Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F71F63F2C1B211EFBC1A394E762E951A.roa
File: F71F63F2C1B211EFBC1A394E762E951A.roa (raw, json)
Hash identifier: Gs0GS8SsoN5gFxkYjFDUrV512mwmIQn89QN5a/JB2Kc=
Subject key identifier: A2:4E:95:66:26:9B:D1:99:9C:06:52:55:BA:FF:C8:C2:C5:46:81:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01218B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F71F63F2C1B211EFBC1A394E762E951A.roa
Signing time: Tue 24 Dec 2024 04:53:07 +0000
ROA not before: Tue 24 Dec 2024 04:53:03 +0000
ROA not after: Wed 10 Dec 2025 04:53:03 +0000
asID: 984
IP address blocks: 154.193.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74123 (0x1218b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:53:03 2024 GMT
Not After : Dec 10 04:53:03 2025 GMT
Subject: CN=676a3e32-b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:90:db:dd:f8:6a:fa:d5:57:76:17:32:5e:
bd:e1:6b:05:4c:b4:e4:8b:47:0a:dd:20:59:d2:84:
aa:eb:63:97:1a:81:8c:66:ef:81:a8:83:5c:81:b3:
80:74:b0:69:cb:87:e4:f9:43:65:35:87:eb:d1:40:
c8:6f:ef:3b:01:0d:c0:bc:e6:36:fa:72:1c:fc:d1:
5f:1b:6f:fd:57:43:1a:35:b2:b7:88:03:e3:8b:0e:
fc:31:68:8d:cb:a0:1a:d5:ae:4c:7a:b0:02:d6:01:
c2:14:8a:70:e4:3b:3d:f9:fa:cc:4c:26:64:ab:be:
81:2b:df:b5:5e:98:70:54:48:e1:ce:53:73:c7:56:
8f:1a:8b:c3:61:b8:23:6d:c2:4b:a8:84:f9:07:21:
7b:ba:de:ef:9f:61:74:ab:be:cd:23:d0:52:01:9b:
73:ca:4f:d4:53:f6:2e:1a:e4:bf:98:09:73:e3:55:
d2:cb:7b:67:25:bb:7e:9c:3a:74:8a:23:48:60:6b:
f2:3e:67:f9:04:9a:f8:ef:26:d4:95:60:cc:2e:57:
6c:e3:b7:10:db:54:dd:b1:18:e2:15:32:35:0a:a7:
1d:71:07:c2:b1:ff:da:39:df:07:29:68:f5:aa:da:
bf:43:19:58:94:7a:55:01:99:f3:b6:4b:ec:eb:fb:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:95:66:26:9B:D1:99:9C:06:52:55:BA:FF:C8:C2:C5:46:81:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F71F63F2C1B211EFBC1A394E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.111.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c0:0d:89:dd:51:70:3a:0a:96:ed:cb:53:e5:fc:2d:97:4f:
2e:00:cc:b7:f3:9c:bb:12:09:75:cc:0b:1e:6a:ad:21:68:af:
c8:0c:93:bc:00:3c:da:b4:81:04:93:a3:78:10:e6:0c:18:25:
9c:b4:52:36:2e:94:bd:6f:57:5d:54:65:b6:4d:f7:52:d1:cb:
17:72:dd:0b:5c:38:38:07:f6:65:22:0c:f4:10:8b:e9:81:c8:
25:23:14:ae:45:c3:ff:12:52:59:4c:af:aa:25:7b:88:c0:dc:
25:86:bb:38:60:37:03:31:91:68:25:5d:24:eb:1f:0a:b2:27:
6c:64:5f:9d:a0:a7:a8:07:da:05:34:10:d9:e4:2e:c1:e2:b7:
c4:9b:1c:18:e1:f6:4f:8b:e9:94:a4:47:fd:ee:91:fb:1e:a8:
9f:c0:51:59:66:8c:a1:c0:2b:10:4e:b2:fc:c4:9c:45:bd:d0:
88:99:99:7b:0a:2a:12:c5:f1:76:bb:7a:03:ee:3b:7e:fe:50:
7f:fa:76:68:be:ba:ce:8c:9e:9c:7e:5f:6d:b3:e4:2f:69:ae:
df:29:d8:62:11:11:10:92:74:66:b4:a2:ad:d8:e0:4c:65:9f:
48:10:8e:52:4e:08:ca:16:86:7a:87:4b:86:7e:96:84:54:0d:
64:5b:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:02 2025 by rpki-client