Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E6D00C52411EFB9965AB5762E951A.roa
File: 0C7E6D00C52411EFB9965AB5762E951A.roa (raw, json)
Hash identifier: d0E3gaaSuK/qkpNq9LAhjlvbtz7H7n3jyy1WbTcIK/8=
Subject key identifier: 46:A9:E2:53:AF:86:64:CE:1E:E3:72:2E:FB:13:05:03:80:DD:C8:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E6D00C52411EFB9965AB5762E951A.roa
Signing time: Sat 28 Dec 2024 14:00:09 +0000
ROA not before: Sat 28 Dec 2024 14:00:05 +0000
ROA not after: Sun 12 Dec 2027 14:00:05 +0000
asID: 17561
IP address blocks: 154.203.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76659 (0x12b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:00:05 2024 GMT
Not After : Dec 12 14:00:05 2027 GMT
Subject: CN=67700469-2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:30:30:9f:d1:86:c4:29:48:c9:5b:2f:d6:
1f:fb:85:01:3f:f8:7c:b3:c9:86:48:ff:7f:a8:9d:
a4:b3:fa:72:cc:94:0c:d1:58:cc:49:f4:ec:14:04:
a5:12:5e:65:36:cf:19:68:a8:23:91:27:f7:f8:78:
f5:b3:68:da:32:36:92:b7:ea:6b:58:f4:8c:65:60:
dc:81:58:f8:b1:77:48:f9:95:7a:1c:20:e9:0e:f1:
31:ab:f1:54:69:a4:e4:bc:5b:35:e6:1e:53:1e:57:
56:a7:d4:4c:13:39:25:38:cc:21:6d:f4:b7:b0:f6:
02:a3:1f:32:35:ab:67:83:3c:ef:05:9d:72:53:90:
75:7e:7f:48:20:84:4f:93:b2:d3:8d:9f:e0:e6:d4:
06:51:34:35:24:73:f4:02:e6:9e:8d:a5:fc:01:6a:
20:1d:77:cb:b3:1b:1c:c1:ca:a8:fa:3b:27:d7:06:
b4:0c:51:8f:4f:9d:57:4c:ee:14:52:0f:e3:0f:0d:
f4:9e:3f:b5:f2:e8:54:e4:bb:d7:af:18:14:05:0f:
81:e2:48:f9:4a:e2:e6:22:fa:1e:fe:95:4a:15:24:
31:d3:51:43:89:87:f1:19:2a:de:91:11:31:14:5d:
f6:79:a3:dc:5f:e0:bf:f9:04:d9:ae:cb:c7:36:d0:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:E2:53:AF:86:64:CE:1E:E3:72:2E:FB:13:05:03:80:DD:C8:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E6D00C52411EFB9965AB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:f3:0e:d7:00:c5:7d:d2:f6:46:49:85:2f:54:0d:f8:14:d3:
ee:af:32:c2:03:95:03:5a:38:15:81:2f:83:c2:db:20:52:53:
02:79:11:dc:2b:1e:f1:99:a5:5a:39:c8:e6:d6:d7:9b:ee:38:
35:c8:5a:9c:88:fd:b3:d3:da:90:67:7b:2a:1b:dd:cb:37:f2:
97:c0:f9:0b:88:a8:c3:7a:e1:f3:e5:ef:76:71:85:5f:9f:15:
fc:96:24:00:14:f5:81:59:51:0b:01:de:a3:de:dc:60:fd:67:
dd:62:0d:97:93:fd:56:dd:8b:b0:fb:5f:ba:ef:64:98:fa:bf:
5d:dc:44:44:62:6e:c2:7d:ba:ea:12:6c:97:a0:25:69:5b:27:
80:ce:5f:cc:2b:7f:c5:35:de:43:70:df:f0:52:3f:81:98:d8:
97:77:79:04:36:31:fa:ff:3b:9c:d6:7c:42:f4:86:40:5f:27:
36:74:e8:f9:87:27:e1:ca:40:54:28:47:3a:19:b6:62:41:a4:
6c:59:db:38:3e:86:42:62:46:71:92:ac:a2:e8:0d:30:46:ef:
32:61:08:9b:93:aa:57:0a:a0:bc:ff:8c:26:df:2c:6b:87:1f:
b1:cd:d6:9f:5d:6a:63:50:45:b7:17:ce:13:3b:17:7a:68:c3:
d4:d5:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:51 2025 by rpki-client