Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D8B80C52C11EF9650CD66762E951A.roa
File: 1D5D8B80C52C11EF9650CD66762E951A.roa (raw, json)
Hash identifier: PxCloIdib0h0vdP7F1rH0M8/wOs9ZB9qK3BisczTE0A=
Subject key identifier: 4E:EE:D5:B2:16:91:28:82:B9:63:43:51:17:03:13:5E:F4:6E:ED:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D8B80C52C11EF9650CD66762E951A.roa
Signing time: Sat 28 Dec 2024 14:57:53 +0000
ROA not before: Sat 28 Dec 2024 14:57:50 +0000
ROA not after: Fri 12 Dec 2025 14:57:50 +0000
asID: 984
IP address blocks: 154.204.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76735 (0x12bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:57:50 2024 GMT
Not After : Dec 12 14:57:50 2025 GMT
Subject: CN=677011f1-a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:3b:61:21:ab:ab:10:4b:bf:c4:f9:59:34:
e8:12:f4:0f:eb:8e:3c:ba:bb:0d:6c:32:b7:af:e5:
f5:de:b4:82:85:b0:82:40:ae:45:dc:08:f7:d1:e9:
20:1d:2d:6b:7f:7c:13:ef:fc:2c:36:a7:08:b4:8f:
66:4f:99:48:2d:25:ea:86:00:02:c4:9a:8f:41:4d:
8b:87:b3:27:5b:fb:86:13:b8:0a:8e:b0:57:01:19:
3c:9f:42:0b:60:db:26:63:ca:d6:78:70:d9:24:d9:
9b:6b:ff:03:45:95:2a:a8:6d:c6:d3:61:29:c9:0a:
e9:36:e5:2d:02:72:05:42:51:47:ed:09:d7:ef:90:
7c:30:61:16:ef:23:25:8b:f5:17:6f:a6:01:2b:b7:
2d:8e:32:ed:09:b8:14:73:9c:38:57:a9:54:93:57:
79:c9:72:98:a5:91:93:bd:47:c3:e4:7b:ee:f1:b4:
30:f5:69:c1:4f:4e:08:ff:6b:23:9a:90:17:83:62:
05:87:df:86:9d:7e:1c:02:71:47:6c:64:b5:d7:8e:
c2:c9:59:20:42:f6:3e:1a:5c:da:0c:ff:a9:57:2c:
f1:8b:c9:37:86:47:bf:e2:56:be:59:ea:d3:c9:38:
9d:ea:1f:2d:05:27:b4:80:17:06:3d:73:e3:8e:5f:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EE:D5:B2:16:91:28:82:B9:63:43:51:17:03:13:5E:F4:6E:ED:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D8B80C52C11EF9650CD66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.72.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a3:dc:0e:0e:7c:cc:db:cc:1a:d6:4d:ea:89:bf:f1:80:7a:
72:71:2d:10:3e:42:db:04:91:a9:c5:34:c1:ed:31:ce:7f:1e:
02:3f:00:dc:02:cc:c9:53:86:7e:d4:cf:8a:ba:a2:21:9f:56:
54:e7:0a:0a:22:82:bd:60:cc:67:fe:4c:d7:ee:ef:5b:15:e8:
25:30:62:9b:81:cd:54:53:23:94:55:7e:fb:aa:0f:ea:59:7e:
81:60:90:05:d0:3f:eb:f6:c7:3f:94:fe:4c:7a:88:62:ee:a5:
96:8e:af:53:87:ff:af:46:9f:ab:01:87:17:dd:6f:4e:b0:70:
c8:0d:1c:82:f5:68:c7:0b:74:dd:7b:40:a9:7a:03:95:8c:90:
89:6f:83:77:23:8b:32:d2:6a:20:de:75:e2:52:41:f4:11:c2:
29:f7:ca:4d:74:2f:61:4c:db:ce:05:10:ac:e1:f1:c9:37:78:
98:fc:fd:e2:d1:b6:ab:82:b2:4b:60:e9:2f:97:19:7e:87:7f:
2c:85:92:aa:d0:25:e4:19:c4:a8:06:8b:dc:2d:5d:7a:04:61:
39:f3:31:be:e8:57:72:11:bd:64:ed:e6:fb:6b:a2:9f:54:11:
d6:33:a5:ba:e2:e5:d8:5c:01:8c:db:63:57:8f:7e:3f:c7:29:
5d:99:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:17 2025 by rpki-client