Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABFDE2D2C27411EFACF911AC762E951A.roa
File: ABFDE2D2C27411EFACF911AC762E951A.roa (raw, json)
Hash identifier: VN3+jkRW/NuC0ctotCVwVuForelKZ9TkcSsrn3Znh4A=
Subject key identifier: A7:E6:BA:1A:7A:9C:45:6E:2A:4D:00:94:06:A3:52:F9:9F:AA:51:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01248C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABFDE2D2C27411EFACF911AC762E951A.roa
Signing time: Wed 25 Dec 2024 03:59:43 +0000
ROA not before: Wed 25 Dec 2024 03:59:39 +0000
ROA not after: Wed 10 Dec 2025 03:59:39 +0000
asID: 984
IP address blocks: 154.211.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74892 (0x1248c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:59:39 2024 GMT
Not After : Dec 10 03:59:39 2025 GMT
Subject: CN=676b832f-f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:cd:75:2c:a3:e7:f3:62:38:ed:a8:d4:2e:
54:bd:8a:6d:23:82:c0:fe:06:4a:00:b8:96:e9:a2:
28:d8:57:1d:1b:db:86:ba:24:71:0e:39:9d:78:65:
82:43:f2:5e:7f:de:84:e8:c4:6a:f7:76:61:7b:2c:
e8:08:84:39:7a:2d:d3:51:11:e3:86:de:07:52:ba:
1d:ed:f5:65:2f:45:a2:58:b0:9f:07:81:2e:5b:55:
cd:65:db:ba:84:cb:bd:0e:ba:01:69:9c:9e:e0:f1:
01:e4:4d:f4:f2:e3:21:34:51:92:f2:66:d8:d2:ab:
2b:5c:b5:c4:c2:5b:7c:97:e1:66:5c:46:42:0c:ad:
4b:73:95:49:d0:8a:a1:e8:bc:fb:33:77:93:83:fc:
ac:9d:27:9f:b1:7e:3e:7a:2c:43:74:b3:0e:cf:af:
7f:01:35:1c:ee:66:09:2c:44:3f:95:f6:c7:0d:d3:
9a:76:2e:56:aa:48:ec:ec:49:63:ba:4e:c5:1a:0a:
2b:4a:9e:c3:33:42:ca:7e:e4:d6:b6:1d:05:9f:71:
9a:e7:4a:62:1d:c6:5b:a7:83:f9:01:fd:82:04:c0:
91:33:0d:4b:b3:5b:a0:cc:3b:2a:ea:c4:76:b6:b7:
0f:a1:ba:08:74:3f:a0:88:de:bf:11:02:fa:8a:e4:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:BA:1A:7A:9C:45:6E:2A:4D:00:94:06:A3:52:F9:9F:AA:51:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABFDE2D2C27411EFACF911AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.227.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f0:11:c2:6c:a0:db:27:8e:bd:ba:0c:78:6a:5e:5b:19:f9:
d2:d3:7f:51:29:ef:2f:e1:fa:35:0a:e9:d3:f7:43:5b:91:bb:
a6:49:f8:96:7b:20:9c:a9:93:81:4c:8a:d2:92:b1:da:2a:29:
07:19:7b:63:2d:5d:69:22:96:c6:77:7a:86:50:62:da:2a:3c:
0b:37:69:c9:68:3b:16:26:60:57:43:f0:1f:d0:22:f6:b1:e1:
35:43:b3:35:87:d2:02:c6:02:1c:b4:89:18:51:4a:33:9d:9c:
0c:d7:93:02:bb:99:32:7f:26:0e:11:d0:6d:02:4d:57:f5:30:
a9:1c:d3:e7:50:76:60:82:46:d3:e6:11:b1:7c:76:fa:02:d7:
40:e7:3c:35:34:d3:a5:47:df:06:69:09:c6:44:b8:54:bb:25:
7e:96:cd:c7:73:f6:03:cb:d6:3d:99:83:9b:b2:41:a9:30:eb:
ad:ba:25:46:e0:74:24:64:b4:64:c0:c3:5d:90:f9:16:98:2d:
5f:d2:74:08:34:62:b2:df:dd:84:6d:37:1c:19:09:8e:a9:60:
d6:89:aa:ad:3e:25:85:38:34:3e:88:67:42:ec:fa:c3:37:1f:
a5:86:a7:dd:4d:8f:18:65:c9:c9:39:11:31:2d:95:d3:cc:bf:
58:28:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:59:14 2025 by rpki-client