Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34E95EEC41811EF9629229D762E951A.roa
File: C34E95EEC41811EF9629229D762E951A.roa (raw, json)
Hash identifier: xWxMJsGoWvA1jOiK8nG+CkcIdEX8WyuHnjruaiRcGyA=
Subject key identifier: 70:4D:B5:F3:AF:A6:6B:CE:BC:1E:67:D3:CC:FC:F5:DB:FA:0E:C8:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34E95EEC41811EF9629229D762E951A.roa
Signing time: Fri 27 Dec 2024 06:06:51 +0000
ROA not before: Fri 27 Dec 2024 06:06:47 +0000
ROA not after: Fri 12 Dec 2025 06:06:47 +0000
asID: 984
IP address blocks: 154.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76151 (0x12977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:06:47 2024 GMT
Not After : Dec 12 06:06:47 2025 GMT
Subject: CN=676e43fb-bfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:a0:11:fa:4c:16:ad:db:d2:7d:5f:73:24:
4e:e9:d1:87:9f:34:3c:a5:84:9f:1b:eb:42:70:c3:
f7:66:2f:15:6a:00:b4:30:c0:3b:49:3d:ed:83:e5:
f5:64:07:e1:a0:b7:f4:8d:19:57:80:82:40:42:46:
69:d2:a2:de:c9:be:cb:e0:d8:e5:92:14:20:12:2d:
cb:64:b5:ce:42:9a:61:75:7b:6c:35:fe:bc:e9:08:
9b:0a:89:ab:a7:87:3d:48:96:1e:ae:2a:fc:dc:c7:
b6:00:41:e8:c9:16:d8:8d:19:51:c2:bd:da:0c:74:
c6:b5:83:d4:16:f6:3e:45:73:2b:4d:48:ba:fd:32:
13:8d:6b:9b:7a:db:7f:d8:a8:b3:9c:07:20:77:ad:
da:54:f8:4e:46:dd:ca:0e:c7:ad:72:61:7e:f4:b6:
04:77:18:9e:58:a8:da:19:84:76:04:fc:f2:e3:6f:
07:17:1f:4b:cf:59:8d:6a:ed:c5:1b:a6:f9:27:d1:
f6:e2:60:ab:b6:59:9d:da:c5:48:43:57:e5:6d:35:
1e:a2:3b:cd:76:97:0f:b5:4c:e5:f5:ef:4d:ad:c5:
e1:66:39:1b:d1:76:6a:1a:8d:0d:9d:b0:c0:46:82:
5e:11:a8:df:17:2c:3a:69:4d:54:e2:34:13:7a:25:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4D:B5:F3:AF:A6:6B:CE:BC:1E:67:D3:CC:FC:F5:DB:FA:0E:C8:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34E95EEC41811EF9629229D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ec:d8:8d:67:1d:ec:70:4c:df:c9:f3:9d:eb:8d:0a:1a:de:
3f:2d:80:47:b4:56:3f:ad:11:3d:ba:0b:66:2b:f0:60:7c:0a:
e9:67:1b:d2:e2:f1:7c:75:62:64:b0:35:0a:dd:cc:a1:37:ef:
9f:78:74:47:8b:b8:65:63:24:13:7c:44:d4:f6:86:a0:09:c9:
86:ee:25:86:ea:37:74:9d:27:c6:3b:52:9b:f2:8b:a3:ec:6a:
6e:7e:70:9b:9d:f1:84:fc:5a:9b:f3:13:e6:b5:70:e8:f3:8b:
7d:8e:6a:88:81:9d:5c:8d:f8:f2:44:87:b4:70:55:1b:e5:04:
5f:c3:da:93:fb:b8:a0:d0:98:eb:d2:02:5f:08:29:14:c6:93:
35:03:6d:9a:3b:14:54:e7:86:7c:04:52:b6:c2:9e:44:a4:54:
3b:94:a4:a2:a6:bd:d6:18:d3:a2:64:4d:b3:e1:44:8b:71:0d:
ce:32:10:f7:b6:40:9b:31:e6:e1:06:c0:f6:7c:6a:39:1b:20:
b8:fe:26:34:6b:d4:c8:d1:ce:80:a4:b0:e5:47:0a:d1:2b:6b:
f8:e7:11:32:f4:30:90:ac:12:fe:22:db:7d:1f:95:57:c7:55:
d0:e3:9b:b4:9e:ce:ce:9b:ef:49:c3:f0:7a:1c:3e:39:53:8c:
56:92:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:56 2025 by rpki-client