53:d5:f0:27:3b:8b:41:8b:02:48:03:82:21:62:7b:a2:ec:
9d:b5:e1:25:6b:bb:90:45:cb:34:be:79:36:06:e6:cd:26:93:
12:a8:24:4b:08:97:61:8f:4e:c7:80:ef:80:78:86:fc:21:db:
ea:63:9d:c1:f3:81:da:cd:52:15:c1:83:b6:e4:f9:44:22:0c:
a4:6b:73:1d:6e:3d:d5:48:3b:43:d4:40:12:2f:e9:bf:aa:f7:
32:b7:c0:12:be:4b:d7:1c:7f:fd:64:34:6c:03:62:e6:48:8e:
f5:12:50:cc:c6:b3:96:39:f0:94:37:32:f5:5f:d9:a1:d4:d6:
c8:22:29:11:d2:6c:12:22:74:d4:a9:1e:6a:07:f8:a9:f6:00:
38:e8:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:13 2025 by rpki-client