Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F0D64AC5FD11EF94225692762E951A.roa
File: 02F0D64AC5FD11EF94225692762E951A.roa (raw, json)
Hash identifier: JYwFhRZMKmoR0nMxCvtb6VrE9wqF0ICLIeaxZ8LdqBA=
Subject key identifier: 81:08:9C:74:86:87:69:06:E5:46:DD:4A:47:57:F9:F9:98:E8:77:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F0D64AC5FD11EF94225692762E951A.roa
Signing time: Sun 29 Dec 2024 15:53:14 +0000
ROA not before: Sun 29 Dec 2024 15:53:10 +0000
ROA not after: Sun 12 Dec 2027 15:53:10 +0000
asID: 17561
IP address blocks: 154.217.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77372 (0x12e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:53:10 2024 GMT
Not After : Dec 12 15:53:10 2027 GMT
Subject: CN=6771706a-9727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:02:f4:35:c8:7b:91:b5:c3:f6:12:7d:d9:
a7:f2:d7:14:7e:d2:83:42:0b:15:ea:ce:c1:0e:20:
31:b1:ae:21:c0:d1:2e:cc:46:c0:13:a7:b8:ba:ce:
b0:ca:c0:7e:48:fe:4b:23:0a:ad:b0:3b:9b:2c:1d:
e5:55:b3:23:f6:ef:db:35:32:8a:01:79:73:fc:3e:
1c:10:52:0e:2f:7f:55:37:bb:84:4c:55:50:06:88:
bd:ba:a0:ee:9d:78:e0:03:5c:dd:8d:ca:ab:8e:1d:
01:84:3f:e8:85:3e:d8:2d:21:f5:3d:9f:e2:57:92:
b9:6d:86:97:74:2c:09:81:c9:49:8d:dd:98:c1:8b:
84:43:d7:d7:b2:ef:07:13:19:19:e8:8d:08:a8:a3:
61:57:7c:f1:c4:2b:b1:d7:cf:73:52:ee:6a:91:3b:
c2:26:59:ba:2b:08:32:b6:9a:cd:e6:5c:1f:02:87:
c4:82:dc:01:6f:af:03:28:cd:2b:8f:c4:14:be:35:
63:40:5d:b5:86:32:b1:cc:23:51:f5:f2:15:ef:d3:
bb:b1:fd:14:a7:04:bd:7e:bd:74:e3:89:b7:dd:05:
4f:a5:cd:31:a6:77:42:fd:f3:97:ef:6a:5c:d7:fd:
32:2b:69:51:7a:9e:1b:92:a3:cb:13:ef:37:e8:cb:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:08:9C:74:86:87:69:06:E5:46:DD:4A:47:57:F9:F9:98:E8:77:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02F0D64AC5FD11EF94225692762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3f:3b:be:db:8e:0a:46:84:e4:64:23:7b:c4:3d:50:02:77:
f8:2c:09:9e:41:33:00:86:58:4e:ef:e3:21:e4:06:97:4f:30:
9b:09:73:ee:f0:6a:17:41:81:ad:38:f7:c4:54:32:ff:c2:a0:
c8:48:32:03:a6:ea:bd:fb:2e:5b:d1:6d:9d:d9:46:88:c6:f7:
a3:eb:72:5d:1a:9b:09:04:af:5c:c0:82:35:81:6e:bb:fb:12:
8c:c2:32:b0:ac:1e:49:c1:03:8a:83:3e:c0:7b:10:34:c2:80:
be:45:a4:df:51:0a:d8:84:e8:54:e2:95:bf:fb:3d:a7:e5:96:
4d:61:49:37:89:7a:b0:d9:55:60:01:e4:63:c3:23:27:fe:d3:
92:a3:df:96:cc:25:d2:1a:4a:17:50:36:f8:0b:5c:1c:bc:cb:
72:42:6d:33:5e:00:18:6c:ee:8d:0c:60:cc:fa:fa:d7:b4:1a:
0d:ef:3d:da:c1:51:42:c3:63:ea:52:c1:9a:dc:e1:01:0a:74:
ee:72:51:25:01:90:02:42:8b:40:58:34:fb:e9:43:e5:a1:f2:
27:27:e9:ef:4f:aa:15:fe:3e:5d:bc:6c:b4:6d:4b:80:28:0d:
ae:d7:39:ac:f8:57:f6:cf:79:a3:2b:d1:f5:11:65:e3:ef:2a:
09:43:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:02 2025 by rpki-client