Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491EE5E4C0CB11EFA7E00683762E951A.roa
File: 491EE5E4C0CB11EFA7E00683762E951A.roa (raw, json)
Hash identifier: zYiLjUW1f853Pm6lb1wg1kceZkSPxqD48MfAbYx8b4w=
Subject key identifier: 85:5C:BC:35:A6:36:8D:C9:99:57:22:8C:9D:5A:C1:83:11:A7:9A:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491EE5E4C0CB11EFA7E00683762E951A.roa
Signing time: Mon 23 Dec 2024 01:14:41 +0000
ROA not before: Mon 23 Dec 2024 01:14:37 +0000
ROA not after: Wed 10 Dec 2025 01:14:37 +0000
asID: 984
IP address blocks: 154.82.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73212 (0x11dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:14:37 2024 GMT
Not After : Dec 10 01:14:37 2025 GMT
Subject: CN=6768b981-0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:25:5d:bd:35:26:68:84:6e:63:de:12:48:
c3:d6:7b:28:d3:c9:f3:02:4a:a4:4b:69:f5:16:98:
7f:71:b7:fd:b0:b7:a2:cc:d9:71:8b:8b:a4:48:a2:
bc:02:4f:fa:2d:cb:d2:d6:70:7d:f9:11:8b:16:5f:
a6:2d:e1:29:09:fe:80:41:90:4e:76:ea:93:fc:36:
f8:c1:1f:47:2b:d8:fa:d5:27:67:dd:52:4a:50:8c:
9b:9a:da:b6:b8:c0:b9:94:9c:b5:9d:a8:e1:a7:b2:
ef:38:79:24:d5:8b:8c:38:0c:55:7d:8c:63:34:cc:
7f:a8:53:78:40:9b:23:10:12:5d:de:40:f1:7a:8a:
6a:d9:b5:09:9e:f6:5a:26:61:03:85:94:c9:30:13:
20:1e:ab:be:cf:9f:0a:0f:0a:10:6d:4c:23:4d:2c:
4e:6a:81:a3:f0:34:cb:19:9f:33:f7:0e:26:29:bd:
c5:cc:14:31:8b:39:cd:cd:98:90:38:6a:cc:7a:49:
0b:5e:b5:60:89:e9:4b:45:55:77:3d:27:dc:da:77:
7c:66:a1:c4:c6:01:60:ab:fd:62:94:1f:59:91:7b:
a0:82:97:d8:65:2e:bd:69:ac:49:d2:2e:e8:fc:30:
ea:5b:71:96:b9:05:30:7b:c6:60:6c:65:0b:fc:48:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:BC:35:A6:36:8D:C9:99:57:22:8C:9D:5A:C1:83:11:A7:9A:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491EE5E4C0CB11EFA7E00683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:70:d8:9d:3e:0d:34:2f:7e:df:a9:72:ae:c1:68:0b:51:3f:
16:8a:4b:4d:71:7e:46:36:e1:e6:9f:d9:1b:c5:6f:f1:d4:32:
ec:75:e9:be:1c:8c:9b:70:55:0d:9f:48:04:8a:78:81:1c:4e:
46:22:91:a1:ed:0d:ec:5d:85:c3:cb:9b:11:08:22:f6:be:66:
16:33:e7:2e:ce:a8:54:18:19:18:da:74:ac:b3:44:77:a7:ee:
0e:23:72:9d:b7:8c:d1:d4:7c:f5:ba:94:d6:b3:71:76:24:b4:
3a:7f:b8:ac:dc:df:10:9b:21:75:06:fe:df:07:54:aa:b4:ab:
c1:de:a2:63:ee:71:c4:05:09:e4:03:d3:9c:93:4f:4a:09:8a:
14:e5:7a:46:c0:4f:f1:c0:b7:be:58:b6:cd:1c:54:fe:27:82:
6b:54:b0:c3:a5:4d:95:91:89:a9:b5:b4:a6:6d:d3:0a:66:89:
90:90:e1:9f:0c:50:cb:cf:c0:e6:10:b6:fc:49:95:1a:e8:f9:
f4:55:aa:0c:20:13:27:f9:58:f6:6d:b4:25:61:fa:2f:21:47:
2a:b2:3b:f8:d7:c2:77:f1:64:9e:b2:f9:98:35:08:29:c2:0f:
76:fc:c5:f3:f9:6f:eb:be:95:e1:e7:30:4d:69:69:33:3d:cf:
1a:b9:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:10 2025 by rpki-client