Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D4CCC4C51F11EFA2761B96762E951A.roa
File: 23D4CCC4C51F11EFA2761B96762E951A.roa (raw, json)
Hash identifier: HrYKSVlHUksfkF7hJNGxmomzrpkVnGoGKsWAQ3Ilvo8=
Subject key identifier: D4:7E:B8:08:B1:68:39:BD:65:F5:FC:8E:CD:10:EE:D2:DD:83:FA:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D4CCC4C51F11EFA2761B96762E951A.roa
Signing time: Sat 28 Dec 2024 13:25:01 +0000
ROA not before: Sat 28 Dec 2024 13:24:57 +0000
ROA not after: Sun 12 Dec 2027 13:24:57 +0000
asID: 17561
IP address blocks: 154.203.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76613 (0x12b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:24:57 2024 GMT
Not After : Dec 12 13:24:57 2027 GMT
Subject: CN=676ffc2d-18bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:bf:4c:38:f4:69:01:3d:49:5f:39:67:78:
e1:18:1a:3d:6a:e2:a0:0d:e9:5c:87:be:02:ae:80:
21:48:e4:20:82:5e:29:9e:77:67:70:94:57:04:58:
0f:ac:12:84:04:0d:6b:d3:9a:ab:56:60:79:b5:b3:
08:11:64:22:76:1c:aa:d8:10:00:9a:d2:47:cf:5d:
d9:11:e6:83:21:ca:49:53:95:37:e9:53:43:25:15:
08:64:f9:b7:a4:39:5e:f1:30:8e:6f:b1:c7:7f:58:
04:44:36:e4:2f:4e:ca:37:d6:00:a5:68:5f:9c:3f:
8c:d0:f1:d7:f1:a7:1a:ec:bb:3c:b2:32:a3:4b:94:
cb:6e:e2:93:ac:99:71:18:bc:51:4b:ca:47:b4:05:
c2:73:a1:0d:28:22:d9:12:0d:63:f3:80:11:9a:81:
82:dd:81:82:88:16:98:a8:13:90:e0:aa:f9:ba:fd:
ad:bd:13:2e:06:bc:51:af:1f:12:2c:7a:61:da:4c:
14:27:67:1e:01:82:e2:d0:5f:dd:ab:65:23:e7:a8:
97:9a:65:6c:6e:a9:43:51:e4:b3:dd:55:33:d6:84:
1c:d2:75:6e:eb:86:56:21:d2:ac:5f:46:44:35:4e:
28:e9:ce:16:4d:84:84:f5:f1:ca:7b:5a:97:61:e2:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:B8:08:B1:68:39:BD:65:F5:FC:8E:CD:10:EE:D2:DD:83:FA:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D4CCC4C51F11EFA2761B96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1e:0b:46:19:fb:4a:a9:26:9a:8e:21:8a:12:68:8a:5c:2d:
72:3e:4e:86:05:93:8e:fc:4f:70:71:30:0b:53:cf:fc:b9:08:
09:b8:54:78:a8:5a:b6:7e:6b:7e:e6:b4:36:d6:c8:87:bd:54:
0f:88:c6:90:3d:78:bd:99:0e:7f:31:7d:77:2f:4b:98:d9:b4:
02:fe:36:af:98:3c:f4:b5:f8:00:28:3d:aa:1f:2b:5f:ef:2d:
d7:5c:c7:7a:bb:65:76:e6:ad:64:61:7d:c7:58:8a:7b:e6:69:
b2:7d:fd:6d:d5:ea:e4:d7:3f:45:c9:27:7f:19:c8:7a:4e:60:
49:57:e8:87:1d:d5:fd:07:e6:12:a4:23:1b:02:85:78:df:88:
dc:91:39:d5:93:28:b8:80:e5:f8:eb:83:88:61:f2:2b:e3:6f:
76:3e:73:42:d0:87:74:8b:5c:3f:fc:6a:e8:af:31:98:1d:b5:
7d:6a:dd:74:02:58:c8:6a:04:b2:88:74:94:45:33:8b:66:9d:
83:04:92:c6:2f:b8:81:92:e3:e3:05:10:5b:2a:e7:0a:96:f4:
ac:fc:fd:ce:c8:76:ea:56:4f:96:26:f8:4a:e1:d6:f0:2d:5f:
54:10:ad:02:01:f6:7e:f2:87:d0:26:ca:e1:ff:71:f6:00:84:
68:78:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:35:23 2025 by rpki-client