Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82509E08C27811EFA7049045762E951A.roa
File: 82509E08C27811EFA7049045762E951A.roa (raw, json)
Hash identifier: sh5hc9+Pnl0/oOvzhSXkx2wiaoR5eAIJosNRLpuYJYg=
Subject key identifier: CA:16:74:95:DE:6E:6D:96:F7:8A:FE:AA:62:54:83:13:36:39:27:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82509E08C27811EFA7049045762E951A.roa
Signing time: Wed 25 Dec 2024 04:27:11 +0000
ROA not before: Wed 25 Dec 2024 04:27:08 +0000
ROA not after: Wed 10 Dec 2025 04:27:08 +0000
asID: 984
IP address blocks: 154.211.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74934 (0x124b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:27:08 2024 GMT
Not After : Dec 10 04:27:08 2025 GMT
Subject: CN=676b899f-e446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:a9:8f:1c:73:63:75:93:e9:68:56:3a:83:
02:33:7e:64:eb:60:38:01:74:7b:e7:6e:24:35:03:
36:4c:dd:d2:3f:2c:80:a3:12:85:65:86:9d:56:8b:
e4:79:9c:fc:23:58:0e:80:c6:a2:f7:d3:67:bb:b1:
84:83:d1:e8:97:05:b2:6e:67:d0:7a:69:7f:12:1a:
b6:42:df:fb:b5:30:83:49:e1:67:de:b9:3f:0a:a4:
56:3c:c5:a5:a7:f0:9d:0d:a9:dc:23:d3:a0:e6:57:
e4:67:8e:52:9b:88:f7:be:5f:c5:38:8f:43:59:5a:
76:60:7b:9c:94:3b:f9:58:08:8e:77:14:a9:a8:be:
1e:34:eb:8d:31:1a:b7:6d:58:69:21:8d:f1:61:92:
d5:2b:89:a0:b5:78:50:c0:98:c5:e7:ac:8d:25:09:
17:1f:6f:db:e2:dd:86:f7:91:45:58:4a:13:f9:d6:
06:3f:94:ff:00:38:55:71:8f:e6:6a:34:51:04:06:
02:d8:6f:e1:59:8e:0f:89:23:37:f8:0e:b0:56:4a:
a4:f5:85:c0:4e:68:07:10:da:a4:82:5d:13:4a:5b:
b2:5d:65:67:a3:74:46:27:90:3b:b2:eb:83:7c:ac:
d4:dd:a7:4a:e5:f9:cb:b6:41:1d:3e:ac:18:4d:e4:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:74:95:DE:6E:6D:96:F7:8A:FE:AA:62:54:83:13:36:39:27:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82509E08C27811EFA7049045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b7:e7:9d:a2:7e:95:02:a9:db:fb:21:43:5a:26:f2:e5:d9:
18:58:91:c8:1e:89:39:78:5d:49:38:b9:aa:48:eb:c0:a9:b8:
62:8c:04:23:18:f9:72:ed:dd:28:8b:a3:f3:c1:d1:e4:e0:16:
30:4a:ed:4b:2d:1c:44:1b:fc:cd:be:6a:f3:47:61:2f:10:62:
8e:38:04:df:01:a8:a4:ed:4b:1c:f8:9f:5a:86:dd:c7:58:0b:
c8:58:89:21:2b:e4:20:6a:00:e1:ec:e4:16:89:a7:76:61:b9:
6f:e1:a9:c6:cb:48:11:8c:e3:bc:b7:c5:8b:78:ab:60:de:f1:
fb:8b:75:a2:4b:68:3f:82:1b:71:b5:1c:ee:42:18:de:59:a7:
95:e1:7a:e1:28:f8:e4:20:49:ce:fd:0f:3e:2e:af:be:cd:8b:
61:49:c8:1d:6f:dc:b9:2f:c9:3c:bf:2c:c7:10:dc:0c:74:63:
57:0f:68:bb:05:1e:0b:d6:f1:39:c5:63:f5:41:02:fc:da:42:
40:05:23:57:3f:63:9b:1f:ae:d6:8e:65:99:bd:8e:bd:07:9b:
4b:fd:f8:a5:07:31:1d:21:31:08:c3:1b:c4:d7:66:f0:25:a2:
00:80:ef:ee:93:f6:84:8b:30:fd:99:75:90:52:2b:83:3b:20:
92:60:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:50 2025 by rpki-client