Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C60ECCC26711EF81B9AA53762E951A.roa
File: B1C60ECCC26711EF81B9AA53762E951A.roa (raw, json)
Hash identifier: A2XJb/Lzx25pI7jt0tyLKvPu2lhs9/7oFxfFUYqHPcw=
Subject key identifier: 80:A0:88:CF:4A:8F:7C:AD:FE:CC:69:79:82:D2:EE:93:AE:22:6E:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C60ECCC26711EF81B9AA53762E951A.roa
Signing time: Wed 25 Dec 2024 02:26:49 +0000
ROA not before: Wed 25 Dec 2024 02:26:45 +0000
ROA not after: Wed 10 Dec 2025 02:26:45 +0000
asID: 984
IP address blocks: 154.211.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74748 (0x123fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:26:45 2024 GMT
Not After : Dec 10 02:26:45 2025 GMT
Subject: CN=676b6d69-fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:75:63:5f:24:4e:f6:e2:2b:ed:63:23:0c:
1d:9c:97:27:a2:3b:65:83:6a:c5:dc:1f:43:58:3f:
f2:8b:63:41:09:24:15:c2:62:ce:b2:c1:79:f5:a9:
5a:42:a9:8c:70:07:c1:e5:3b:98:23:c8:07:f9:20:
d9:d9:e1:84:94:20:71:ff:56:6a:b8:17:bc:53:56:
03:98:0e:85:62:0b:72:d4:35:c3:b0:7a:c5:31:62:
f7:f4:79:43:ef:7f:b0:83:59:98:d8:67:2b:5a:54:
81:61:de:cc:c2:b5:89:0c:9c:85:ba:19:18:0a:9a:
38:44:90:e1:30:10:55:e3:1f:d2:14:de:f9:9b:6d:
d0:8f:cb:a9:f1:70:b0:71:3a:3a:08:2d:a0:77:58:
ac:e1:6c:e3:e7:20:02:da:82:91:cf:d0:2d:79:22:
30:fc:37:33:51:a2:27:16:d6:6d:43:0d:34:9a:56:
f4:3f:d4:e4:96:07:e2:c8:43:bc:b9:ef:29:ec:0d:
96:76:b0:a3:ce:ca:9f:3c:3e:88:c1:de:7c:9b:78:
08:97:c9:87:f9:4f:2d:cf:33:78:90:ac:9f:ba:4c:
77:e4:5f:83:b1:3a:45:3c:e7:76:99:6f:24:94:d3:
e4:93:d5:24:de:87:81:78:fa:86:37:36:58:01:74:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:88:CF:4A:8F:7C:AD:FE:CC:69:79:82:D2:EE:93:AE:22:6E:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C60ECCC26711EF81B9AA53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:75:80:10:f4:01:4e:90:e7:95:f4:80:6e:21:6b:c1:62:f0:
d0:00:b0:6b:02:d6:39:09:b4:cb:ad:06:29:d5:eb:65:f5:f4:
a6:7d:96:61:94:ae:6c:60:19:38:da:04:57:13:cc:2f:55:4e:
50:ba:c4:a8:85:7d:ef:59:c9:23:80:7f:e5:29:10:6a:ea:1a:
59:31:0c:af:4e:e3:d3:af:e7:c8:63:cb:61:f2:be:5d:f6:15:
ab:7d:7d:22:bf:74:03:c5:5e:e6:b7:56:a4:e5:f1:cb:ef:30:
21:a6:ba:09:c1:94:89:f3:0f:87:17:30:55:ad:27:bd:c5:7a:
26:52:88:76:bf:2d:e4:2a:cf:22:a9:2a:a7:32:6d:8a:65:49:
1f:55:af:05:19:bc:da:85:c3:27:32:14:f2:08:00:b9:3c:00:
67:55:c8:a9:7f:b8:64:a5:20:d4:f1:c6:a2:cc:ae:82:52:7f:
c8:41:e4:8b:cd:8b:f4:22:dd:b4:36:28:54:54:55:9d:20:38:
03:de:05:83:d4:e2:65:66:7b:a7:b2:5f:19:b1:05:16:4e:34:
fe:b2:e3:f4:b0:51:77:ae:ed:9a:d3:0e:d8:fc:96:b3:e0:2b:
62:52:cf:8c:b6:fd:76:4c:d4:29:b2:1c:aa:d9:3d:ae:7f:21:
08:cb:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:59 2025 by rpki-client