Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F2C79EC27511EFB6F190B4762E951A.roa
File: F0F2C79EC27511EFB6F190B4762E951A.roa (raw, json)
Hash identifier: 96pxWV0jswH8lqZEVq4Clg24Rd92sJ0wdRGUT8T6BL4=
Subject key identifier: 42:38:AC:C1:D0:94:55:B1:C1:B6:22:8D:EE:15:EF:7E:28:3E:69:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01249A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F2C79EC27511EFB6F190B4762E951A.roa
Signing time: Wed 25 Dec 2024 04:08:48 +0000
ROA not before: Wed 25 Dec 2024 04:08:45 +0000
ROA not after: Wed 10 Dec 2025 04:08:45 +0000
asID: 984
IP address blocks: 154.211.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74906 (0x1249a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:08:45 2024 GMT
Not After : Dec 10 04:08:45 2025 GMT
Subject: CN=676b8550-5e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:0a:cf:d7:e8:8e:00:35:bb:25:11:46:33:
c9:bd:cb:1b:42:f0:c8:6c:01:99:78:7b:97:64:ff:
c1:b2:a1:df:a5:52:15:42:85:1a:05:d3:4d:51:5f:
17:c1:7e:59:63:09:e7:f2:7b:4d:13:81:25:c8:a1:
8a:c9:c3:47:0b:14:42:f4:6f:4e:18:d3:79:b1:9a:
07:bf:41:7b:0f:3d:cc:0f:e0:a2:23:53:01:3e:71:
ef:c4:31:25:2d:80:99:8a:6a:b9:ea:e2:57:ad:67:
0e:c7:20:d2:7e:77:ee:4c:58:9b:c9:2f:ed:7f:cf:
e7:e4:62:ff:3e:ee:b2:17:27:53:6f:66:a6:1f:40:
52:66:7c:81:80:c8:b1:1a:50:11:dc:17:6e:2a:b0:
c2:c0:9f:78:ed:4e:03:d8:a5:45:8b:4d:27:0b:d5:
b0:89:dd:d0:0f:09:3b:58:f1:9c:b7:ec:08:77:b4:
37:86:89:e1:81:2e:19:b9:3e:0c:b8:e4:af:5d:5d:
58:62:06:01:6f:0e:6e:8b:bb:db:66:39:c2:db:7e:
f7:63:2c:46:5b:c9:59:cd:a4:00:0d:88:be:bd:1e:
4e:28:9e:f0:7e:e3:fb:94:68:fb:92:4c:bf:e0:3a:
81:f4:5a:d7:22:fd:e5:73:34:2b:b5:57:c4:58:dc:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:AC:C1:D0:94:55:B1:C1:B6:22:8D:EE:15:EF:7E:28:3E:69:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F2C79EC27511EFB6F190B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ea:aa:9f:7b:6b:8c:df:8d:81:7e:9f:39:cb:ff:52:e1:ed:
52:b2:65:07:84:8f:33:74:b7:8d:78:f7:8f:95:49:e4:1e:73:
7c:0b:33:7b:27:dc:34:82:75:d5:b8:66:32:54:4f:7a:1b:a6:
b5:bc:ba:7c:64:ec:88:88:56:cd:22:17:ef:02:b8:21:f7:14:
d2:48:dc:43:af:df:02:06:45:0d:30:58:c9:7d:b0:35:93:9b:
06:52:83:ae:78:c1:64:7a:a7:61:eb:56:41:89:25:80:f8:8c:
0d:1a:90:6b:a7:ea:27:cf:bf:17:f7:f6:44:89:57:ae:38:e9:
65:cc:b4:bb:91:86:c0:ae:9b:f9:d0:6b:76:0f:71:75:cb:49:
7e:6f:00:60:7f:53:80:5c:73:14:8d:29:cb:77:3d:0d:a4:0f:
e7:8d:69:59:a3:8d:27:b7:d3:f4:4d:0b:b8:7a:34:90:aa:65:
cd:eb:9d:11:24:77:e4:b1:19:a5:3e:12:95:ac:9e:9a:9e:b5:
34:11:e9:cb:24:3d:14:91:cc:49:6e:b0:ae:f0:92:b2:4b:42:
96:40:75:55:af:29:d3:9e:76:08:6c:49:5e:b3:e7:30:f4:83:
40:80:5c:90:60:c8:9c:bd:33:aa:0c:7b:72:55:62:0d:7b:6e:
97:07:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:13 2025 by rpki-client