Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7188F6C52911EF98DA9857762E951A.roa
File: 8E7188F6C52911EF98DA9857762E951A.roa (raw, json)
Hash identifier: aHESjpNrv9D0aEvCDinKUar1+gMrjfnWlv6RYdVRydg=
Subject key identifier: F8:F1:E6:81:AA:8E:9B:8A:07:DE:DD:FD:D5:A3:3C:72:33:74:88:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7188F6C52911EF98DA9857762E951A.roa
Signing time: Sat 28 Dec 2024 14:39:35 +0000
ROA not before: Sat 28 Dec 2024 14:39:31 +0000
ROA not after: Fri 12 Dec 2025 14:39:31 +0000
asID: 984
IP address blocks: 154.204.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76711 (0x12ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:39:31 2024 GMT
Not After : Dec 12 14:39:31 2025 GMT
Subject: CN=67700da7-2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:47:67:50:9d:d9:6a:8f:fb:c3:11:e1:ba:d2:
6d:12:c2:05:e7:70:85:5c:de:90:7d:0e:f3:59:aa:
bf:d4:59:89:a0:02:2f:25:61:5e:23:a7:64:2a:14:
56:3c:07:c7:04:62:32:94:21:8f:8b:83:33:51:6a:
ea:43:03:e9:1a:f4:e8:6e:53:6c:9b:00:27:31:06:
4c:75:ce:c9:92:0b:9d:29:1b:c9:4c:52:2f:9d:44:
28:bf:d5:5c:88:ab:4f:25:57:4d:a6:eb:1c:44:ce:
2c:14:38:8d:2a:6f:68:19:fe:f5:2c:19:d0:1c:27:
da:62:a2:b9:10:bc:e5:fb:00:93:22:85:4c:77:c0:
a0:71:19:d5:83:e1:73:1b:47:3a:af:18:7b:c8:8d:
a6:50:18:ab:ce:c8:aa:f3:5a:67:05:18:63:00:f3:
76:59:31:5c:a3:5a:48:c5:73:c8:40:a8:51:15:a3:
b5:d2:c4:32:f7:f4:a9:a8:43:b5:3b:78:b7:ff:7a:
1b:f3:33:5c:46:ea:09:ff:f7:ae:f0:b4:2c:14:0d:
9d:89:29:23:b8:58:aa:a2:7b:a2:65:7c:c9:f5:f6:
20:67:da:4b:57:18:33:9b:95:8b:b0:c5:63:33:83:
ef:fc:99:09:fe:6c:c5:f8:3f:74:6f:21:36:57:a6:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:E6:81:AA:8E:9B:8A:07:DE:DD:FD:D5:A3:3C:72:33:74:88:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E7188F6C52911EF98DA9857762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e2:cf:56:f6:4a:62:72:47:04:9a:24:2b:c3:b3:2c:0e:cf:
89:4c:c3:8e:bb:ea:fb:f3:6c:15:a1:ea:24:86:4e:c8:ac:ea:
95:f0:75:62:0b:9a:39:14:7a:97:70:08:d7:f1:a2:03:b0:c8:
92:19:5f:1e:87:28:ad:50:5b:23:90:57:5e:e0:67:26:41:47:
25:81:5b:e6:b0:e9:1d:56:29:76:4a:52:b0:d7:37:6c:8d:ca:
ab:0d:24:f8:74:3b:1d:22:c0:7b:0a:ae:99:89:d6:48:11:93:
8b:d7:2c:ff:53:3f:18:89:29:4e:66:04:4b:f1:63:cb:04:1d:
88:11:82:ea:9c:12:f3:25:31:1f:d1:cd:7b:55:e4:5f:ef:29:
a6:fb:0d:9b:52:78:ab:7b:82:d7:56:c4:2f:15:bb:27:c2:28:
31:2f:09:e6:4d:76:49:63:ef:92:2e:8d:50:1d:31:f6:35:f7:
8b:99:86:a8:72:95:ae:3b:19:f6:df:28:0e:e9:58:5d:af:4d:
56:83:58:06:c5:09:70:73:8c:47:ba:2d:1f:6d:b1:6b:b6:2d:
79:7c:4c:b1:8e:9d:a1:87:12:df:70:ab:4b:39:79:65:b0:69:
3f:09:6e:f4:6c:fa:d1:4c:6f:93:76:81:6f:53:ce:6c:82:31:
72:e6:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:08 2025 by rpki-client