Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1AE13CC26E11EFB7B8BC88762E951A.roa
File: DC1AE13CC26E11EFB7B8BC88762E951A.roa (raw, json)
Hash identifier: S7goPUqKfznze1X1d8dqCPPL3Fg1tQ1Kb6nOz+5Jn8Q=
Subject key identifier: C0:08:A7:2C:8D:65:81:5E:DD:AF:67:FC:EE:BD:D2:AC:30:48:E8:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01244C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1AE13CC26E11EFB7B8BC88762E951A.roa
Signing time: Wed 25 Dec 2024 03:18:07 +0000
ROA not before: Wed 25 Dec 2024 03:18:03 +0000
ROA not after: Wed 10 Dec 2025 03:18:03 +0000
asID: 984
IP address blocks: 154.211.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74828 (0x1244c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:18:03 2024 GMT
Not After : Dec 10 03:18:03 2025 GMT
Subject: CN=676b796f-91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:39:2a:98:1a:20:d2:de:c5:8c:fc:6c:eb:
be:d1:7f:9b:0c:eb:64:be:b3:27:45:6b:00:b4:e3:
1e:36:6b:98:db:87:d6:0f:79:23:87:f3:8c:e6:8b:
66:99:7e:8f:0b:dd:86:3e:ed:5e:84:9a:9a:1d:64:
c5:d1:9d:9d:5e:8a:a4:ae:e5:95:ec:38:14:f6:a0:
7d:db:10:e6:e5:e3:cc:05:70:88:3f:2e:9c:7d:01:
00:96:bd:7f:3b:50:d0:76:52:5d:ea:97:ec:da:93:
6c:a3:8c:c7:f9:c5:78:52:2b:11:10:2d:2a:43:92:
ec:f9:27:6a:8e:b9:6c:5e:39:bc:26:23:2a:b9:0c:
17:5a:0f:a2:d1:da:f3:c8:13:19:90:67:30:a4:bc:
72:1b:96:12:de:b8:00:c9:10:e0:67:56:c3:0f:5a:
a2:24:3a:76:b3:93:c3:d0:43:14:8c:c7:1b:7e:28:
e7:98:94:75:5c:44:dd:cb:66:e9:b4:de:a8:ba:ea:
71:40:b2:e8:dd:27:e3:e8:43:58:47:d1:b6:cc:bf:
b5:5b:4f:1e:c3:55:fb:50:a8:05:b4:45:3f:1b:d2:
1d:05:d8:ea:9e:38:a7:25:67:78:a3:45:a7:65:e2:
8e:fc:91:f8:78:e7:96:f8:41:21:70:0c:bb:27:d5:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:A7:2C:8D:65:81:5E:DD:AF:67:FC:EE:BD:D2:AC:30:48:E8:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1AE13CC26E11EFB7B8BC88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.178.0/24
Signature Algorithm: sha256WithRSAEncryption
40:aa:dc:4a:f1:14:dc:38:d9:0c:cd:8f:62:fd:ee:c0:fc:b0:
00:f5:4c:1b:06:3c:3f:14:32:a3:0a:27:d3:15:f7:d1:6c:4f:
d7:bc:1f:a1:f7:7f:ad:53:2d:c4:f5:5c:af:4a:17:d9:a1:bd:
c3:b9:30:bc:f3:2f:c6:62:d6:6b:68:14:5a:5e:4e:e4:63:15:
16:a6:a3:70:74:5c:22:a6:81:43:97:f6:43:3c:bb:9c:70:61:
fe:03:81:64:3d:80:02:11:ae:84:6f:73:cd:27:73:25:66:e9:
e2:cd:07:4a:27:62:f0:03:58:aa:db:3b:64:31:5c:43:1f:0a:
e2:c7:c6:85:46:47:8b:3d:b1:c4:3b:6b:3b:93:8a:a3:e7:93:
ea:4b:a6:68:80:27:b6:1e:cb:a3:97:99:34:8f:91:bd:5c:1d:
49:3d:21:64:eb:67:2a:82:d0:e8:b9:6f:44:05:05:dd:43:ba:
1c:2b:cc:8f:ef:1d:da:aa:b7:a9:9a:ec:4e:33:1e:21:ae:0b:
2c:45:c1:7d:57:0c:2e:9d:6a:a9:63:be:1e:ee:c9:73:02:9b:
41:f0:4b:de:4e:6a:d0:7b:87:e5:bf:a4:55:fe:5f:3f:c2:dc:
f2:45:f5:b7:6f:10:6e:8c:4f:f0:65:d9:ca:da:c6:bb:2a:ea:
f1:39:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:02:38 2025 by rpki-client