Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42DC616C26C11EFB4FB6B79762E951A.roa
File: E42DC616C26C11EFB4FB6B79762E951A.roa (raw, json)
Hash identifier: aoDjUGQUyVwCMwxhXW73RJwERBkoP5ggu4tWZgOVYNw=
Subject key identifier: DC:FD:E3:25:24:E2:66:87:AD:B4:0D:40:35:F1:F6:A7:23:EB:B6:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012436
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42DC616C26C11EFB4FB6B79762E951A.roa
Signing time: Wed 25 Dec 2024 03:04:01 +0000
ROA not before: Wed 25 Dec 2024 03:03:58 +0000
ROA not after: Wed 10 Dec 2025 03:03:58 +0000
asID: 984
IP address blocks: 154.211.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74806 (0x12436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:03:58 2024 GMT
Not After : Dec 10 03:03:58 2025 GMT
Subject: CN=676b7621-2bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:55:00:9e:5e:b8:22:d6:d2:79:09:0b:af:
56:0c:13:2e:54:a9:d8:37:64:17:68:7a:14:b8:ed:
c9:31:88:ac:68:b4:3d:39:be:0b:92:17:a0:33:1c:
4f:d8:3a:36:0e:fb:9b:a5:ef:c4:eb:5b:4c:11:42:
1e:78:7c:3c:12:24:4a:33:03:03:9b:28:bd:b3:ae:
2b:a5:a8:6a:3b:d9:39:29:37:27:63:8d:00:d6:6a:
17:be:b4:67:87:a8:ea:d8:f1:67:ce:f7:8f:20:62:
d9:4e:f2:f5:be:48:0c:df:a2:46:7c:41:eb:95:a7:
bd:84:39:c5:8a:fc:45:a8:0f:16:51:61:bc:cd:e0:
1d:49:4d:b6:0f:a6:88:eb:fc:a3:be:c0:84:0b:3a:
37:c6:1e:e7:b4:ce:74:3c:3f:5c:25:09:a5:dc:49:
06:1d:ff:56:53:f4:e6:76:c5:fd:82:61:c4:45:3d:
ee:89:b4:7f:76:de:5b:11:d0:49:83:79:fb:a6:6c:
c6:43:5a:6b:8b:a6:91:f3:ab:3d:1f:73:b6:68:03:
ca:87:59:88:d4:be:87:c1:30:83:e5:34:8a:f2:15:
ff:ba:4b:1f:c2:a4:a2:46:30:c8:09:ac:08:d8:1a:
a3:82:99:98:9d:d1:da:a9:1b:08:4b:a4:a7:c4:00:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:E3:25:24:E2:66:87:AD:B4:0D:40:35:F1:F6:A7:23:EB:B6:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42DC616C26C11EFB4FB6B79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:57:e9:91:34:0f:73:12:ae:05:8a:36:4b:cd:ba:ce:be:16:
71:d4:b5:46:d3:1a:33:e8:aa:95:a1:9d:a6:c9:36:31:d5:b8:
ec:8d:0e:b3:ed:d9:fc:29:9d:35:d7:57:18:a8:3e:eb:6a:22:
5c:09:4a:fa:b6:f5:3d:d2:45:6a:e5:3b:0d:2e:eb:e2:90:54:
b0:3d:a6:0d:9a:40:27:03:87:f8:0f:29:f9:73:f5:a4:d1:cc:
b4:c4:17:2e:2e:66:b6:1e:1e:09:bc:e2:af:94:36:89:0e:0b:
df:68:52:70:b2:78:63:e9:79:d0:d3:d0:83:1a:2a:29:a4:ac:
58:c1:ec:7b:8c:2e:1f:a0:58:53:71:4a:6b:3d:9d:1b:c9:1e:
fc:23:bc:ef:27:f0:f2:ee:a0:70:64:0c:fc:6b:82:fe:6f:1d:
b2:62:79:ce:07:0d:74:6c:d7:35:73:a4:0c:fe:03:13:e3:e8:
dc:ab:c4:ab:a6:d5:d1:37:1d:54:e4:a4:77:ea:13:90:d6:15:
1e:07:d4:ed:2e:13:34:e8:20:08:b6:f9:b6:95:3e:31:53:57:
9e:b6:b3:06:43:3d:d6:2f:c6:a0:fb:ff:37:21:a3:c7:88:fa:
31:3b:ba:72:b8:5e:da:e8:41:27:4e:d2:40:e5:cd:c0:31:9b:
fe:18:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:50 2025 by rpki-client