Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2505DA2C27511EFA15FC7B2762E951A.roa
File: C2505DA2C27511EFA15FC7B2762E951A.roa (raw, json)
Hash identifier: ke/G4PQoSbQi1Ys0zYUjyBo3rUAWvanW9+43DpAUxwI=
Subject key identifier: 41:5B:D1:B9:2B:FB:E1:07:93:11:96:1D:74:8E:4B:7B:9B:0F:BD:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012498
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2505DA2C27511EFA15FC7B2762E951A.roa
Signing time: Wed 25 Dec 2024 04:07:30 +0000
ROA not before: Wed 25 Dec 2024 04:07:26 +0000
ROA not after: Wed 10 Dec 2025 04:07:26 +0000
asID: 984
IP address blocks: 154.211.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74904 (0x12498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:07:26 2024 GMT
Not After : Dec 10 04:07:26 2025 GMT
Subject: CN=676b8502-209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:87:e3:6a:3b:27:d6:ba:bd:cf:06:4c:55:
96:70:52:a2:27:1f:02:1d:da:00:da:ae:86:af:86:
f2:01:64:08:33:33:27:5b:6a:79:94:18:1f:af:b1:
3b:36:0e:9b:46:22:da:09:4e:b2:85:38:16:65:0d:
7a:04:5f:c8:da:90:87:0e:b2:03:46:97:7a:8d:8f:
9c:d7:0c:4a:c2:6e:1d:17:a3:68:eb:4a:1b:e8:1e:
b6:6c:11:c9:95:00:a4:28:d0:9f:10:e5:b3:6b:fd:
a6:94:9e:8b:bc:ca:56:48:3a:dd:26:03:62:13:84:
f2:fe:86:40:c8:af:96:f9:5c:5e:b6:36:dc:99:1c:
08:5e:c7:7e:a0:e0:37:28:0a:e2:36:ed:6d:7c:cf:
c0:e2:6c:a3:f6:69:69:6a:0a:22:2c:b9:34:ca:d9:
bc:ae:ef:17:58:23:a0:92:66:f9:9d:9c:52:ad:a8:
a3:15:27:02:a9:82:26:9e:1e:a1:7c:61:2c:3f:86:
c7:5b:6d:9e:90:c2:8a:f5:31:ea:bd:f5:4b:52:a0:
45:2f:ca:36:30:1c:82:64:a2:7f:e4:dd:93:59:45:
40:76:1c:96:fb:4d:7c:b3:8b:fc:e0:77:af:fe:2d:
8b:4d:72:fa:e6:d1:ad:83:8f:b5:a2:e5:43:0b:05:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:D1:B9:2B:FB:E1:07:93:11:96:1D:74:8E:4B:7B:9B:0F:BD:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2505DA2C27511EFA15FC7B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.233.0/24
Signature Algorithm: sha256WithRSAEncryption
57:58:58:f0:c0:91:27:31:be:ad:62:6e:be:08:11:68:3f:13:
5c:f2:8c:13:ec:5d:d6:29:18:ec:1b:3c:77:9b:d4:0a:33:19:
61:c8:86:d8:75:f2:1a:81:68:29:e0:cb:4e:2e:e3:49:4d:ec:
36:d3:cd:d6:fd:7f:49:73:18:92:94:e4:79:05:84:9d:6d:6d:
32:23:50:81:ba:fc:c9:e2:8e:1f:64:a3:9f:e7:3d:76:d8:7f:
65:60:6b:5c:cf:e6:fc:49:b6:e5:17:71:15:76:46:bc:34:5e:
75:fa:7e:bb:c7:a9:31:3e:17:42:e0:45:9e:e4:3d:21:ea:df:
bb:41:fa:27:c1:78:68:1c:4a:30:dc:88:65:32:c3:e4:e0:b9:
24:fb:cf:55:66:42:e7:19:69:2d:92:42:80:50:91:82:80:3f:
99:0b:fd:30:27:6c:69:ad:0c:a1:67:a2:37:68:e8:c4:37:a5:
ac:b1:9e:3f:8f:5e:e5:51:2c:6f:25:32:d9:d0:3f:b2:59:e9:
0b:83:97:b0:b4:f3:fc:e8:66:f4:dc:81:40:db:1f:a6:27:60:
55:2c:71:8a:70:5d:3f:a8:22:80:1e:58:cc:7c:19:52:5c:31:
e9:73:49:07:b1:7c:71:64:ac:c3:90:de:a3:7f:80:8d:25:d8:
19:ee:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:34:56 2025 by rpki-client