Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997EB886C26D11EFAB9CBD7D762E951A.roa
File: 997EB886C26D11EFAB9CBD7D762E951A.roa (raw, json)
Hash identifier: Ek2u5wZpqk+GHcPPGrfeE8LwiU/ut7gBnAERlt4Qc0M=
Subject key identifier: FF:87:75:16:B5:C1:58:4B:F0:16:77:8D:BF:AA:C5:4B:EC:97:3E:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01243E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997EB886C26D11EFAB9CBD7D762E951A.roa
Signing time: Wed 25 Dec 2024 03:09:05 +0000
ROA not before: Wed 25 Dec 2024 03:09:02 +0000
ROA not after: Wed 10 Dec 2025 03:09:02 +0000
asID: 984
IP address blocks: 154.211.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74814 (0x1243e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:09:02 2024 GMT
Not After : Dec 10 03:09:02 2025 GMT
Subject: CN=676b7751-1de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:69:6f:a8:a2:54:47:fd:35:2a:ae:ca:c0:
de:c1:e3:1e:49:1c:8e:65:f0:e7:5d:97:88:f4:89:
4d:af:18:fb:af:f3:ba:86:a1:65:96:d2:c2:31:f8:
7b:ab:bc:5e:9c:3c:16:f2:a2:06:95:9e:5e:76:08:
bf:29:db:91:a4:71:6b:8d:be:51:79:88:fe:bd:6b:
7c:49:c2:e1:13:f3:50:47:89:87:46:b1:6a:43:84:
77:d1:ff:3d:06:a8:59:f5:6e:31:dc:4d:fd:3e:d8:
a8:db:d4:33:4a:9c:ef:88:78:b4:19:1a:d7:c8:fb:
12:41:fe:e2:59:83:9b:b9:a6:65:04:a8:cf:a5:39:
df:80:ef:29:5c:bd:63:6c:2b:66:bb:ca:b8:a3:7e:
bc:98:a2:62:83:8b:8b:79:70:61:dc:06:cc:bf:a9:
63:da:e2:ee:52:81:f5:d7:73:1c:e4:e3:a0:6d:4f:
8e:84:aa:88:83:19:a3:5f:a6:81:10:f0:2f:d0:51:
9b:5a:60:9d:52:8b:1f:40:cf:fb:b6:7d:d4:9f:9f:
ac:bb:4d:f6:0e:6e:a6:a6:6d:84:f8:fa:e1:c6:b0:
11:e5:24:5f:33:0a:f0:d9:c2:10:f7:b5:be:f3:a5:
98:1e:e6:76:e9:3b:44:4f:29:40:c3:cf:2f:a6:cb:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:75:16:B5:C1:58:4B:F0:16:77:8D:BF:AA:C5:4B:EC:97:3E:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997EB886C26D11EFAB9CBD7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:67:aa:df:27:3c:91:fd:c9:91:48:a8:f9:22:ac:f7:01:00:
e4:40:b1:88:a7:84:d2:d9:ac:1a:b9:96:05:aa:21:31:9a:95:
76:bf:e5:eb:00:01:cc:3a:b4:c1:cd:64:b4:f2:28:90:29:24:
8c:34:e1:1c:80:47:a7:f8:17:f3:80:4c:43:6d:75:ac:44:63:
77:84:19:d8:2e:82:0d:46:7d:30:bd:01:7d:7d:f8:54:1b:4b:
3a:19:cb:81:e4:a9:5d:80:2f:81:a9:53:70:20:a4:c0:02:bb:
3a:34:59:85:92:2e:b2:49:88:54:62:ff:7b:ed:e6:26:55:c2:
3d:67:9e:2e:2a:44:c1:ec:ae:da:f4:aa:9b:4c:28:18:c8:26:
72:56:e6:cb:42:3f:76:47:94:38:c6:75:03:f7:fe:f9:ad:b9:
72:5e:62:c9:d5:56:8d:f4:18:97:76:c8:3d:81:0e:54:f4:70:
88:28:e8:12:40:c4:ae:00:fc:35:b0:61:70:d5:67:68:f5:c1:
37:c4:58:15:78:13:9e:a4:3c:d2:93:a1:89:e3:41:52:4b:ba:
68:9f:89:1c:43:b0:a0:2a:fa:eb:26:81:70:82:5c:07:c5:f3:
08:92:44:fb:50:66:30:16:27:f6:93:9e:22:43:78:4b:9f:66:
5c:45:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:39 2025 by rpki-client