Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2E0CC0C62411EF84F1A787762E951A.roa
File: 1F2E0CC0C62411EF84F1A787762E951A.roa (raw, json)
Hash identifier: PI0Avei/nvC29qE912uxf7WYPnqSp0F6bnT1vGgovD4=
Subject key identifier: A1:05:67:EA:41:D7:AD:73:24:67:05:52:8F:1B:0D:DD:AE:98:AF:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2E0CC0C62411EF84F1A787762E951A.roa
Signing time: Sun 29 Dec 2024 20:33:12 +0000
ROA not before: Sun 29 Dec 2024 20:33:08 +0000
ROA not after: Sun 12 Dec 2027 20:33:08 +0000
asID: 17561
IP address blocks: 154.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77702 (0x12f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:33:08 2024 GMT
Not After : Dec 12 20:33:08 2027 GMT
Subject: CN=6771b207-ace0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:ec:43:e8:eb:5b:c1:6a:12:ea:14:d1:a9:
27:7d:f7:e4:c0:02:f4:27:b2:61:a5:c7:1e:7c:28:
42:5b:78:31:ce:a7:76:7a:9a:03:d8:fb:9f:44:03:
98:65:8f:a0:1b:a4:e4:38:58:38:46:02:78:5f:7b:
64:ba:e1:4c:c2:62:c7:0f:2b:80:c2:b9:f8:b5:91:
04:54:ef:c0:f3:aa:fc:b7:3f:58:58:80:23:59:3c:
d8:5b:f2:0a:5f:04:ee:c9:60:9f:4e:40:be:8d:81:
c4:5e:e6:29:42:3b:ed:a8:d4:31:88:32:dc:60:73:
f7:26:dd:1d:37:3b:04:94:10:a1:2a:4c:20:de:99:
fc:db:7f:d8:af:ea:b6:51:ce:36:10:d0:43:e3:af:
6c:1b:0d:39:75:98:1e:88:73:2d:89:83:ee:d3:c7:
34:01:f0:9f:8a:9d:69:d3:24:8a:d4:2c:ad:b2:34:
c1:0c:b3:8a:00:81:2e:e6:77:8c:b8:cd:d3:f4:0e:
fc:2f:fa:35:ae:54:0a:cc:e4:5d:08:27:44:f5:9f:
f4:ff:0e:ce:0e:01:b4:cc:87:cf:48:91:51:83:51:
ea:ba:eb:9b:12:3b:9d:70:c5:13:e2:de:66:89:ff:
20:4a:b0:c2:84:cf:57:3e:45:3d:5e:1d:6e:ed:4e:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:67:EA:41:D7:AD:73:24:67:05:52:8F:1B:0D:DD:AE:98:AF:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2E0CC0C62411EF84F1A787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a6:e3:1d:2c:08:b7:8e:b9:fa:91:b9:e3:19:66:bb:c1:94:
ca:98:4e:03:26:f9:b6:37:82:8c:f9:d8:d3:d0:3f:48:16:44:
03:da:c9:95:43:bd:1a:55:74:0b:e0:7b:14:de:d4:08:bb:6d:
85:9f:a5:bc:86:bc:67:aa:e1:26:51:f3:c1:fc:57:e0:e1:20:
ba:c1:bf:ac:10:28:3c:65:31:42:24:dd:59:41:57:ae:f3:a9:
1e:42:07:77:7a:43:c1:94:47:da:ee:5c:2b:b9:4d:12:a0:19:
0a:a4:89:3f:ae:c8:f8:35:cc:b0:6a:4f:42:6b:b4:a3:83:4d:
82:42:29:f5:a7:82:2f:75:e8:18:ea:b9:48:12:12:d7:f6:ec:
57:57:95:5d:18:e6:1b:24:f6:31:ef:aa:dc:62:55:7b:c8:39:
32:1d:b3:54:84:a4:18:43:a2:d6:77:3d:75:3e:86:50:5b:47:
40:8c:c6:f6:94:ac:2b:2f:f2:d0:58:8b:c0:d9:86:bb:c0:c8:
73:48:91:5a:b9:17:98:44:97:e1:e0:09:7f:c3:fb:d9:11:66:
17:b9:5b:52:e1:c4:54:21:17:27:fe:e9:07:08:f7:56:19:7d:
49:d4:46:32:1e:f0:7c:62:27:22:6a:72:ca:35:34:92:d2:dd:
69:c1:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:16 2025 by rpki-client