Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8783490C5EE11EFBFD0F2B8762E951A.roa
File: B8783490C5EE11EFBFD0F2B8762E951A.roa (raw, json)
Hash identifier: c9onnm5kjwadpDIzqwqPiSERZeR8d2ZmDIXXJrg7y18=
Subject key identifier: FD:59:6A:11:E0:8D:90:CE:8F:CE:D5:D5:3C:F3:5C:8F:27:CC:A1:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8783490C5EE11EFBFD0F2B8762E951A.roa
Signing time: Sun 29 Dec 2024 14:10:56 +0000
ROA not before: Sun 29 Dec 2024 14:10:52 +0000
ROA not after: Fri 12 Dec 2025 14:10:52 +0000
asID: 984
IP address blocks: 154.211.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77252 (0x12dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:10:52 2024 GMT
Not After : Dec 12 14:10:52 2025 GMT
Subject: CN=67715870-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:aa:ea:4a:61:fe:d6:1d:7d:9c:23:4a:cc:
10:db:09:bd:b0:ab:1f:0e:8f:98:64:2f:bd:a4:27:
9a:8e:8c:da:1f:ce:9c:05:56:dd:4e:35:3b:4a:7e:
12:82:02:6e:d0:43:8c:1d:cc:80:d8:5b:e0:2d:1d:
b5:fc:69:45:ac:54:2e:ed:3e:af:22:f5:f6:13:cb:
f0:5e:ca:1c:ca:d0:51:cf:d3:7a:2a:da:b3:ba:8b:
07:46:e4:ed:92:46:96:ce:7d:2a:06:44:4c:20:36:
4a:c0:91:81:ae:95:49:c9:86:54:df:bc:37:c4:2f:
5a:02:f2:cf:02:66:18:10:59:17:46:02:36:83:09:
c5:c3:c9:67:05:5e:01:f0:a8:c4:32:b3:d7:1f:21:
ae:ca:95:9c:ed:18:43:94:49:de:4c:22:00:da:8a:
8c:40:f9:f2:b5:21:76:f9:2b:2a:dc:51:8a:e3:32:
62:cf:79:60:db:65:ce:c9:44:91:a8:60:75:92:7d:
7f:2c:5e:c0:7b:76:ae:00:fb:fe:50:ec:1e:5c:67:
8a:0f:db:21:f3:8a:61:a5:34:32:2b:05:35:df:f6:
54:59:fa:c6:b8:ac:35:4e:26:52:ac:d6:8a:f9:d4:
c0:71:f4:cd:42:a6:65:fa:fd:b6:23:9d:bf:c9:f5:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:6A:11:E0:8D:90:CE:8F:CE:D5:D5:3C:F3:5C:8F:27:CC:A1:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8783490C5EE11EFBFD0F2B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.41.0/24
Signature Algorithm: sha256WithRSAEncryption
63:86:cb:fa:b2:51:85:c4:dc:06:d7:ae:2a:b3:95:7a:db:f7:
93:a8:49:3d:00:4e:dd:c7:e4:38:c5:85:1e:b0:97:59:6d:6e:
a7:61:76:01:59:6a:a9:2e:82:37:59:0f:6d:04:9a:21:fc:76:
ef:89:af:28:88:f4:fb:9f:c2:73:ad:45:29:fc:5a:38:67:e7:
e9:52:78:45:72:3b:29:b4:29:7f:86:9d:c7:0b:c8:92:72:67:
8e:8c:85:83:e2:9d:47:a2:72:d3:dd:5f:7e:a0:bc:4b:ce:d1:
38:dc:24:47:b4:4c:d0:7e:9a:ff:58:2f:cd:0e:05:b2:1e:ad:
f3:af:5e:ae:3e:88:26:5f:b8:13:76:d9:0f:04:a4:d3:6e:13:
64:26:2a:8e:e2:2f:73:1f:91:1d:c0:25:63:d0:4f:ae:8f:c0:
ce:ca:1c:18:1a:a7:02:ce:7b:59:46:0f:ff:0d:43:e3:36:ae:
65:3d:3a:1f:56:12:77:7e:70:52:a7:ee:61:72:b5:3b:6d:54:
37:a2:15:44:8c:35:b7:55:50:19:6f:31:50:ab:fe:bf:3f:0a:
a8:24:67:e9:73:33:d1:50:96:2e:2f:92:41:81:dc:51:71:0e:
76:4f:5e:60:6f:bb:6f:9c:7c:1c:35:b1:f8:18:de:f4:fa:9b:
72:bc:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:57:07 2025 by rpki-client