Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AAF336AC26511EF94C3F343762E951A.roa
File: 8AAF336AC26511EF94C3F343762E951A.roa (raw, json)
Hash identifier: ycFL0uTtGahvIfyWn0OrgjbWYoljvibz2sIu387BOYE=
Subject key identifier: 7F:8E:90:DC:E5:53:5B:AE:BF:8F:89:71:E4:15:7F:B6:35:5D:31:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AAF336AC26511EF94C3F343762E951A.roa
Signing time: Wed 25 Dec 2024 02:11:25 +0000
ROA not before: Wed 25 Dec 2024 02:11:21 +0000
ROA not after: Wed 10 Dec 2025 02:11:21 +0000
asID: 984
IP address blocks: 154.199.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74724 (0x123e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:11:21 2024 GMT
Not After : Dec 10 02:11:21 2025 GMT
Subject: CN=676b69cc-61d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:fa:75:38:db:69:7f:80:68:94:b7:33:55:
15:4b:b2:1d:8f:d6:3b:98:6c:66:23:0d:10:b5:a2:
34:4b:b6:fa:cb:c2:30:6d:4c:a3:a0:34:68:21:2c:
1c:0e:30:05:34:75:39:2b:c8:95:62:3d:0b:6a:39:
05:d1:84:29:15:04:78:25:26:7c:68:ca:fd:30:9a:
65:ee:77:82:af:7e:8d:a8:14:2b:0c:09:93:56:7a:
8f:aa:9c:b7:a0:76:25:c7:57:63:41:80:de:58:8e:
3b:69:ee:39:4e:a4:08:f5:bc:27:b6:f0:c0:a6:b8:
4c:b4:07:9e:38:d6:e5:70:f4:11:f5:4f:63:40:b4:
55:78:f8:04:af:f5:6e:27:19:65:56:8a:17:84:53:
8a:01:c0:d0:d7:dd:5e:2d:24:80:97:23:d6:d6:39:
7f:57:ae:9d:61:54:38:05:62:e3:ea:4c:0b:7e:23:
e8:93:74:54:50:39:93:fb:e1:13:36:ec:b2:cf:e6:
7a:25:35:03:20:bc:70:e9:e5:86:43:84:af:c0:fc:
3f:36:4f:f5:22:83:4e:fa:d2:09:88:85:8a:00:a4:
99:ee:3f:93:e9:61:7f:1f:42:fe:b8:a0:96:8c:91:
5a:f5:c0:6c:aa:98:78:6f:14:bb:70:67:38:16:48:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:90:DC:E5:53:5B:AE:BF:8F:89:71:E4:15:7F:B6:35:5D:31:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AAF336AC26511EF94C3F343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ca:c6:1b:7b:83:cd:27:e4:f1:1e:b9:9e:45:28:8b:b8:f7:
ff:0b:b2:1e:56:08:ef:10:93:66:f4:b8:11:cf:9f:fe:d5:c3:
89:db:5b:c1:cf:2a:85:06:21:74:68:fb:43:be:26:e0:e9:88:
65:77:6f:2d:4c:c0:97:cd:77:00:ed:02:c8:dd:0b:e1:19:e9:
c1:b4:2d:8c:61:5f:14:b0:67:12:9f:aa:cf:52:d2:85:c4:02:
db:6b:c0:d4:50:ed:4f:4c:32:db:0c:b6:b8:d8:82:b2:6a:67:
12:40:af:06:ee:f1:a4:b6:c3:81:84:05:c4:93:90:12:76:db:
a4:23:9e:db:e6:b4:3d:64:76:aa:f6:05:34:73:de:d2:c1:38:
ad:d0:eb:96:2d:69:05:48:4a:aa:88:9c:6b:a6:65:19:85:2a:
98:43:de:92:a7:e4:ad:13:7c:87:52:a9:bb:61:e7:b2:cb:a7:
9c:ed:87:a0:df:3b:15:22:9f:88:98:46:88:3b:c5:53:0f:2c:
a3:45:c9:b7:13:7b:e5:51:00:76:b3:e7:ba:81:40:e0:82:b5:
90:12:ed:5c:69:51:09:d0:82:af:ec:29:26:f9:58:00:2a:9b:
f4:4c:ac:4b:64:c1:bb:8d:26:ae:2a:94:6d:ac:08:61:8c:81:
9c:91:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client