Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1704CEC34C11EFB0500C83762E951A.roa
File: 5B1704CEC34C11EFB0500C83762E951A.roa (raw, json)
Hash identifier: U0+yGSsidocgudJ23kC5eRk+jOmWYTgk/RxENlbD2Ok=
Subject key identifier: 66:FF:08:E2:A6:C8:58:EE:23:7F:97:CD:95:3A:9B:69:72:4C:87:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01257B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1704CEC34C11EFB0500C83762E951A.roa
Signing time: Thu 26 Dec 2024 05:43:39 +0000
ROA not before: Thu 26 Dec 2024 05:43:34 +0000
ROA not after: Thu 11 Dec 2025 05:43:34 +0000
asID: 984
IP address blocks: 154.211.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75131 (0x1257b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:43:34 2024 GMT
Not After : Dec 11 05:43:34 2025 GMT
Subject: CN=676ced0a-13db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:fb:81:b5:ec:92:cf:0e:94:ed:89:ba:f4:
b0:30:d2:9d:9f:86:00:58:93:d1:38:13:7d:19:b3:
be:74:eb:a3:5e:43:fb:bd:16:15:29:40:9c:2e:70:
d6:ba:fe:9c:bf:e8:c2:8a:27:60:67:03:79:55:92:
44:10:12:38:31:17:95:d5:68:20:e0:22:e1:8a:e2:
96:ad:81:43:66:0d:f4:35:90:9c:20:a6:c5:a2:57:
ec:77:d4:61:6b:77:e7:8d:94:b6:9d:3e:b3:4f:43:
4e:f8:ea:a4:a7:87:6b:9f:38:41:0c:19:e1:80:49:
ed:87:fc:48:fb:65:30:64:5b:97:86:06:d6:fd:2d:
45:a8:7b:8d:14:85:94:f5:03:4e:4f:87:db:36:c9:
c7:7c:4b:35:63:ad:db:07:8e:c1:40:f0:71:c7:cc:
24:9c:47:df:2d:fa:ed:88:33:01:47:e3:cc:8d:87:
4e:ad:14:54:c8:9f:00:54:d4:14:f4:5c:11:4c:cd:
9e:03:63:6c:70:4d:d6:f5:ca:ac:13:a4:85:79:36:
49:7d:ab:70:5b:2e:21:86:5c:9f:0a:c0:ab:4e:7f:
79:4b:a8:18:b7:92:7d:8f:6c:e3:f4:52:a7:3b:af:
12:32:eb:a6:d4:d2:82:ee:dc:62:5f:4d:44:da:00:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FF:08:E2:A6:C8:58:EE:23:7F:97:CD:95:3A:9B:69:72:4C:87:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1704CEC34C11EFB0500C83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.212.0/24
Signature Algorithm: sha256WithRSAEncryption
05:90:9e:ab:85:58:f4:64:86:51:d8:3c:49:e0:f8:f8:34:82:
34:32:70:e3:a2:7a:1f:d0:60:5a:c4:20:27:02:a1:ba:b4:f5:
fd:26:d4:af:e1:d1:df:6b:95:2b:30:51:71:d2:19:80:6a:2c:
96:88:44:e1:e3:ca:d4:f6:09:ac:ad:e3:1c:5a:04:77:1e:bf:
58:c4:cc:af:b2:74:9f:7e:37:54:a8:02:70:b6:d0:75:c6:78:
aa:08:d9:9a:35:df:6f:47:8c:4c:ee:37:e7:40:5d:c4:f3:fc:
ec:b7:b9:17:4e:35:41:b9:ff:c4:3a:8d:a0:57:31:5e:32:47:
c7:6a:f7:2e:75:ea:11:1b:42:62:2f:85:e4:16:8c:d9:08:22:
14:b6:92:c1:35:a6:5b:c5:17:77:fb:cb:46:94:d1:db:96:f8:
9f:d1:72:ef:a4:40:27:ac:23:89:7a:f4:68:16:49:2a:18:61:
dc:9c:11:27:c5:2f:e0:c9:50:3a:3e:7f:08:2e:47:10:68:ab:
67:60:ee:1b:52:6d:d9:82:a0:d6:2f:27:91:23:65:b1:fb:0e:
34:e6:e7:15:15:b8:be:51:41:4a:0b:11:86:29:35:6b:fd:8d:
24:cd:41:c3:09:12:33:b8:a7:42:98:56:0a:d1:bf:75:11:b4:
16:f0:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:15 2025 by rpki-client