Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB918144C27611EF9368E3B8762E951A.roa
File: AB918144C27611EF9368E3B8762E951A.roa (raw, json)
Hash identifier: /vLfw9zxzvRslm4uMu70kR4fZ0W0esFX5D4K8dvNuQo=
Subject key identifier: 0C:27:46:EE:4C:8F:94:B2:D9:16:74:1F:FE:F7:BE:8C:7C:AA:AD:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB918144C27611EF9368E3B8762E951A.roa
Signing time: Wed 25 Dec 2024 04:14:01 +0000
ROA not before: Wed 25 Dec 2024 04:13:57 +0000
ROA not after: Wed 10 Dec 2025 04:13:57 +0000
asID: 984
IP address blocks: 154.211.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74914 (0x124a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:13:57 2024 GMT
Not After : Dec 10 04:13:57 2025 GMT
Subject: CN=676b8689-4e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:09:b8:5d:67:af:d9:b6:0d:f5:67:24:44:
6e:bd:a4:ec:2b:5c:da:0c:3f:49:bf:3a:d8:6d:a6:
5b:55:c8:e3:68:ce:b4:7b:f4:b1:18:99:f0:75:d6:
d4:ea:dc:69:69:42:ef:df:74:6a:f6:32:8f:7f:e9:
90:02:0b:32:08:46:6f:d9:37:02:46:2a:b4:ee:82:
0f:d5:d7:b4:04:64:09:12:57:04:0f:44:ef:ee:b5:
ac:ef:e6:dc:35:7b:f3:75:5c:84:69:4e:64:d1:84:
c5:1c:38:aa:5d:f0:a1:ad:ef:72:07:33:e6:e0:64:
57:88:15:d3:ce:89:bc:17:cc:68:96:bd:7a:a6:67:
03:17:c7:64:01:eb:29:75:6d:f4:3a:4f:ae:9f:64:
30:f0:f1:02:b8:0e:d3:f3:ca:14:4a:c7:ca:66:64:
e7:27:a4:8e:a1:23:be:8e:27:3f:43:74:b2:5e:9c:
77:74:0a:fe:2e:bf:7c:9b:0d:cf:6a:8e:5e:86:fd:
f9:07:c6:1f:d7:46:15:35:cd:e5:24:24:68:29:32:
93:90:5e:bd:0b:52:e4:e3:7c:cd:85:08:94:e1:8c:
6c:8d:a4:65:27:2f:7e:50:42:02:11:ac:00:e7:3b:
df:eb:7e:ca:1c:6d:dd:60:36:ed:fd:7c:40:dc:27:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:46:EE:4C:8F:94:B2:D9:16:74:1F:FE:F7:BE:8C:7C:AA:AD:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB918144C27611EF9368E3B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.238.0/24
Signature Algorithm: sha256WithRSAEncryption
85:36:03:ce:2d:29:66:06:9e:68:56:5c:48:46:24:51:fa:57:
ab:4d:cd:20:28:1a:a9:f6:dc:2d:b8:e2:47:6d:18:7b:34:9c:
44:01:2a:09:ad:3d:38:2c:42:0a:a3:d1:6b:6f:d7:2b:2c:04:
58:f1:23:50:91:12:3d:5c:c5:c3:3b:48:be:dc:37:cd:af:05:
e2:18:19:75:52:b5:79:5f:d5:52:b4:be:a6:f6:3a:38:53:bf:
d5:43:ba:70:f2:13:8b:f2:ae:fa:da:63:9f:10:85:5b:6e:b5:
f1:e0:e4:a7:03:18:9f:b8:59:fc:d9:8a:da:19:62:59:3e:a4:
90:9f:77:a5:7b:b4:87:67:df:0e:5e:24:bc:fd:f7:8f:9b:da:
7a:e0:5a:4d:f6:59:13:51:44:1c:ac:bc:01:78:41:a9:f4:6d:
ab:65:99:3a:3c:13:04:e7:f7:da:6d:c7:4f:e9:c2:e0:79:61:
d0:32:a0:11:f6:30:aa:03:ea:23:03:07:9f:f7:e4:27:73:67:
1f:51:2c:48:9e:7b:3a:e0:61:8e:48:39:b6:0b:0c:58:c6:b6:
5e:68:44:e5:f1:21:c5:d4:65:9b:15:40:0f:4d:88:41:9a:9f:
99:a7:b7:8b:1b:bd:cf:c7:1e:c7:60:1c:af:2e:38:43:a9:29:
bf:26:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:58 2025 by rpki-client