Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08ECDA2C42811EF95777782762E951A.roa
File: A08ECDA2C42811EF95777782762E951A.roa (raw, json)
Hash identifier: lNSYvP9Kb/puhNww41dLua3VomnSas/wN1PFqLrOxW8=
Subject key identifier: E3:C3:28:11:BC:92:1E:A0:CC:50:9D:70:DD:89:9C:C7:DE:27:9C:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08ECDA2C42811EF95777782762E951A.roa
Signing time: Fri 27 Dec 2024 08:00:24 +0000
ROA not before: Fri 27 Dec 2024 08:00:20 +0000
ROA not after: Sun 12 Dec 2027 08:00:20 +0000
asID: 17561
IP address blocks: 154.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76287 (0x129ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:00:20 2024 GMT
Not After : Dec 12 08:00:20 2027 GMT
Subject: CN=676e5e98-c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:b8:d1:93:9f:48:13:5e:26:d0:02:ef:c0:
2d:1b:81:cc:bd:a4:03:0e:55:45:0c:a4:bd:b2:97:
f0:42:41:5c:45:9c:e0:d5:e6:4e:d0:cf:05:5f:fc:
b6:d1:09:be:48:65:14:58:4b:da:22:a8:32:62:5d:
4e:6c:64:c2:b4:29:1e:e4:45:b8:f2:43:b3:5f:ba:
f9:ec:a8:3b:a2:1b:b3:4d:25:9f:3a:d1:53:7a:84:
3c:3c:56:c8:91:c1:d8:d6:55:88:37:70:a1:59:85:
25:f6:1e:07:e9:ba:62:75:86:34:62:96:b1:4b:33:
6b:60:f3:e4:53:90:ae:96:26:41:8c:fd:ee:02:32:
44:30:f7:b1:9f:31:64:8a:d4:ec:44:33:45:b6:f0:
13:8f:7c:8e:76:a2:29:d6:87:76:61:35:69:25:ef:
49:e8:6c:35:40:f1:89:0a:7b:5b:2d:54:1a:66:25:
a3:62:18:02:c0:8d:ab:ee:d2:b0:48:33:1e:c3:f0:
c4:76:e7:7d:cb:3d:12:ca:08:07:38:f5:61:ff:93:
0f:36:bd:77:84:69:48:1a:93:a8:0b:8f:d3:dd:8b:
05:d3:41:5d:2f:37:ec:51:05:45:eb:0e:f2:8f:99:
df:f5:b1:91:e1:e7:71:f6:6e:f0:ba:48:6a:3d:ed:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:28:11:BC:92:1E:A0:CC:50:9D:70:DD:89:9C:C7:DE:27:9C:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08ECDA2C42811EF95777782762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:83:8d:5f:dd:33:6f:51:df:96:08:25:8f:5c:78:80:8e:1b:
43:bb:95:a4:c9:ea:64:f9:8b:9e:d4:ad:01:e5:a4:cb:7f:d7:
31:66:81:f9:1b:77:c5:bc:2b:9d:f2:fc:8f:a2:1d:f6:bc:65:
d5:2c:de:88:de:f3:79:13:fc:3e:7b:c7:80:c7:83:c4:8f:5c:
4a:25:43:7e:a1:8d:92:a4:f4:f3:e3:6c:89:5f:67:9e:62:79:
b1:86:66:a4:2e:5d:92:27:2f:f3:c4:a3:65:b0:c9:4f:50:47:
f5:cb:60:83:28:00:1f:55:57:f5:62:ff:87:a8:1f:1e:f8:04:
02:c2:dd:21:b8:f9:42:e8:c1:60:62:20:3d:ff:c5:7b:3e:24:
b5:c1:7e:59:18:ed:0b:dc:a2:7d:a8:f7:50:ae:86:df:6d:22:
60:b6:b2:d2:41:e3:49:60:97:e9:d6:89:20:1f:53:80:56:61:
b3:96:08:b0:79:23:90:52:33:03:fa:46:7c:f8:a3:ca:51:57:
db:d9:19:7e:0d:6e:a0:69:9b:1b:30:88:3d:73:f0:78:f4:bf:
84:97:b8:03:25:a1:d4:e9:d4:77:83:8d:7b:20:99:00:0f:29:
49:c9:e4:b7:dd:1b:57:e3:ca:af:f6:87:56:fc:2b:9b:e7:20:
c0:4e:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:01 2025 by rpki-client