Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEA0CFAC26A11EFB424B167762E951A.roa
File: 5EEA0CFAC26A11EFB424B167762E951A.roa (raw, json)
Hash identifier: l7bu8WO5v0rhhtcRs7J6/8FiGm+355Bsnx9EyBqfttA=
Subject key identifier: B9:D6:88:F4:2E:3F:FE:C5:92:48:9E:FB:EC:0A:0E:54:58:70:F3:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01241A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEA0CFAC26A11EFB424B167762E951A.roa
Signing time: Wed 25 Dec 2024 02:45:59 +0000
ROA not before: Wed 25 Dec 2024 02:45:55 +0000
ROA not after: Wed 10 Dec 2025 02:45:55 +0000
asID: 984
IP address blocks: 154.211.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74778 (0x1241a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:45:55 2024 GMT
Not After : Dec 10 02:45:55 2025 GMT
Subject: CN=676b71e7-8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:49:ec:5e:4f:c3:fc:bd:95:80:74:c9:9e:
3a:85:91:a9:3c:a0:6e:b2:27:fe:29:df:c7:94:4b:
62:26:bc:a8:fd:20:91:27:42:eb:b0:1d:03:b9:ae:
19:7b:44:d5:3f:15:65:eb:0d:b3:3c:22:1d:87:dd:
08:80:74:1a:b4:5e:b5:ab:71:1b:85:f2:8e:26:e5:
85:90:4f:9a:1e:e1:bf:c4:f7:23:75:56:f5:f0:cb:
30:a3:f7:9d:9c:e5:0d:dc:fa:0d:aa:4a:e0:ef:33:
4e:27:cd:1d:0f:e6:bc:2e:4a:dd:40:2c:7d:ce:54:
8d:a6:7a:d8:cb:1e:7f:ac:63:16:71:70:92:ba:81:
96:1c:ff:eb:43:40:da:2f:92:6c:b9:7c:21:ed:4b:
79:88:7c:8c:ca:62:23:cc:38:1e:c5:94:78:ee:1e:
9d:36:11:1a:83:04:21:f6:56:d2:fd:f4:a8:23:c0:
1b:40:2f:0e:cf:d0:29:f0:95:90:e2:39:5a:5e:98:
58:05:98:0a:43:37:7c:ef:de:df:df:da:1d:96:26:
d2:64:ca:35:ee:6d:d1:87:21:84:48:6a:41:84:5c:
d1:35:0e:42:fb:30:56:b6:61:fb:ea:f0:64:7b:56:
f1:b6:52:26:9d:e1:20:3d:6a:96:00:97:c7:4a:3d:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:88:F4:2E:3F:FE:C5:92:48:9E:FB:EC:0A:0E:54:58:70:F3:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEA0CFAC26A11EFB424B167762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.153.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b2:2e:3b:0c:64:77:c3:f0:8a:65:cf:f4:d8:c7:b5:3f:bb:
f5:c4:4b:90:95:3f:68:16:8d:14:6f:67:78:23:d1:38:84:31:
2c:fa:fa:30:cc:1b:85:4d:8a:31:17:f0:8b:66:52:7c:c8:b8:
ca:68:3d:7a:85:e4:9b:27:b5:25:d1:79:01:07:06:14:98:f2:
d9:0f:d3:16:f4:9f:ab:5d:92:25:62:c3:de:15:e5:35:ce:2c:
63:f1:87:10:62:b6:45:54:74:55:02:0f:fe:ce:64:89:f9:2e:
8a:9d:aa:fc:60:4d:7b:b6:7a:71:3c:65:e5:16:fd:da:f3:54:
a3:72:74:d2:03:ef:1f:85:51:4e:86:3f:dc:74:08:26:a1:9c:
90:ba:6a:0e:98:df:a9:08:c1:c5:40:38:23:68:7e:9a:29:ff:
5c:06:68:ba:ac:fe:b5:b3:f6:30:00:a1:40:cb:b3:03:6a:9a:
d7:e4:f9:9f:32:7b:51:62:bb:6e:c7:c4:2e:3e:fc:46:6b:d0:
95:ad:e9:eb:88:9c:95:d7:4e:2c:d4:25:53:fc:86:cc:04:48:
41:0a:c8:66:f0:99:2f:69:e0:7f:b4:5a:ca:30:37:14:73:81:
2d:0c:9e:03:39:99:0e:01:12:1a:5d:a9:f1:ad:79:d6:89:c4:
ee:00:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:24 2025 by rpki-client