Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD1DB4C63111EFAB6CBE59762E951A.roa
File: 06FD1DB4C63111EFAB6CBE59762E951A.roa (raw, json)
Hash identifier: zYwEIUZsObkYAvxp1zogqQkoT8ysebayie3o4GTVRl0=
Subject key identifier: B5:3F:35:1C:B5:3A:3C:D9:57:51:C4:B3:E8:1F:BC:7D:F1:CC:8B:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD1DB4C63111EFAB6CBE59762E951A.roa
Signing time: Sun 29 Dec 2024 22:05:35 +0000
ROA not before: Sun 29 Dec 2024 22:05:31 +0000
ROA not after: Sun 12 Dec 2027 22:05:31 +0000
asID: 17561
IP address blocks: 154.217.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77810 (0x12ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:05:31 2024 GMT
Not After : Dec 12 22:05:31 2027 GMT
Subject: CN=6771c7ae-34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:d2:d9:cf:27:2a:40:51:90:3b:76:36:28:
34:10:0d:c7:59:70:39:bd:e6:ac:60:93:e3:24:ac:
80:44:69:a7:06:ab:5a:03:10:10:bb:36:db:50:ee:
4c:44:51:eb:30:98:e0:d8:ee:8d:bd:58:f2:49:8f:
3b:ea:cc:dc:fa:df:9b:af:5b:11:ef:32:ee:6a:34:
a8:c6:40:b2:f5:9f:46:5a:65:69:f8:76:ab:53:91:
e8:cc:47:36:91:36:0b:39:e8:0e:0c:1b:ea:aa:ba:
b6:5d:ab:7c:01:ff:98:75:22:61:d2:87:a0:4f:3a:
fd:84:35:41:2a:83:a1:df:f3:36:6e:36:e8:ef:19:
9d:58:a5:68:67:8b:c1:1f:c2:ba:9a:d4:74:4d:e9:
d1:2e:c6:00:70:7c:1a:db:97:b5:d6:f4:af:36:be:
c4:ad:e8:e6:63:be:40:71:b5:a2:dd:60:41:b3:9e:
26:14:e3:fb:47:37:ef:f4:a0:6a:9a:8a:2b:3d:f0:
e3:dd:67:11:b1:ff:9a:81:71:79:ac:1e:9e:8e:6e:
ea:d7:e5:22:25:bc:9d:f0:01:02:64:e5:ba:b2:ed:
f8:a9:03:48:49:5f:bb:df:55:31:e7:f0:7e:4f:bd:
81:17:83:b5:91:a9:ec:43:42:86:db:ec:a8:39:7a:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:35:1C:B5:3A:3C:D9:57:51:C4:B3:E8:1F:BC:7D:F1:CC:8B:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD1DB4C63111EFAB6CBE59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:76:f8:b3:35:78:69:b1:ef:c2:da:e2:55:7e:61:0d:c4:9b:
04:81:07:9b:c5:fc:1d:70:bb:08:c5:8c:10:8f:b7:52:d9:63:
51:53:00:5e:6e:05:77:ed:26:20:6a:df:0e:38:b8:df:ce:b4:
86:b0:d4:d5:f5:b7:48:4f:c2:b7:9b:19:54:a6:60:11:69:9b:
0d:04:f4:f4:43:75:38:c8:71:c0:00:d2:dd:1d:3d:58:5d:83:
97:3c:1a:b8:a7:60:6f:7a:3c:fc:01:9a:d0:39:6e:ec:e4:83:
24:79:b2:9a:f2:26:ed:a9:39:16:67:ae:cf:41:b4:e0:96:c4:
d9:4e:03:75:b9:ba:d8:c7:9d:b4:82:84:35:3a:0b:c5:d1:72:
e8:35:81:8e:52:66:50:f8:9f:d8:bc:07:19:96:69:d1:3c:96:
19:6f:8e:11:56:a3:4b:f3:89:06:03:49:d0:d5:e1:e0:8f:e4:
ae:ef:ac:7a:64:28:51:41:e5:8d:91:6c:58:db:36:df:85:d2:
7f:df:23:87:47:c4:f4:28:a3:ca:f5:25:0c:cf:79:84:e2:61:
b6:32:77:25:e7:79:50:1c:a4:41:96:bf:d0:81:fa:de:91:c2:
42:d5:78:bc:3c:f8:72:f3:c8:04:8e:2f:c5:d9:b7:4e:f1:88:
83:18:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:36 2025 by rpki-client