Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D6E32C60811EF92EECE57762E951A.roa
File: 0B0D6E32C60811EF92EECE57762E951A.roa (raw, json)
Hash identifier: 4qBKrynz5/fd6FGjZMg86f8FfR1WyDhaetwGmTjj5Kg=
Subject key identifier: 18:10:66:6B:A2:3B:F8:07:75:E8:A0:CA:84:7E:A6:F4:D1:D9:61:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D6E32C60811EF92EECE57762E951A.roa
Signing time: Sun 29 Dec 2024 17:12:12 +0000
ROA not before: Sun 29 Dec 2024 17:12:08 +0000
ROA not after: Sun 12 Dec 2027 17:12:08 +0000
asID: 17561
IP address blocks: 154.217.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77466 (0x12e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:12:08 2024 GMT
Not After : Dec 12 17:12:08 2027 GMT
Subject: CN=677182ec-d782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:85:98:d8:2e:11:05:ac:ba:8d:06:1a:69:
9f:cf:63:3b:87:2c:86:b1:07:5b:af:b1:79:52:7e:
ce:66:01:dd:b2:e3:f6:26:f1:d6:1f:cd:48:bd:b8:
49:4a:38:5a:c4:65:f2:51:66:93:3d:0f:d0:6b:19:
eb:92:16:a9:81:37:40:07:61:27:18:19:68:b5:ac:
8f:8a:14:91:23:6b:48:cd:51:08:a9:87:aa:4d:40:
fa:67:a5:60:12:7f:33:c4:29:9d:f0:27:86:9c:71:
f1:ef:32:cc:d2:57:b6:e8:5e:8d:6d:c9:fe:3e:28:
bf:1f:71:42:ca:b8:74:30:e0:6c:0b:8b:a6:1d:98:
f1:07:da:cc:a5:a1:a9:1d:b1:d1:c6:c9:36:97:dc:
6e:92:93:a0:2f:5d:e1:d7:a1:5c:c1:85:d4:82:8e:
c5:99:43:74:f3:42:09:2c:0e:bf:d7:a8:d2:5a:d8:
63:51:13:e7:54:ec:61:58:3f:9c:d0:b3:6a:c2:f6:
b4:18:66:13:52:1a:3c:84:f6:a4:e4:be:34:8b:04:
ed:9f:dd:75:8f:7f:6b:a5:dc:11:7c:a1:49:df:2a:
17:0b:dc:7f:c5:7f:ec:bb:26:60:b3:10:8b:28:82:
9a:c1:b9:e7:36:31:d8:a2:99:5b:4f:50:d1:25:b3:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:66:6B:A2:3B:F8:07:75:E8:A0:CA:84:7E:A6:F4:D1:D9:61:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D6E32C60811EF92EECE57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:44:68:67:07:52:2f:8e:17:97:67:d7:fe:4f:8f:7e:d8:30:
de:74:3d:1b:21:57:15:d0:84:e0:e4:7a:93:c5:c6:2c:df:8b:
68:00:ca:89:9e:8c:55:4b:10:da:0b:5f:27:81:69:7f:9b:98:
58:eb:27:35:51:a2:e9:bf:e9:3f:f6:25:88:b2:90:e8:9f:4b:
38:77:c8:64:72:3f:9e:26:4b:6a:9c:11:6b:09:48:b2:ec:cc:
f4:fa:3c:99:2e:d1:ea:44:1f:90:c0:31:f5:fe:87:f7:b7:e1:
de:84:e2:3b:2f:e9:b2:08:00:e8:0e:5f:fb:bb:8d:c9:67:cd:
65:95:ce:40:16:f3:2c:45:8f:c9:8b:e6:a3:a7:f3:82:3e:d4:
86:68:f5:91:17:27:ef:db:e9:50:d6:43:8e:76:b1:ff:be:6f:
57:2a:0a:71:9c:1e:26:5b:1a:69:cd:a0:ee:4c:2a:51:fd:e0:
5a:af:07:fd:4c:d2:4e:4b:56:e4:9d:36:ad:67:25:e4:8d:a4:
28:f6:e1:7d:36:1b:33:ec:8a:6e:e2:ab:94:24:42:3c:88:f7:
ed:94:41:ef:a4:2e:00:5d:f3:18:95:f7:a2:e4:c0:27:e4:64:
1e:78:d0:11:02:d8:bb:9e:97:ad:6c:9e:ab:c1:7f:4c:c7:fa:
bf:20:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:52 2025 by rpki-client