Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7035AEC52511EF8B6215BA762E951A.roa
File: 1B7035AEC52511EF8B6215BA762E951A.roa (raw, json)
Hash identifier: JIYZTiH7tsyXKw+YrgUt8Qu2cOT38RWFtjUBPHX89hk=
Subject key identifier: FC:DE:28:4E:10:ED:0E:C4:6D:98:87:00:2A:F3:A9:80:76:B0:2A:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7035AEC52511EF8B6215BA762E951A.roa
Signing time: Sat 28 Dec 2024 14:07:44 +0000
ROA not before: Sat 28 Dec 2024 14:07:40 +0000
ROA not after: Fri 12 Dec 2025 14:07:40 +0000
asID: 984
IP address blocks: 154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76669 (0x12b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:07:40 2024 GMT
Not After : Dec 12 14:07:40 2025 GMT
Subject: CN=67700630-2517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:03:c8:54:83:ee:08:75:9d:09:d3:9b:20:
f5:55:5a:1c:10:0a:71:45:a8:d2:14:85:b8:65:40:
d4:24:53:f1:20:21:01:5e:d7:a8:4b:a5:d7:73:ec:
fe:52:56:1e:3f:73:12:06:c9:20:b3:4e:c3:26:45:
50:ce:a0:59:00:a5:2c:4c:40:13:2f:5e:56:b1:a5:
75:a1:37:a0:98:db:6d:25:86:22:25:0a:ef:0b:93:
8e:87:5f:f9:aa:cb:42:99:0f:12:67:d9:fc:66:ed:
e7:88:c2:d8:d2:ad:ed:c9:48:a9:5e:7d:fc:6d:a0:
f2:d6:1a:fd:0a:71:61:9d:e4:16:76:b4:f8:fc:56:
a9:0e:b9:69:bb:ec:b8:39:d9:28:fc:f4:f6:f5:69:
de:75:1e:ec:46:ab:dd:9d:f7:04:e6:ed:12:3f:0e:
4e:9d:60:b2:ad:6f:3d:89:b9:37:6d:69:80:91:1e:
82:2e:32:83:e7:85:84:96:1f:62:6b:08:16:f4:15:
97:28:63:3d:3e:0d:04:7b:b5:00:2c:f1:af:64:ff:
fa:5e:0f:ee:b9:5f:55:e9:59:a7:b7:b7:6e:ac:99:
c9:bd:3f:38:2b:92:85:57:a3:f0:6f:b5:cd:df:84:
16:21:a8:64:20:94:78:51:94:95:a2:fa:b1:ea:2e:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DE:28:4E:10:ED:0E:C4:6D:98:87:00:2A:F3:A9:80:76:B0:2A:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7035AEC52511EF8B6215BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:53:69:f6:d3:f2:36:75:51:04:cc:b9:1b:c5:19:8d:e9:05:
1e:99:6d:6e:8a:8a:53:2f:3b:ba:9c:f3:e4:fd:e5:59:b6:05:
e7:be:12:66:2d:46:62:76:34:8f:e5:fe:4f:af:a4:02:64:a6:
bc:a6:ea:9f:7d:43:d6:bb:9c:c4:b8:ff:c7:08:ac:9e:97:94:
35:25:bb:19:7c:2e:3d:15:45:fb:47:92:52:46:4c:20:59:a9:
8e:12:6e:df:58:e2:e6:e6:55:2a:e4:e7:2b:ac:ec:12:05:81:
86:98:0a:66:1b:d6:56:5d:b4:17:13:18:a2:b7:27:b4:db:cd:
83:96:75:62:74:fd:00:88:cd:0a:dc:16:e0:70:07:c3:f8:46:
7c:9b:ea:c5:fa:16:e4:16:53:7c:be:c9:f7:5f:ca:45:2d:7f:
53:86:4c:5c:16:90:42:1e:2a:ba:9b:03:28:96:ba:b1:35:66:
4b:94:28:11:aa:83:4f:50:9f:47:90:56:84:13:0c:75:72:09:
2e:38:92:7e:aa:62:72:12:ec:cd:90:b1:64:32:91:70:a7:8a:
ab:53:b5:1f:6e:1d:d7:ce:0d:4a:02:66:eb:71:04:2b:81:9d:
48:89:2d:ed:7d:88:46:02:88:ec:b7:3d:33:b2:0d:b9:a5:91:
a3:b3:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:50 2025 by rpki-client