Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F82FE8C27311EFAB9EA3A6762E951A.roa
File: C2F82FE8C27311EFAB9EA3A6762E951A.roa (raw, json)
Hash identifier: Sarw9lMN1EtzqtuCtChVu91/+4O0wZoYTgKlqfLBm7A=
Subject key identifier: 82:66:A0:B0:14:C2:F8:B4:48:62:B8:91:D1:FE:5D:10:0F:A3:3B:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012482
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F82FE8C27311EFAB9EA3A6762E951A.roa
Signing time: Wed 25 Dec 2024 03:53:12 +0000
ROA not before: Wed 25 Dec 2024 03:53:08 +0000
ROA not after: Wed 10 Dec 2025 03:53:08 +0000
asID: 984
IP address blocks: 154.211.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74882 (0x12482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:53:08 2024 GMT
Not After : Dec 10 03:53:08 2025 GMT
Subject: CN=676b81a8-94aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:33:f0:fc:2b:53:f2:ff:0d:30:a2:a3:e0:
3a:80:8a:b1:1d:94:23:34:f6:34:f8:ac:62:b2:d0:
2b:2e:79:a5:f7:32:1c:f7:f3:ad:45:b1:4b:d1:c7:
a9:0d:3f:c8:9c:2d:69:b5:f5:c8:de:72:61:ac:55:
39:fd:f6:c3:f9:18:ee:6c:f7:7b:b1:79:81:2e:d5:
48:dd:81:fa:b8:7f:51:d7:27:ea:cb:ef:ad:ef:aa:
5c:3a:f3:c8:a3:db:f6:2d:39:a5:d9:2b:b9:d8:d4:
58:29:f9:33:08:f8:ab:b2:58:fd:73:a4:87:dc:73:
12:c2:af:b1:1d:b2:f2:cc:8a:6b:10:50:d6:d3:ec:
a4:b7:db:73:ba:00:c1:c5:ae:b3:3b:1f:00:31:67:
0b:f3:47:a2:2b:2a:51:aa:47:2c:fe:47:e1:3d:4b:
8f:0f:d2:5a:c2:11:0e:17:7e:3c:7e:90:20:fa:fa:
40:57:2f:0a:91:ce:fd:bf:1a:0a:ec:dc:e5:24:12:
f3:40:58:92:d6:2a:94:d6:f9:2a:7e:14:33:ec:06:
8b:5a:24:39:62:0d:98:4f:15:1a:1f:3a:67:e6:d4:
7a:de:1b:1a:54:6f:bc:5b:49:91:9c:09:fc:73:da:
8e:36:85:46:47:79:1e:46:66:0f:4d:cc:d2:57:b2:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:A0:B0:14:C2:F8:B4:48:62:B8:91:D1:FE:5D:10:0F:A3:3B:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F82FE8C27311EFAB9EA3A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:27:5b:f9:55:f3:f3:d2:7a:b0:86:0c:e7:9a:f9:17:cb:5d:
eb:ae:db:f0:a8:d9:a1:f7:a5:02:6c:6a:f3:02:ea:69:8b:f9:
cc:23:e5:ac:0e:87:33:28:1d:bc:1f:4e:b7:6c:73:ad:60:3b:
11:e1:7b:6b:06:42:e3:e0:14:b0:cc:25:94:ab:39:ed:80:a2:
9b:ac:14:d3:28:62:3a:7d:72:d1:18:93:f6:c1:e1:26:02:64:
a5:b3:73:cf:73:0b:1e:ee:a6:2a:42:a4:44:d2:14:8f:2f:51:
6e:15:b5:7b:aa:0b:95:ee:50:a3:e6:6a:5c:16:4e:af:e6:ee:
5d:9f:f0:87:ed:0f:3e:b8:ab:66:af:af:5f:7e:82:db:6b:10:
0f:f4:bd:c8:71:03:5d:25:4a:32:3c:9a:a2:10:16:03:37:00:
76:ec:00:25:b0:64:81:59:b3:3b:3b:96:2a:9b:92:69:ec:e5:
7c:37:2a:32:1d:47:b3:00:15:56:da:1d:6d:61:4e:78:53:d7:
8b:5c:6d:00:eb:0e:ae:27:c5:9e:15:92:7a:bd:be:66:75:96:
a2:2d:c1:29:4a:3a:55:05:47:4e:dd:94:fc:51:13:41:d0:d2:
25:d4:0e:9e:07:32:26:df:79:22:cb:36:96:bb:c3:c9:66:27:
29:43:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:45 2025 by rpki-client