Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BBD6862C36611EFB4CDD3A5762E951A.roa
File: 1BBD6862C36611EFB4CDD3A5762E951A.roa (raw, json)
Hash identifier: 7wkgUCox6ZDM9EGsq5IGK2EZqCVXTo9RcAb/PekzW1M=
Subject key identifier: C4:FB:C8:B8:F2:B4:D5:58:1B:6D:EE:C6:DE:58:A3:B2:C3:AB:6B:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BBD6862C36611EFB4CDD3A5762E951A.roa
Signing time: Thu 26 Dec 2024 08:47:59 +0000
ROA not before: Thu 26 Dec 2024 08:47:55 +0000
ROA not after: Sun 12 Dec 2027 08:47:55 +0000
asID: 17561
IP address blocks: 154.94.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75446 (0x126b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:47:55 2024 GMT
Not After : Dec 12 08:47:55 2027 GMT
Subject: CN=676d183f-5ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:d8:97:e4:02:4e:74:66:8c:16:b8:cc:b5:
19:12:8f:dc:9d:f8:1b:7b:98:1b:41:f6:18:92:fc:
74:d9:df:e0:94:84:8c:d1:bd:7e:16:b2:54:cf:b6:
30:eb:f7:6b:4d:da:ea:52:18:65:24:52:13:63:11:
c6:de:c9:59:ff:d6:de:8b:e2:43:d9:a3:23:47:cd:
d9:b4:64:e5:07:e3:93:a8:c9:b4:17:8d:6d:20:b4:
bf:7b:a6:36:25:cc:f2:67:38:6b:3f:64:70:83:48:
25:12:9c:58:78:cb:1a:3a:34:92:56:cb:af:0f:c8:
0c:8d:e5:62:36:1c:38:d1:50:45:34:f7:ad:c0:88:
3c:06:26:60:b5:11:66:72:9e:a4:3b:9d:a2:f0:01:
77:bc:cd:23:b0:a2:5e:5f:e4:8f:23:98:b2:a7:04:
a5:c5:e0:ea:00:d6:7c:00:a4:29:fb:a6:fe:73:30:
72:43:44:7d:8b:4c:3e:52:6d:08:5f:51:6a:8a:bd:
05:32:ed:ca:dc:3c:0f:74:0f:48:3f:eb:3d:1f:6d:
6b:01:ef:0e:97:3d:17:da:0e:1d:13:d2:ae:03:1d:
6f:6f:2b:08:35:de:a2:61:c2:59:6a:86:c3:c4:3c:
1a:c5:40:22:6b:c0:71:7a:7b:c5:42:3d:33:51:f3:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:C8:B8:F2:B4:D5:58:1B:6D:EE:C6:DE:58:A3:B2:C3:AB:6B:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BBD6862C36611EFB4CDD3A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4f:cf:da:aa:d6:bf:23:70:83:df:b6:6c:ea:f8:5e:c7:bd:
6c:e9:0c:22:b7:32:43:0d:5e:c6:fd:19:3e:e6:d8:41:d0:84:
60:f3:a6:dc:09:07:b6:65:9c:fb:3e:3a:47:43:37:11:d9:a0:
04:0e:ff:bb:ab:36:a8:3e:b4:a7:26:fe:1e:b0:71:e6:2c:00:
24:06:72:d0:e4:06:39:36:29:c7:8a:eb:b4:cc:4f:b0:cb:ec:
4f:8c:d7:bb:58:f9:55:7e:a8:db:fe:92:20:99:e9:c5:6c:0d:
68:2a:ca:15:be:30:02:95:b9:56:df:db:16:ac:2b:3f:c5:9a:
5a:7a:88:8f:39:a9:26:55:81:34:89:d2:b7:f9:1b:ed:e7:90:
5a:e6:f8:65:09:75:97:27:47:02:8b:a4:78:f8:f2:be:4f:68:
67:79:58:1e:43:d1:1c:ad:e5:48:94:7c:99:fb:9b:db:45:c6:
a8:4b:6b:d6:17:d5:51:d0:6e:a6:04:4e:81:2f:10:02:08:bc:
42:a0:a7:13:0b:01:b0:2a:b1:b5:d7:de:50:8c:6e:8f:20:4f:
5d:e9:f8:c7:f0:91:60:80:ac:60:ac:0a:a3:c7:dc:a0:3a:f3:
b3:9f:fd:e5:30:27:81:c7:de:58:18:da:5a:e5:e4:97:85:71:
68:23:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:19 2025 by rpki-client