Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C22CCC0C26A11EF91912A68762E951A.roa
File: 8C22CCC0C26A11EF91912A68762E951A.roa (raw, json)
Hash identifier: RALW/fUOZAaKvIWi/l3MoBZuXJ7RBAs0Iu8BDaLAsqU=
Subject key identifier: 44:2D:58:FE:EE:85:50:CE:90:CB:27:CC:F1:73:ED:3D:6F:D2:A6:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01241C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C22CCC0C26A11EF91912A68762E951A.roa
Signing time: Wed 25 Dec 2024 02:47:15 +0000
ROA not before: Wed 25 Dec 2024 02:47:11 +0000
ROA not after: Wed 10 Dec 2025 02:47:11 +0000
asID: 984
IP address blocks: 154.211.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74780 (0x1241c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:47:11 2024 GMT
Not After : Dec 10 02:47:11 2025 GMT
Subject: CN=676b7232-ea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:a9:6f:9e:19:20:14:0d:2a:ef:6a:2f:b7:
e7:c8:4a:7b:82:85:51:17:db:7f:7c:ee:72:2e:4f:
f4:e2:21:ab:ae:83:d5:c6:eb:dd:5d:bd:d3:a5:1d:
5c:7f:d8:b2:fc:cc:03:0b:10:75:fe:0c:9c:a9:ef:
da:f8:cd:22:6a:e5:d5:c7:cd:de:de:c8:bf:91:a1:
64:bb:6c:cc:af:05:c2:1f:d7:b3:1c:30:88:c4:5f:
6b:1a:07:7e:fc:75:2d:e9:59:34:eb:07:6f:b5:ab:
a5:92:b5:97:5b:ce:6c:59:57:dd:eb:13:e2:1b:72:
8f:97:4a:90:e3:e6:de:93:3d:8a:f8:cc:ab:34:df:
97:0e:d5:5c:ad:34:bf:99:3d:b7:7f:78:a4:15:96:
7d:bb:4d:cb:cd:4b:35:da:5d:9c:8b:97:c6:c5:85:
5f:d3:8a:26:6f:e7:6a:e7:f3:13:88:97:8c:d4:a6:
b1:32:80:29:c0:4f:64:f7:db:29:1a:08:cd:b1:7c:
85:ff:62:1c:98:13:d3:32:24:3f:f0:76:e4:a9:c5:
99:a4:5a:ae:00:cb:45:4f:30:b0:98:b8:1c:fe:f6:
87:1f:45:1f:e2:93:7f:40:ba:e9:d3:e8:88:72:c5:
27:41:af:fe:fc:83:aa:dc:64:ec:a3:2f:39:8a:12:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2D:58:FE:EE:85:50:CE:90:CB:27:CC:F1:73:ED:3D:6F:D2:A6:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C22CCC0C26A11EF91912A68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.154.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7e:fe:dd:96:01:38:34:51:4e:1b:cf:e7:a0:f3:97:e5:c7:
33:c7:ce:d2:c8:5a:f7:22:e2:9e:92:7b:29:a8:4e:2e:ab:9b:
38:d6:fa:b9:cb:39:bc:6e:69:05:50:4c:30:6c:fe:ce:b5:97:
bb:a9:57:57:98:f6:15:bc:aa:fb:12:a0:75:a9:76:4c:4e:07:
d6:22:95:1d:76:05:f6:56:57:ba:7a:83:bc:59:8c:59:95:32:
7d:8f:be:c0:19:bc:c5:79:99:90:8b:76:ec:af:e0:7b:1e:49:
23:7d:c4:c6:87:ee:0b:4e:4d:1f:24:70:56:66:64:42:71:2e:
b2:1c:41:5c:d0:a7:84:c9:e2:c9:00:c9:bb:be:ab:ce:54:51:
c9:11:92:9e:93:e7:b1:9c:ef:ec:53:4f:f5:3f:b9:6f:93:c7:
e9:b5:dd:ee:0a:71:30:2f:60:a1:5b:23:0f:d8:f7:41:e1:6a:
a9:25:a1:b6:bc:21:5b:f0:f8:67:62:6f:d0:31:e4:2c:96:5b:
ed:7d:35:ad:b2:ce:dc:ea:09:12:70:ec:3d:f2:23:73:bd:69:
e4:ad:19:f7:9e:28:98:e8:ad:cc:d0:76:06:33:f1:e6:d9:ef:
59:87:3e:0c:80:83:c2:c9:e5:7d:fd:ff:93:db:89:1b:62:0f:
7b:81:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:20 2025 by rpki-client