Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E825C0C1DA11EF8917EF45762E951A.roa
File: B2E825C0C1DA11EF8917EF45762E951A.roa (raw, json)
Hash identifier: ay3oLWHykBjL13cbdjxvaWGR5ukiHdfhjiSSf/PGT50=
Subject key identifier: E5:06:71:4B:66:E6:08:FC:79:C7:18:E5:30:8E:33:59:69:3A:FC:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E825C0C1DA11EF8917EF45762E951A.roa
Signing time: Tue 24 Dec 2024 09:37:32 +0000
ROA not before: Tue 24 Dec 2024 09:37:28 +0000
ROA not after: Wed 10 Dec 2025 09:37:28 +0000
asID: 984
IP address blocks: 154.194.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74493 (0x122fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:37:28 2024 GMT
Not After : Dec 10 09:37:28 2025 GMT
Subject: CN=676a80dc-2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:7c:c4:e0:fa:d6:d5:ba:64:e4:e8:b2:f8:
13:4c:a5:10:20:83:14:d9:6c:87:db:96:40:56:b9:
f5:26:1d:da:c5:e0:79:f7:22:20:aa:a2:aa:4a:d8:
d5:9a:65:a1:1f:2e:47:d8:62:70:a6:3b:f5:b8:57:
f7:39:23:0f:e7:39:cd:bd:7d:3f:ec:51:5f:2b:d7:
e0:22:16:98:58:a5:a8:d5:c1:af:57:87:b5:f0:a8:
ef:ab:a0:c9:34:2d:39:47:a9:47:1d:81:88:b4:a8:
b0:22:99:c9:08:8d:4e:62:3b:5f:fe:3d:fb:bf:75:
30:b2:17:1e:27:83:a0:37:91:aa:74:48:b3:96:dc:
5f:67:f4:0f:94:89:a2:48:90:d0:0e:ab:7c:00:79:
c9:51:c7:de:70:97:c4:0f:05:62:d3:e5:4a:b6:26:
5c:1d:c9:56:44:2c:4a:10:b8:fe:a4:b7:4a:05:af:
2f:cc:52:02:5d:79:41:35:99:4a:d3:dc:c8:ca:cf:
e7:95:66:8d:b7:8a:2c:d2:35:47:c0:ed:fb:30:f3:
6d:f9:0a:fe:a7:85:ca:18:e5:5d:b6:ee:13:b5:0e:
b7:2d:3a:a7:41:a5:22:8c:78:63:06:13:c2:23:6e:
04:26:60:58:a1:d0:aa:e2:06:28:60:ef:01:9b:a1:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:71:4B:66:E6:08:FC:79:C7:18:E5:30:8E:33:59:69:3A:FC:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E825C0C1DA11EF8917EF45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:06:3e:5f:85:7a:78:72:0e:be:2c:29:15:ef:d5:a0:eb:c1:
e5:25:36:b4:cf:e1:14:da:ed:b3:aa:f9:8b:14:5b:a6:4f:1c:
f5:af:2a:44:b2:d3:b2:26:0a:c6:03:66:86:94:2a:a0:19:04:
52:89:4f:c6:d4:e2:4a:c6:ab:a6:70:66:51:5e:38:69:16:49:
ce:72:37:c2:e5:14:79:02:a8:05:e8:6f:59:ce:07:3b:0c:cd:
ff:d0:a3:58:6a:31:c9:ae:c3:88:d1:0e:7c:c4:a6:b3:4f:36:
3d:80:d9:02:4e:f9:3e:07:a9:0e:e0:39:92:f0:5f:81:0a:d1:
6d:3c:1f:f7:58:50:0d:7e:5e:0e:cc:0e:91:e4:6f:ce:a9:92:
b6:63:8f:ce:a2:3e:6c:fd:f9:68:bb:79:bc:6b:df:06:4e:a4:
5f:7a:80:19:20:27:d0:33:25:2c:d4:3b:a9:9c:55:92:99:bd:
0b:da:9d:1b:56:56:bc:00:85:d5:a2:8d:6f:d2:ae:00:04:ec:
5b:ea:da:5e:1b:e9:06:48:8f:dc:4e:d3:1a:45:9b:1a:a3:2d:
c1:bc:25:95:97:af:ee:9b:38:94:98:75:64:25:74:85:2d:0d:
4e:65:32:46:83:43:e2:a0:7b:04:87:14:01:58:ac:6b:38:7b:
da:e0:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:39 2025 by rpki-client