Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65F5456CC27111EFB772CE97762E951A.roa
File: 65F5456CC27111EFB772CE97762E951A.roa (raw, json)
Hash identifier: q75k9yuKh2DR0J0Ds+WdYlFQTyLSuRNvtqwqkKQ75E8=
Subject key identifier: 0E:F5:AB:8C:90:06:C6:CB:D6:C7:B2:73:D6:1B:8E:31:2B:32:6F:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65F5456CC27111EFB772CE97762E951A.roa
Signing time: Wed 25 Dec 2024 03:36:17 +0000
ROA not before: Wed 25 Dec 2024 03:36:13 +0000
ROA not after: Wed 10 Dec 2025 03:36:13 +0000
asID: 984
IP address blocks: 154.211.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74856 (0x12468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:36:13 2024 GMT
Not After : Dec 10 03:36:13 2025 GMT
Subject: CN=676b7db1-7800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:32:b2:99:96:32:9d:8b:3b:d2:bd:31:4f:
a0:78:6e:48:c1:a3:fb:04:79:15:62:63:5f:10:25:
d4:53:fc:d6:3f:9a:86:52:80:59:15:a8:aa:df:e3:
20:c8:85:b3:58:59:8d:7a:6a:ec:cc:e9:59:8d:a4:
d2:cf:bb:6e:eb:14:f4:51:47:b9:73:dc:5e:b6:82:
d5:b6:b2:09:f3:66:50:15:ad:34:cb:d6:2c:5d:72:
ea:79:56:84:29:3e:f8:3f:f6:93:f4:37:3d:da:01:
42:ea:12:97:90:bf:cc:37:8b:2d:b6:db:b5:bf:83:
6d:d4:ee:21:e7:ed:6d:bf:a8:c4:56:65:9f:40:1d:
6d:dc:a6:62:2d:4e:79:ab:f7:f9:75:30:41:c6:00:
6d:fa:a3:3a:e1:27:83:b1:da:7e:99:77:b5:ae:dc:
9d:87:9c:41:c3:68:1d:ed:f0:ce:52:a3:91:79:db:
d9:dd:81:79:52:9d:fd:8e:7f:84:14:c1:3e:da:7d:
90:4c:43:5a:f8:2b:26:e3:02:a5:b1:aa:da:fb:1a:
7a:65:95:fe:ac:da:8a:f8:6b:a8:0a:eb:d5:f4:72:
70:7e:e7:9e:6d:7d:ea:a3:7f:05:0c:ae:a9:3b:ba:
cc:cb:2c:fb:aa:7a:6a:0b:5a:df:d4:2e:c7:6b:6d:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:AB:8C:90:06:C6:CB:D6:C7:B2:73:D6:1B:8E:31:2B:32:6F:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65F5456CC27111EFB772CE97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d9:33:a7:be:1c:ff:c3:e1:66:70:e5:2d:dc:db:ab:5e:28:
7b:d2:c8:22:d5:3b:fe:27:4d:f2:c6:a7:f5:3c:e0:d8:a1:cc:
1a:11:0e:22:a3:01:e8:90:ad:40:93:29:8a:5c:d0:3f:70:b1:
06:3d:a5:7b:a5:3b:64:06:a7:64:68:f7:33:cd:41:16:9c:8a:
b7:08:7a:15:71:4a:ee:f5:c6:cd:bc:0d:67:52:cc:4e:d1:3a:
86:be:9c:3b:75:b1:4b:63:6a:67:93:81:43:ef:7b:fc:73:95:
bb:6c:fe:3b:8e:60:11:f9:fc:06:74:cb:14:31:19:c2:ea:53:
ec:e2:ce:49:d1:ad:f2:88:5f:c7:b9:58:5c:42:b4:4d:ba:c7:
3c:dd:43:f3:ea:26:b0:be:e1:0e:48:c5:47:4e:be:0a:4b:a4:
fc:b6:1a:8d:a3:8a:01:55:0c:5b:5e:3d:ce:e3:fa:d0:69:26:
a2:b5:53:36:2b:42:62:2c:2f:22:c7:ac:a1:55:9f:97:ed:d8:
ac:68:0f:9b:d1:9c:9f:36:5c:74:a1:81:db:a9:16:fb:87:d6:
f2:05:37:1d:fc:f4:d9:74:45:92:ef:db:94:cc:1e:19:c6:85:
11:78:83:d1:6a:fe:b5:f0:cf:0d:a1:e2:04:bc:e7:b1:72:c7:
df:73:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:47:44 2025 by rpki-client