Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE482E42C26211EFA9B8BFAD762E951A.roa
File: AE482E42C26211EFA9B8BFAD762E951A.roa (raw, json)
Hash identifier: Wv55CEbQUszOY4yXDhzvqvwYjPsJT4sOt3OR/7mLzbk=
Subject key identifier: 1B:03:42:CD:4B:8B:13:E0:79:96:C6:EC:5F:32:67:98:C0:F0:0F:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE482E42C26211EFA9B8BFAD762E951A.roa
Signing time: Wed 25 Dec 2024 01:50:56 +0000
ROA not before: Wed 25 Dec 2024 01:50:52 +0000
ROA not after: Wed 10 Dec 2025 01:50:52 +0000
asID: 984
IP address blocks: 154.199.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74692 (0x123c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:50:52 2024 GMT
Not After : Dec 10 01:50:52 2025 GMT
Subject: CN=676b6500-c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:c4:98:0d:9e:29:43:c5:f9:22:a3:81:2e:
a0:69:81:29:ff:a7:d1:2f:2a:44:1a:2f:53:ea:4b:
af:90:c5:de:a9:14:61:74:43:58:31:22:98:9c:9f:
8b:e1:ed:ff:bc:21:e7:4b:39:e8:52:f1:16:04:32:
6a:6e:ea:17:ae:06:c1:4a:f4:f5:93:96:cf:2e:3c:
15:60:a8:a8:c3:b6:51:b9:80:fc:4b:89:8d:6a:f9:
0a:d7:42:2a:23:ff:83:7f:56:41:6b:ea:d0:ba:c1:
1e:c6:a0:54:f9:8d:5b:ff:0f:b8:7c:1f:a5:3a:d7:
18:30:30:65:f5:6c:dd:00:84:33:82:9f:6e:f2:8e:
b8:68:e9:12:36:03:2f:5b:2f:dc:9e:58:0e:19:97:
b5:97:a7:e6:7b:22:34:de:73:43:88:1b:84:e3:f7:
e6:49:cc:03:5e:9f:fd:a2:0d:ce:18:72:d5:56:d8:
a0:8b:1c:e9:5d:bf:23:5e:af:24:b5:67:f3:32:ea:
16:b7:b9:07:bf:ab:8b:e9:dd:d2:4a:d9:9b:20:d3:
4c:74:07:b9:9c:72:00:a0:2d:d9:28:14:27:12:81:
95:10:fc:5b:99:3e:e3:54:cd:49:90:88:c4:8d:b5:
0b:75:36:c6:9f:2d:a5:43:cb:73:d2:fa:04:b1:12:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:42:CD:4B:8B:13:E0:79:96:C6:EC:5F:32:67:98:C0:F0:0F:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE482E42C26211EFA9B8BFAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.111.0/24
Signature Algorithm: sha256WithRSAEncryption
95:81:a3:b6:12:3e:68:6e:97:ce:72:d9:ba:2f:be:88:83:04:
a8:4e:30:35:16:a1:b3:d3:2a:3f:93:8e:db:14:eb:43:41:24:
03:0e:c0:ab:fa:d0:8f:e4:d6:d9:a9:9f:9c:5b:8c:ca:5b:85:
55:ca:1f:f3:3e:02:59:82:96:ab:fe:a2:27:b6:ee:16:7f:2c:
cb:b3:b6:a6:0b:f4:b3:49:dc:75:b2:c4:d5:84:16:a1:e5:3d:
d5:f5:c8:ae:c6:f5:9b:ca:a6:5c:82:42:2f:41:26:3e:80:57:
11:30:83:3f:54:c2:40:4b:5b:2b:72:02:be:88:c8:60:d4:cd:
53:0b:56:d2:d4:2b:7b:a0:dc:16:a8:71:93:61:88:09:d1:83:
e3:4d:08:63:39:45:e7:96:9d:17:04:84:56:53:3c:a0:39:8f:
49:f6:84:c6:17:38:f3:60:7b:f1:74:16:73:9c:73:51:91:33:
f1:c4:1a:63:7d:05:81:32:28:c5:26:5a:b0:a0:52:9c:16:3e:
4c:97:0f:d6:3f:78:c2:90:55:65:f4:78:14:e4:fe:12:92:9d:
44:b1:16:5e:ab:7f:1a:15:31:9f:73:14:64:65:57:18:b9:61:
9b:1b:01:29:b5:0b:ea:64:79:ed:aa:d2:77:39:81:66:72:88:
38:bb:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:14 2025 by rpki-client