Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F402584C27211EF9A98529C762E951A.roa
File: 4F402584C27211EF9A98529C762E951A.roa (raw, json)
Hash identifier: BCmR2swlfyO8F+2aoTnP/CHBdqQ8Dmh7ZYwPopSbWOw=
Subject key identifier: A7:88:CA:BD:55:77:47:D0:44:88:55:71:B4:B5:03:F5:65:37:49:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F402584C27211EF9A98529C762E951A.roa
Signing time: Wed 25 Dec 2024 03:42:48 +0000
ROA not before: Wed 25 Dec 2024 03:42:45 +0000
ROA not after: Wed 10 Dec 2025 03:42:45 +0000
asID: 984
IP address blocks: 154.211.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74866 (0x12472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:42:45 2024 GMT
Not After : Dec 10 03:42:45 2025 GMT
Subject: CN=676b7f38-269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:4f:ab:0d:83:7e:4d:6e:74:4a:56:0b:c6:
35:d9:e7:37:43:c5:37:04:f9:a9:52:d6:24:ca:d6:
70:cc:a0:f8:b5:c5:72:dd:1a:7d:ac:bc:33:a5:72:
ed:08:ae:90:7f:ff:be:3e:30:52:f1:c9:a6:60:0f:
2d:34:73:99:93:de:f2:b1:c5:1e:fc:6f:9d:d5:f0:
7a:a5:87:82:59:af:53:7c:f8:90:51:0b:5b:83:8c:
f4:1a:c2:ac:3b:55:83:fc:b4:cf:50:18:7f:f5:52:
f3:52:c3:ac:fa:af:ce:a9:a3:df:31:74:e3:c3:4d:
e6:b5:4a:18:23:ca:28:20:a5:ea:e0:d9:45:b4:d1:
85:a1:b2:d6:1c:9a:42:d3:ac:90:c4:d6:a7:7c:04:
d7:ec:46:a3:ad:04:99:21:d6:dc:7d:4e:e2:8c:ac:
21:0d:b5:80:d6:c8:fb:f5:6d:f2:f6:84:7e:28:4a:
44:ca:0e:74:90:e4:12:71:16:83:f1:95:2a:1b:f4:
be:6d:d4:cd:60:07:64:96:93:f9:30:bc:f2:91:a3:
c1:75:fe:24:1f:01:88:b6:b8:08:19:06:d6:0b:47:
e3:ab:1b:99:d0:bf:88:c9:e1:69:1d:82:31:62:ba:
38:a3:f5:1f:29:b9:35:f3:fb:c9:52:10:f7:02:e4:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:CA:BD:55:77:47:D0:44:88:55:71:B4:B5:03:F5:65:37:49:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F402584C27211EF9A98529C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.208.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b7:61:11:1a:a8:6b:f8:7b:a9:80:07:b2:0c:7e:6f:c0:8a:
01:4d:81:5f:cc:41:ac:5f:02:40:d0:64:7c:24:38:7d:69:87:
af:5e:fc:34:5c:04:37:4e:0d:f2:19:07:b7:5d:19:a5:93:04:
0c:2e:93:54:aa:c5:fb:a0:da:cf:0f:67:30:b5:86:a6:07:57:
f8:2a:48:7f:e3:3b:18:ad:70:22:5d:60:c5:84:72:35:fb:17:
a2:34:49:ed:4e:2f:90:48:2f:cf:58:41:b7:82:23:cd:8f:f4:
69:75:e9:62:28:a7:e1:db:c9:01:74:0a:6d:cd:af:da:2f:9b:
a4:04:ff:66:35:d1:4a:11:e9:4a:10:65:97:6f:b7:d5:84:cf:
09:e4:98:a2:5a:72:a5:59:1b:08:af:39:93:db:15:44:d5:04:
d3:7d:b9:4a:35:f2:e2:0b:59:86:30:85:a9:a6:0e:92:b8:57:
d0:1d:83:a2:c6:07:16:d9:f0:b6:7b:ab:6a:07:f7:11:32:56:
47:53:5b:e0:07:25:fa:17:61:52:97:da:f9:c0:67:30:d1:29:
f0:b1:8e:c2:a4:82:de:80:05:31:47:2b:9d:c8:b8:a7:cf:b1:
05:86:72:a4:e8:ff:f4:a8:20:6f:77:26:4c:cc:bf:58:c7:da:
fd:27:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:24 2025 by rpki-client