Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276DED34C8BC11EF9EC27796762E951A.roa
File: 276DED34C8BC11EF9EC27796762E951A.roa (raw, json)
Hash identifier: edBvb4Cmvf7l0cfUlnnKg2+J1lsYnRuWmQmnLRsIBK4=
Subject key identifier: AA:89:73:80:63:2F:B0:5D:1F:48:4A:6A:17:FD:66:EA:7E:58:4C:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276DED34C8BC11EF9EC27796762E951A.roa
Signing time: Thu 02 Jan 2025 03:46:31 +0000
ROA not before: Thu 02 Jan 2025 03:46:28 +0000
ROA not after: Mon 13 Dec 2027 03:46:28 +0000
asID: 17561
IP address blocks: 154.221.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78296 (0x131d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:46:28 2025 GMT
Not After : Dec 13 03:46:28 2027 GMT
Subject: CN=67760c17-155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:a6:98:39:fe:19:0f:7a:50:b2:26:42:a7:
21:8b:82:3e:de:51:90:e8:d3:d2:87:96:18:91:20:
b5:54:4e:be:ca:69:e8:38:a6:08:1d:19:1e:d0:d1:
45:b8:4a:f3:97:06:45:be:82:cc:c2:92:3f:d9:e6:
44:b6:91:da:9f:3c:8c:ee:5b:8c:14:5e:1a:83:61:
7c:87:23:33:5c:b1:38:b6:7b:6a:a7:80:de:5f:ce:
dd:dd:81:c4:83:10:f0:5f:d0:7e:c7:6d:24:32:36:
15:5a:55:1b:f3:8f:b6:15:12:dd:4f:1a:38:1e:11:
b1:3b:a8:71:ee:d6:c7:a4:60:c9:08:2b:f5:11:06:
62:64:76:c8:80:29:32:50:df:49:f3:d1:2b:11:1f:
2c:7b:11:d8:b2:40:e5:b8:6f:13:0b:dd:9e:99:bc:
b3:80:c1:a2:f4:3d:ce:6f:e7:e1:b3:f7:a3:c8:e7:
03:10:49:d6:35:f1:ac:1a:01:a2:fa:e2:81:be:49:
e9:f4:8e:55:69:66:6e:74:0a:27:48:5a:7b:b3:8c:
37:9a:0f:16:8e:b0:07:2f:bd:b2:f5:18:d7:c6:3e:
8f:d0:f6:41:4c:a9:a2:26:b5:07:87:96:d1:f7:bb:
ec:dc:a8:f8:3e:96:ed:fb:76:dc:a8:5c:e1:97:2e:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:73:80:63:2F:B0:5D:1F:48:4A:6A:17:FD:66:EA:7E:58:4C:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/276DED34C8BC11EF9EC27796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.44.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e6:66:a6:aa:26:40:5f:9c:c8:b3:69:48:b8:ab:ec:85:45:
cc:7e:6b:05:06:a2:51:50:a5:2b:b4:18:27:20:48:3d:4a:6e:
f8:61:99:b7:1d:f7:24:1e:0b:c1:71:91:dd:e8:df:14:62:00:
de:c4:6c:25:0b:c6:4f:43:48:6e:9b:35:b1:93:12:06:68:c5:
ff:f9:4a:f1:7d:fc:de:30:c7:01:a7:34:31:e7:33:8f:70:78:
0b:e4:f0:3f:69:b4:d4:87:9d:e1:7b:a3:49:25:e9:c8:94:0b:
70:47:22:cb:cb:34:89:1a:94:be:7a:5a:74:ea:6d:2a:b3:e8:
f3:a3:66:e5:c9:8a:5d:e4:c6:66:a9:90:0d:18:a2:f6:c5:b5:
31:93:f0:97:4f:af:d2:d6:d2:66:17:43:17:26:10:64:ee:90:
e3:3d:5c:d3:29:71:7b:c5:5c:58:be:a3:17:80:20:44:8d:00:
27:61:55:58:8e:9a:03:2a:97:e4:f3:97:ae:a6:50:57:97:20:
7a:5f:94:b4:cb:62:05:97:a6:94:c9:41:a0:80:58:e2:14:72:
c0:a2:91:c3:74:0f:a5:dd:46:0e:3e:ac:56:fc:f2:dc:cc:f0:
8e:e0:d3:dd:2a:70:de:3b:9f:f2:e7:2d:34:69:b1:d1:59:38:
56:20:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:47 2025 by rpki-client