Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F154B946C26F11EFAC37238F762E951A.roa
File: F154B946C26F11EFAC37238F762E951A.roa (raw, json)
Hash identifier: xiCnfFHGkEhr9K8Dchm0WwnTM6WARvmhsFEqGCataSI=
Subject key identifier: 8C:70:32:28:16:AA:7F:68:74:99:11:04:B4:8E:84:35:0A:7D:BE:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012458
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F154B946C26F11EFAC37238F762E951A.roa
Signing time: Wed 25 Dec 2024 03:25:52 +0000
ROA not before: Wed 25 Dec 2024 03:25:48 +0000
ROA not after: Wed 10 Dec 2025 03:25:48 +0000
asID: 984
IP address blocks: 154.211.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74840 (0x12458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:25:48 2024 GMT
Not After : Dec 10 03:25:48 2025 GMT
Subject: CN=676b7b40-ebed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9b:57:d1:32:09:3b:33:8b:98:37:21:52:e9:
4b:a9:43:30:2a:9e:6a:8b:96:84:69:ea:91:4c:2a:
e0:12:ee:d9:d9:d1:0b:74:ac:f4:a7:81:a5:cf:e5:
70:68:13:08:fd:1a:84:bc:f9:2d:60:92:47:a0:49:
c3:c7:55:7f:38:3a:fc:6a:7a:e0:f8:35:cd:1c:54:
67:1d:c2:d3:9b:ad:d3:b5:fb:52:96:b2:45:2e:e4:
0e:da:ff:38:df:3f:dd:92:c9:7e:d3:9d:6d:4c:d4:
1c:fc:df:d1:19:f9:b7:99:06:98:53:87:ac:42:2f:
9d:b1:ea:32:f8:62:4c:7a:3f:f5:c7:a7:36:7d:df:
f3:c1:d4:bd:42:dc:10:41:d8:83:31:e0:42:a1:fd:
2f:40:2c:cf:2a:07:df:f7:6a:86:2a:72:6f:ec:3d:
1f:91:6d:ea:44:47:4d:63:3f:14:e4:7f:14:f1:a5:
05:65:47:24:dc:16:94:55:55:b1:cf:d9:7b:53:ef:
33:e3:ff:5d:b2:b9:0e:ad:1a:bb:d4:cb:6a:01:ff:
8a:da:b3:4e:d7:74:7b:b1:df:ea:04:71:1c:e1:27:
f2:c9:a5:19:33:66:fe:33:06:30:30:23:08:54:39:
b5:37:a2:3b:dd:fa:9f:93:07:39:f2:54:da:09:34:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:70:32:28:16:AA:7F:68:74:99:11:04:B4:8E:84:35:0A:7D:BE:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F154B946C26F11EFAC37238F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.195.0/24
Signature Algorithm: sha256WithRSAEncryption
85:86:e5:92:0c:5e:4b:c2:84:ad:5e:c8:21:4e:e0:40:f1:42:
11:29:3b:bc:36:9a:73:a1:25:c7:60:c6:f7:ee:4a:81:f8:77:
23:95:6c:9a:88:fa:29:f6:e2:32:fc:b7:53:dc:86:99:89:77:
01:64:57:11:ee:f3:25:58:8c:a7:1d:0e:95:c2:60:66:f6:c6:
50:51:17:39:9c:5f:7a:81:6c:04:94:bc:6f:33:b4:91:74:7d:
78:85:39:29:93:93:b2:b7:4a:b5:ad:3c:6c:69:d6:c2:a2:ad:
50:ed:35:30:b4:da:bb:f4:23:aa:5d:06:97:c2:d6:05:46:29:
a6:45:ae:6c:78:a3:f2:71:03:f1:2e:57:a9:7f:45:62:07:33:
9f:4f:24:fa:b1:42:bc:8a:53:2d:1f:84:b2:8b:ee:77:52:97:
18:ce:fb:21:bc:56:5c:3f:7b:f6:3a:15:ab:c3:09:c7:53:34:
da:16:a4:24:5e:1a:c5:14:1d:f4:0a:5a:55:db:7e:d5:7c:35:
d7:1f:40:d7:45:cf:eb:65:ac:c8:74:d1:53:c6:84:35:26:e9:
93:0c:cd:3e:a0:86:46:dc:71:86:56:8e:31:4d:2e:86:83:07:
e9:71:67:65:7e:9d:40:13:e5:a2:d9:21:16:f4:07:1f:32:2f:
1b:eb:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:45 2025 by rpki-client