Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15181FF2C60E11EFA3CEDB7D762E951A.roa
File: 15181FF2C60E11EFA3CEDB7D762E951A.roa (raw, json)
Hash identifier: 5HA2kPARlxET6SOcWnynZOPP+TND011i8v0HJnjVY+0=
Subject key identifier: 15:EC:1E:95:A8:DC:FC:87:C8:D2:DE:B0:81:F7:47:D5:EC:EC:0C:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012ECE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15181FF2C60E11EFA3CEDB7D762E951A.roa
Signing time: Sun 29 Dec 2024 17:55:26 +0000
ROA not before: Sun 29 Dec 2024 17:55:22 +0000
ROA not after: Sun 12 Dec 2027 17:55:22 +0000
asID: 17561
IP address blocks: 154.217.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77518 (0x12ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:55:22 2024 GMT
Not After : Dec 12 17:55:22 2027 GMT
Subject: CN=67718d0e-c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:16:c2:ea:19:55:27:79:5f:88:9d:93:35:
b5:76:32:0e:83:1a:b7:17:a8:d1:c5:12:43:5a:12:
25:90:21:1c:9a:0e:22:86:e4:ef:1e:30:4a:2e:ee:
d8:b5:d3:32:7e:f9:55:3a:bc:e7:c5:94:50:ac:75:
18:ac:57:8d:5f:11:87:3c:98:d8:fe:12:a1:ea:04:
0f:f0:e2:28:3b:53:a6:41:ca:3b:65:d2:70:a9:ea:
a1:33:bd:b1:42:35:9a:f8:fa:7d:f0:bb:98:8e:80:
8f:0a:eb:35:e1:b4:d7:02:e3:51:04:2e:66:60:e0:
90:03:89:28:fa:58:b6:f7:87:c1:36:39:5a:d1:62:
5e:dd:ca:2e:a3:b3:ca:39:9e:79:bb:af:d9:b7:a4:
f9:71:34:94:70:b4:47:2c:cf:ed:ef:da:1e:d2:9c:
db:37:1f:89:7d:39:f3:53:fa:dc:ed:13:c9:a0:0e:
89:79:cc:5c:14:29:bc:63:4d:a6:b5:6e:98:33:eb:
9a:1e:c3:ef:7b:be:38:36:1a:76:5f:13:08:5f:62:
e5:b7:b7:f2:94:2f:0f:a3:4d:32:81:91:89:3b:65:
f3:61:0c:76:00:50:d0:e2:64:1b:f6:ea:ff:fe:f0:
80:8a:7e:82:c9:7b:4c:4f:0f:eb:7f:7d:7a:cd:0c:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EC:1E:95:A8:DC:FC:87:C8:D2:DE:B0:81:F7:47:D5:EC:EC:0C:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15181FF2C60E11EFA3CEDB7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.74.0/24
Signature Algorithm: sha256WithRSAEncryption
59:08:8c:4d:d9:05:49:e4:3c:b8:74:ff:b1:47:af:66:6b:98:
41:51:c0:e9:84:c9:0d:61:84:94:83:43:6a:a9:e2:06:59:0d:
42:11:26:4d:88:96:cb:11:9e:51:ba:b3:8a:24:77:5b:c6:25:
a9:87:d2:b7:b4:bb:3d:2b:a2:75:07:84:10:0e:66:cd:d8:7b:
50:f8:eb:b4:3d:2f:47:4a:24:b8:e5:f7:7d:97:57:72:77:e6:
87:5a:99:80:42:65:2a:28:da:5a:ab:9e:b4:f6:8a:f9:aa:75:
7e:aa:31:fa:36:d2:4a:04:65:b6:92:3f:95:c7:ef:62:8d:b0:
ce:f8:3c:50:13:da:38:07:5d:52:ee:1f:1f:f9:8a:99:d9:d9:
02:3c:d0:1c:76:26:bb:b9:d1:6c:7b:b5:59:95:2f:ad:c8:d6:
ca:49:fd:ec:c6:82:0a:43:74:58:f5:90:76:50:9c:f5:e6:12:
a8:a6:f6:40:c0:07:cb:2e:ef:b1:8b:1d:f6:82:b9:1a:8d:a4:
9c:62:3d:00:eb:54:e9:52:62:4a:84:bd:2a:cc:b8:4c:50:05:
99:54:45:0f:8f:54:3a:2a:53:eb:52:2b:93:c2:bc:52:f0:83:
5e:c8:c1:f3:23:ec:8d:22:c4:d0:33:99:62:b6:9f:cc:32:c3:
a1:fa:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:10 2025 by rpki-client