Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC0B38C62B11EF8ED071B3762E951A.roa
File: 0AAC0B38C62B11EF8ED071B3762E951A.roa (raw, json)
Hash identifier: 9yxSHjU49PrCextzun4VCA52rq9m4CpSIOmd2hc636o=
Subject key identifier: 00:89:34:9E:3C:48:CE:63:AB:09:67:38:24:F6:1B:8E:E5:11:6D:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC0B38C62B11EF8ED071B3762E951A.roa
Signing time: Sun 29 Dec 2024 21:22:44 +0000
ROA not before: Sun 29 Dec 2024 21:22:40 +0000
ROA not after: Sun 12 Dec 2027 21:22:40 +0000
asID: 17561
IP address blocks: 154.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77760 (0x12fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:22:40 2024 GMT
Not After : Dec 12 21:22:40 2027 GMT
Subject: CN=6771bda4-c36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:0e:53:51:53:7e:98:c9:45:9b:1f:1b:32:
3e:01:12:ca:b3:3c:66:9b:7b:c4:fa:f0:19:34:8f:
98:04:ea:9d:35:27:1b:c2:0f:c7:9f:e6:dc:5b:dc:
da:4c:8b:11:08:3d:1e:53:2b:fa:b7:f3:2b:cf:ee:
e6:bd:fa:2e:78:3a:d8:5c:59:da:5d:b4:17:06:03:
20:e0:a9:c8:77:b8:b9:41:22:4f:51:75:71:e3:1b:
de:f2:8d:36:4f:29:9b:0f:26:92:08:ef:b5:4e:ae:
6a:23:d0:c8:43:db:ab:82:9c:32:d2:37:03:72:8b:
ce:8e:26:1b:30:26:31:da:6a:63:e5:eb:d1:90:c7:
75:27:2c:62:b1:43:71:f2:14:40:4e:c7:2f:3c:32:
0d:4c:a1:49:a3:a7:24:ce:0f:dd:5f:8e:2e:e7:f9:
d5:b5:2b:54:d2:18:b0:af:aa:03:48:e2:6f:d3:38:
04:cc:31:e6:d3:09:1d:42:f3:38:df:da:30:a3:cc:
00:ab:c9:42:4c:f5:6a:22:2c:11:c9:79:6c:85:37:
c5:9a:4c:e2:0a:a1:ec:14:c1:05:b9:6d:bb:7a:08:
cd:76:7c:3c:0b:67:87:3c:a2:7b:dc:d9:e0:9e:67:
12:ba:31:e0:38:16:68:40:4e:fc:cb:97:fd:a0:07:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:34:9E:3C:48:CE:63:AB:09:67:38:24:F6:1B:8E:E5:11:6D:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC0B38C62B11EF8ED071B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:55:26:25:f9:9a:d4:ab:1e:ed:fa:d9:65:98:7e:13:fc:c5:
41:b5:95:41:89:d0:18:67:b1:d5:07:ce:13:ee:94:98:81:aa:
44:5f:9f:1b:8e:da:19:1d:ef:55:05:d0:55:f0:8d:14:ac:73:
28:67:10:cd:fd:09:90:41:57:67:b2:56:6a:f8:03:3a:a9:07:
13:ef:50:e0:b0:87:a1:d2:62:a7:36:46:d7:c4:7b:0e:eb:79:
6c:a4:78:f8:11:87:8f:0c:a6:b2:4e:b3:32:c9:3c:fb:f2:f2:
54:93:1b:2c:c3:62:47:ac:6b:7f:10:65:53:85:19:07:88:f3:
0a:3d:21:eb:5e:53:c7:a7:03:8b:11:c8:88:6a:77:81:05:7d:
bb:c1:5d:3c:dd:02:7e:70:9a:f4:cf:b3:9d:95:3a:0b:13:c8:
b5:3b:00:05:17:84:1d:18:82:5d:29:6f:31:66:20:c2:75:14:
db:b2:3d:6d:45:f5:0b:3f:1f:4a:e2:84:f3:61:aa:db:0b:1f:
f1:55:ec:b2:2e:10:f1:12:f9:e6:e6:be:9a:b6:d6:6e:15:cc:
dc:59:2c:0c:7e:0a:2e:a9:73:87:1f:57:cf:a3:20:97:04:92:
61:71:18:25:0c:0e:0d:2c:96:35:e3:3d:38:b8:90:f2:66:72:
bf:10:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:46 2025 by rpki-client