Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0B9CA4C27611EF83EB0EB7762E951A.roa
File: 7F0B9CA4C27611EF83EB0EB7762E951A.roa (raw, json)
Hash identifier: NmUh9BanbJhPQXigAwE82+xzJbFzJBEyBbbDdTU0pIY=
Subject key identifier: 09:56:A7:28:29:2E:71:57:A8:68:27:DD:8D:6A:ED:8E:AC:C2:62:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0B9CA4C27611EF83EB0EB7762E951A.roa
Signing time: Wed 25 Dec 2024 04:12:47 +0000
ROA not before: Wed 25 Dec 2024 04:12:43 +0000
ROA not after: Wed 10 Dec 2025 04:12:43 +0000
asID: 984
IP address blocks: 154.211.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74912 (0x124a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:12:43 2024 GMT
Not After : Dec 10 04:12:43 2025 GMT
Subject: CN=676b863e-31ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:c9:8e:67:e2:f5:37:01:0b:d0:b9:44:c5:
c1:2a:39:97:c5:55:6f:b5:fa:40:36:c1:ee:b6:76:
79:ca:01:9f:e0:6d:79:ae:c2:c0:73:9a:54:20:a3:
7c:67:5b:52:49:1e:5d:55:49:00:bc:13:7c:93:f0:
e7:fe:59:2a:d0:48:1a:b1:06:db:d4:d5:50:ef:03:
28:67:a8:18:5b:05:fb:ce:e1:41:8c:db:df:b3:46:
32:a2:bd:02:23:12:df:1f:a7:40:5c:74:2d:92:75:
17:c1:a4:4e:26:a4:a7:63:7c:af:39:e6:cd:35:aa:
da:f0:45:8d:9b:fc:9a:75:0f:c2:84:9a:72:6a:05:
08:28:25:7a:63:06:c5:44:52:24:a7:7c:b4:a0:fc:
dc:03:f4:f2:f2:5f:25:eb:46:12:4a:70:9b:a1:6c:
53:e7:0f:4f:9f:9c:ff:1a:9a:b5:05:fc:a2:84:73:
47:3a:15:40:30:34:97:9d:8c:ba:1e:aa:d0:4f:1b:
4b:29:7c:9d:2d:86:62:0c:2a:9b:1e:51:66:94:6c:
c3:16:97:a2:bf:27:ed:e4:4f:b1:bb:b2:be:de:39:
e1:e5:c5:61:32:1c:e6:fb:1b:2e:67:20:0e:32:00:
c6:f7:03:a8:8b:d7:e3:95:bf:3a:f3:ef:9c:bd:2d:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:A7:28:29:2E:71:57:A8:68:27:DD:8D:6A:ED:8E:AC:C2:62:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0B9CA4C27611EF83EB0EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.237.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2f:45:04:94:32:ba:df:2d:90:78:29:05:b0:42:4e:32:c8:
91:1b:6f:5e:d4:7b:86:a4:b0:3e:da:1a:ca:0f:f1:25:5a:0e:
6c:6c:ab:6b:97:42:7c:34:c0:43:fb:7c:79:a7:64:f6:f0:e7:
6b:c3:67:04:fe:3f:81:98:6a:cd:33:c3:06:5e:f8:ca:b3:b4:
ec:ad:69:9e:4f:31:22:92:3a:26:f4:3c:71:e0:c4:06:84:dc:
e8:b4:be:1b:49:ce:0d:6d:c0:09:3c:e3:df:31:78:f7:33:9b:
98:0a:79:d8:40:f5:90:ef:88:93:e6:a9:bd:4a:c0:01:cb:be:
3c:f5:15:1b:87:6e:67:26:de:32:0b:ed:fe:ab:0a:66:fa:92:
2b:fa:96:75:12:d1:f1:1a:31:0c:75:76:e0:d5:9f:80:fd:92:
38:17:92:82:88:47:b0:34:13:d5:43:7d:d0:d6:1a:22:50:09:
2f:b3:0a:47:b7:f0:0e:f8:57:d7:1e:e3:21:e2:64:12:c3:e0:
b7:28:fe:03:15:87:13:21:df:2d:21:b0:c2:97:01:db:8e:ea:
f8:ac:2c:22:e5:78:a1:e1:6e:50:2b:a1:a9:90:df:cf:3a:85:
10:fd:54:26:b9:a3:98:3a:6f:10:dd:94:92:25:1f:40:69:04:
3c:74:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client