Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA6EE8AC36011EFA410F282762E951A.roa
File: BBA6EE8AC36011EFA410F282762E951A.roa (raw, json)
Hash identifier: LlC377wQ8us1gAoCwuE7UgZDKYVxIA/FpDa271oBtvA=
Subject key identifier: DF:32:1F:FA:96:B5:1D:54:F0:D6:19:BD:35:56:13:3D:D1:B8:86:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01264C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA6EE8AC36011EFA410F282762E951A.roa
Signing time: Thu 26 Dec 2024 08:09:30 +0000
ROA not before: Thu 26 Dec 2024 08:09:27 +0000
ROA not after: Fri 12 Dec 2025 08:09:27 +0000
asID: 984
IP address blocks: 154.91.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75340 (0x1264c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:09:27 2024 GMT
Not After : Dec 12 08:09:27 2025 GMT
Subject: CN=676d0f3a-099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:a9:76:cd:e1:2f:43:e4:82:80:a4:a6:e0:
1c:48:95:7d:e7:bd:91:a3:e6:d2:fc:39:0d:17:52:
7a:a0:d9:5f:e5:64:74:eb:ff:c6:c8:e7:49:10:1a:
d8:64:03:c6:b6:3d:4c:6e:24:c2:7e:ff:22:d4:a8:
a4:d7:fb:66:43:eb:9a:aa:1a:ac:cd:e5:46:97:75:
12:64:ea:0c:cd:73:97:0c:95:1d:b0:9e:00:ca:de:
91:76:d0:29:68:e1:bc:76:de:64:7a:da:cd:4e:4c:
95:0f:e7:ae:d1:01:a0:a1:61:95:87:c6:ad:36:66:
cf:9a:6a:cd:ff:b0:1c:40:f0:42:34:e8:65:c4:07:
05:81:03:1f:62:d4:35:c3:c3:5a:29:42:56:b9:41:
90:91:76:4b:f1:09:70:6b:64:3d:b0:9f:f1:81:1a:
62:dd:cc:85:3b:9c:65:26:72:0e:38:ae:4d:60:bb:
95:b4:54:f3:8a:c8:73:ce:b4:c5:ac:dc:57:1c:6d:
54:94:0d:7f:2f:12:9e:72:6e:5b:89:df:04:d6:78:
8b:10:f8:c2:fc:74:ba:81:b7:bf:c5:56:17:5a:e8:
f0:64:88:79:a1:e2:c2:c3:f4:4d:59:9f:b6:b6:9a:
3e:e7:0b:70:9e:10:0c:d9:47:82:9b:fa:dc:22:9e:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:1F:FA:96:B5:1D:54:F0:D6:19:BD:35:56:13:3D:D1:B8:86:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA6EE8AC36011EFA410F282762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fc:24:2c:dc:c7:b3:c1:7d:41:47:69:f6:31:3c:e4:9f:97:
bc:d6:d4:f6:2c:dc:c6:04:cb:6e:ea:0f:03:58:d3:3e:4b:7a:
55:61:7c:f8:b9:d2:0b:1d:40:d1:e6:6e:65:85:60:ab:7b:25:
5c:9e:78:67:d8:23:6a:b7:f9:50:86:cb:92:ee:c1:9f:95:ed:
ea:08:41:b0:86:a6:6f:32:15:d2:0a:9c:55:c0:40:15:a2:ec:
9b:50:51:48:ec:d1:8a:74:53:f1:42:2f:06:5b:40:95:26:c2:
c9:f3:21:df:ad:76:b3:3d:cf:a7:7d:69:ae:10:a6:27:fe:e9:
61:62:8f:52:ba:20:2e:9e:13:27:40:40:68:ba:f4:4e:ad:7c:
5c:12:6c:0c:0c:31:87:6a:6c:a5:81:de:5b:bf:55:c2:b1:99:
58:7b:c3:57:2a:aa:54:a9:8f:4c:37:97:b4:4c:fe:97:6d:35:
f6:5b:b4:7f:e6:ce:4b:f9:fa:13:65:3c:42:40:1e:fb:4e:df:
c7:c2:8b:a0:5c:c9:8c:d8:52:9a:ee:33:5a:84:d7:bc:cc:1c:
d1:29:b9:30:b6:9c:6b:33:49:81:52:c9:ae:81:65:06:7e:95:
1a:05:de:d5:ae:9a:12:c5:83:60:6a:0a:21:52:02:4c:91:f0:
cb:dd:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:59 2025 by rpki-client