Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8BEFCA0C0C911EF8963B478762E951A.roa
File: C8BEFCA0C0C911EF8963B478762E951A.roa (raw, json)
Hash identifier: 5CgaQk7yCxydx/2lFtP689/JiQ9NjVTmWyS6vfMLsHs=
Subject key identifier: 26:9D:20:98:8F:9B:A4:C6:3F:BC:35:AE:C7:3A:7D:0C:B0:3C:BC:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8BEFCA0C0C911EF8963B478762E951A.roa
Signing time: Mon 23 Dec 2024 01:03:56 +0000
ROA not before: Mon 23 Dec 2024 01:03:53 +0000
ROA not after: Wed 10 Dec 2025 01:03:53 +0000
asID: 984
IP address blocks: 154.82.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73192 (0x11de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:03:53 2024 GMT
Not After : Dec 10 01:03:53 2025 GMT
Subject: CN=6768b6fc-3eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:bb:7c:8c:e2:c5:9d:b5:49:84:6b:3e:d6:
e5:5c:b3:45:c0:bd:48:15:a1:7b:e1:22:1b:b8:9a:
55:30:71:9b:fa:86:bc:0a:67:75:0d:a3:c5:67:6a:
36:f7:45:6d:87:f8:57:a3:e9:91:6d:5e:06:61:22:
a0:3d:34:87:8e:54:e0:3f:d9:0e:01:0e:7d:ab:ec:
bb:52:44:59:cf:dd:f6:12:86:45:24:f6:ff:bf:8a:
f5:d8:ab:ef:d5:89:d9:13:95:84:84:73:d0:b4:db:
49:eb:ae:7e:42:99:de:9b:33:5c:03:0f:8a:66:ac:
0d:06:9d:96:73:4d:d2:16:84:d9:7d:3a:2e:b0:19:
70:ca:07:11:40:7d:5d:14:40:02:1c:68:86:d1:5e:
9a:2d:c6:42:87:99:73:8c:75:72:ad:ac:04:51:27:
16:26:70:51:0b:6a:c8:a8:fb:e7:42:18:1b:6b:57:
63:80:05:a0:ae:7f:4c:45:8d:41:4a:53:86:3a:d4:
52:d3:24:36:4d:f3:9f:8e:24:72:ee:5f:ce:95:50:
a5:df:70:4f:ef:b2:9d:13:3b:e6:94:5c:3a:4a:22:
9c:2c:b5:cd:1a:50:60:a7:cb:1d:09:32:a5:3a:9b:
6e:a6:02:56:19:32:f7:b3:d7:98:25:bf:d3:86:97:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:20:98:8F:9B:A4:C6:3F:BC:35:AE:C7:3A:7D:0C:B0:3C:BC:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8BEFCA0C0C911EF8963B478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fb:19:f7:2b:30:47:f0:c9:95:7b:a2:f8:87:03:14:82:b0:
4c:23:6c:12:f2:d5:fd:a2:ed:c5:31:75:d8:42:3b:38:76:24:
00:68:d9:85:dd:66:d1:39:9c:3e:15:be:8c:7d:7b:4d:8d:33:
30:7d:b5:8e:a8:8b:ca:28:26:f6:4f:6e:9e:10:84:ed:8a:38:
44:f1:43:95:59:fa:d2:b6:83:c7:89:ca:d8:5a:f4:58:21:55:
2a:4b:0f:60:5b:5d:76:45:ed:2b:77:51:6e:0a:14:f6:23:a0:
3e:02:07:1b:e1:3f:24:cd:a1:7e:9e:07:c3:24:6d:34:b9:e7:
7e:1f:52:81:3e:22:aa:e6:61:a6:82:2b:32:cb:17:43:59:33:
9b:d0:da:1c:e1:64:f0:95:b0:5e:f4:1b:0d:2d:a9:ef:e0:df:
d8:37:d1:e1:46:60:9a:7f:7e:5e:9d:0a:ee:08:ea:7d:4f:8d:
08:09:f6:f4:21:c0:26:e7:89:cd:39:48:0c:42:70:18:99:62:
7f:ff:23:72:7f:2c:d4:7a:75:25:cf:06:96:55:f6:64:6e:a5:
88:a9:52:99:81:df:9a:38:c6:e5:12:54:c3:1f:bc:d7:64:ba:
c3:ae:33:25:38:31:41:7a:7a:93:4b:f2:b9:61:99:24:e3:6f:
52:b0:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:53 2025 by rpki-client