Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87FB65CC65211EF809A7AB6762E951A.roa
File: B87FB65CC65211EF809A7AB6762E951A.roa (raw, json)
Hash identifier: wO05UAIdplaAdyQYaF6pqCWav8Nh6unaaReczV80EEA=
Subject key identifier: 17:94:59:5C:88:D6:BD:8E:36:EE:B8:24:DC:9A:B2:0A:1C:59:F9:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013054
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87FB65CC65211EF809A7AB6762E951A.roa
Signing time: Mon 30 Dec 2024 02:06:46 +0000
ROA not before: Mon 30 Dec 2024 02:06:42 +0000
ROA not after: Fri 12 Dec 2025 02:06:42 +0000
asID: 984
IP address blocks: 154.218.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77908 (0x13054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 30 02:06:42 2024 GMT
Not After : Dec 12 02:06:42 2025 GMT
Subject: CN=67720036-78fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:1b:9d:b8:4b:a9:56:0a:55:dc:9e:6c:39:
76:6d:02:1b:4c:2b:23:27:18:d9:96:72:a2:f6:4a:
50:fc:a4:a8:01:33:b1:7e:5d:3d:2c:a6:56:25:0b:
06:e0:45:8a:92:7e:dd:dc:bd:72:21:27:23:4a:64:
32:76:f3:ef:50:49:d6:7d:17:8d:30:ae:00:0c:00:
ee:a7:11:51:bf:12:ba:d2:ab:b1:b6:6c:ed:40:aa:
4d:23:51:0f:8f:2f:32:f3:d0:8c:18:b6:c0:61:ac:
3b:06:2e:7c:e6:17:25:a2:dc:81:a8:39:90:be:a3:
44:c6:a2:e5:27:1f:a8:cc:b7:5c:09:fc:63:5c:7a:
e4:b0:8a:3f:ba:76:3e:a9:4e:35:ef:d7:a3:c4:9b:
17:a9:e1:40:e1:d2:d1:f3:4e:ff:72:da:9d:c5:97:
7b:f0:66:ca:d4:50:7c:c9:80:c2:b5:19:21:4c:47:
6d:1b:1e:e5:34:38:8c:38:27:de:ce:6e:6b:1a:1d:
d8:c7:21:7a:f8:d7:b3:18:51:9e:79:ee:85:a7:f5:
4e:28:37:f2:c8:e7:8f:93:7f:7b:f9:0e:0b:ec:af:
b6:b5:4b:f0:f2:fa:14:02:b7:e9:cb:0c:cb:45:22:
fa:ca:75:02:e2:a0:00:f8:c1:3c:0b:4a:f6:ee:d9:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:59:5C:88:D6:BD:8E:36:EE:B8:24:DC:9A:B2:0A:1C:59:F9:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87FB65CC65211EF809A7AB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:63:f5:c1:3f:30:26:33:8c:53:c4:dd:49:1a:f1:df:c0:d2:
68:15:0c:6a:dc:2d:f2:3d:bc:88:3b:79:11:4f:8c:76:86:89:
35:b6:f2:be:f6:b3:b9:c2:61:83:5a:06:17:be:d7:5c:4f:e2:
ab:f1:b1:75:31:bd:e3:31:8f:ff:ee:2e:69:ed:99:6c:66:c8:
5a:16:01:ac:d2:bf:0c:5b:5d:56:12:87:7c:7b:c0:68:3b:b5:
d2:24:b6:9a:ab:2f:9e:7a:1c:8c:7f:ee:98:42:93:49:7f:e9:
e2:37:9d:ae:68:65:e0:14:23:ef:4c:1e:d5:ba:61:bc:ef:6f:
ad:db:e5:f5:95:92:74:bf:9f:59:38:b3:31:69:f9:31:24:2a:
cc:57:2c:77:8e:38:43:18:20:fe:d0:51:01:16:7b:f9:b9:0c:
5e:da:47:b1:69:cb:9a:56:1b:83:29:68:c8:40:0e:7a:a1:2b:
ca:84:68:4a:07:4c:c2:0a:45:52:6a:b1:24:4c:8e:11:77:dd:
f3:06:56:f6:d7:cd:40:cb:90:a4:d7:ed:00:b9:e8:fd:4f:fc:
e0:5e:36:72:3c:dd:a3:a4:99:95:25:3c:e8:65:8a:dc:e8:6a:
63:81:e2:12:d2:e0:89:c9:e1:24:0b:34:63:7f:f2:ba:b9:b4:
d9:72:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:48:04 2025 by rpki-client