Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898DAEB6C34C11EF9E8FE684762E951A.roa
File: 898DAEB6C34C11EF9E8FE684762E951A.roa (raw, json)
Hash identifier: /Bv0yJMJmpXJPxjnky0NafOoG+56PC9pBH3+s61dpCc=
Subject key identifier: 39:43:54:3F:2C:66:96:9A:5E:9F:1F:3E:AE:3F:5D:DC:30:64:A8:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01257D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898DAEB6C34C11EF9E8FE684762E951A.roa
Signing time: Thu 26 Dec 2024 05:44:56 +0000
ROA not before: Thu 26 Dec 2024 05:44:53 +0000
ROA not after: Thu 11 Dec 2025 05:44:53 +0000
asID: 984
IP address blocks: 154.211.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75133 (0x1257d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:44:53 2024 GMT
Not After : Dec 11 05:44:53 2025 GMT
Subject: CN=676ced58-4f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:bb:f0:19:98:04:c8:72:58:4e:af:21:9b:
e1:0b:4b:25:33:a8:be:9c:95:da:78:90:8b:2c:f8:
a4:1c:3b:69:ff:67:0c:58:45:50:32:1b:78:42:d1:
45:08:92:86:ad:91:6c:66:e3:8f:3b:1a:93:f0:da:
37:b2:42:19:d7:6f:f4:b1:1e:98:70:0f:91:11:0c:
0d:86:83:4c:47:e8:77:19:1e:b5:0c:d3:b2:1b:9e:
ce:90:70:38:7f:13:e4:42:7b:49:e5:ce:b4:0e:b8:
bd:da:5a:bb:80:cb:7f:04:31:68:c7:56:c5:7b:16:
31:59:a4:5d:09:fd:23:f5:fc:c2:b7:87:c8:35:27:
b0:5c:93:28:d2:b9:a4:0d:55:12:f2:d8:d0:ed:f9:
c0:ee:b8:d6:11:5f:85:15:4a:fb:96:dd:8b:3f:ee:
43:87:c6:fc:4f:7b:3c:5a:6a:1d:7b:75:4e:f5:1b:
2d:54:1d:62:ec:f6:d0:89:b9:ee:60:e6:81:3b:ce:
e5:1b:b1:11:f1:7c:99:d3:0b:a0:ec:53:68:ba:32:
08:78:4c:42:58:58:5f:0c:c1:11:68:50:ba:4b:ce:
07:47:9a:06:ce:74:9c:e3:b0:ca:b4:9c:fa:28:8b:
86:29:0f:8a:32:7a:2e:29:7b:54:eb:8a:bb:87:db:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:54:3F:2C:66:96:9A:5E:9F:1F:3E:AE:3F:5D:DC:30:64:A8:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898DAEB6C34C11EF9E8FE684762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.213.0/24
Signature Algorithm: sha256WithRSAEncryption
34:96:d7:6b:1d:98:d4:28:7c:4a:94:62:ae:f5:9d:32:08:42:
0a:a0:2d:75:e4:7c:9f:61:eb:23:5f:be:0c:53:dc:02:36:a7:
0f:ad:8c:f4:ea:65:8e:5f:4b:5d:7f:1f:45:40:92:d8:d2:fa:
94:12:5a:f9:12:6c:fa:d3:96:d4:06:ea:16:db:c4:61:3a:4d:
bb:39:a0:36:a7:0f:6d:24:27:73:a5:37:a0:71:ed:3a:31:f6:
e5:26:30:09:50:64:7d:8e:8e:d8:63:a3:76:c5:a2:40:27:75:
8d:84:85:19:97:e3:65:4f:57:7a:46:4b:c0:28:98:61:ba:5a:
f0:c5:d5:6b:d7:3a:c3:66:5e:8c:71:d8:fc:60:38:6d:63:89:
07:92:8b:69:6e:a3:33:cd:7d:48:e4:68:90:83:68:12:fc:0b:
d2:c3:61:5b:f0:b3:74:6b:72:40:9d:40:eb:78:54:20:e0:2d:
f1:b0:65:1a:67:ce:c7:5a:6e:9c:f3:bd:84:8f:80:3b:60:d6:
30:31:f5:28:09:d4:44:66:d9:d7:b3:43:84:06:65:d4:ca:13:
c9:2b:52:6e:0f:bc:b6:fe:01:b2:af:19:e4:31:5e:5a:f0:21:
f2:59:b3:a5:c8:7b:1b:09:2d:ca:8f:0f:1c:df:03:63:41:fd:
14:d9:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:38 2025 by rpki-client