Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27948252C60311EFB484FDB7762E951A.roa
File: 27948252C60311EFB484FDB7762E951A.roa (raw, json)
Hash identifier: sDb70RVPXYxPy/WIlGrSFUz1v14BC57elSHXWDhqAeY=
Subject key identifier: 89:DC:41:DE:6E:63:18:DA:4A:5A:27:DD:4B:30:22:A7:3A:08:42:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27948252C60311EFB484FDB7762E951A.roa
Signing time: Sun 29 Dec 2024 16:37:12 +0000
ROA not before: Sun 29 Dec 2024 16:37:09 +0000
ROA not after: Sun 12 Dec 2027 16:37:09 +0000
asID: 17561
IP address blocks: 154.217.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77424 (0x12e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:37:09 2024 GMT
Not After : Dec 12 16:37:09 2027 GMT
Subject: CN=67717ab8-0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:39:83:21:c4:11:4e:21:40:09:5f:48:ec:
94:2f:67:cd:a0:c3:62:aa:2a:03:b7:51:25:91:1e:
b2:5f:69:a8:4e:04:83:25:7c:96:09:80:bf:e5:3f:
fa:19:16:ef:4e:64:de:c4:ec:bf:34:16:0a:cb:40:
7a:b6:34:4a:42:68:a2:dc:e3:df:7a:1f:65:31:68:
6f:7f:de:fd:b4:54:dc:5c:e7:4a:e3:5e:b2:cc:aa:
44:7b:e3:cd:11:f1:33:50:b8:92:bf:20:6c:ec:ad:
56:01:a1:ed:ac:04:09:e3:02:10:0f:bc:87:09:4b:
40:14:bb:5d:88:80:9b:b2:c1:d0:6f:6f:af:41:0a:
50:76:71:c0:2b:0c:31:3a:b8:94:df:77:7a:50:82:
86:ac:99:04:fc:d0:dd:e1:01:19:6b:2a:7a:3d:0e:
07:ab:fe:20:89:c5:11:36:a6:70:7c:97:1d:0e:8b:
92:08:f9:9b:37:e5:4f:ff:66:8e:78:4a:2d:1b:10:
4a:7d:62:a4:2b:0d:f0:ca:d8:78:e4:bc:2d:7c:5b:
e1:34:3d:28:a9:99:b3:80:7c:a7:e0:b4:ae:a3:b6:
25:f3:09:ca:8b:b0:a1:45:9c:8d:77:3e:89:86:a7:
c3:9b:75:16:a5:5a:1e:68:d2:38:bb:7b:06:22:8e:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DC:41:DE:6E:63:18:DA:4A:5A:27:DD:4B:30:22:A7:3A:08:42:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27948252C60311EFB484FDB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:eb:82:a1:0f:64:ee:17:8d:d5:73:36:57:ec:6f:04:c7:74:
20:5d:b4:a5:4c:db:0c:9a:e2:26:80:61:0a:db:f5:62:c1:07:
fc:86:7d:45:72:12:5d:21:dc:dd:21:72:d7:36:76:52:a6:35:
f8:45:c6:14:f7:49:05:7d:9c:2d:72:6b:48:2e:1c:f2:76:a6:
e3:e6:b9:fa:6a:cf:b7:4b:e3:0e:69:61:6e:62:45:01:b0:13:
b6:1d:37:31:ad:90:04:e9:ba:97:7c:43:38:2c:a9:67:b5:9e:
88:6f:37:46:af:d7:de:c1:3e:1e:6a:9c:d5:26:b4:09:21:d3:
39:e0:38:17:3b:24:9f:a2:94:b8:8b:f0:d5:79:6b:a8:58:16:
fd:f5:a1:03:09:63:ad:72:53:fc:40:c6:f8:9b:93:2f:58:5c:
bb:a6:7e:21:5b:6b:61:50:cc:0d:a7:4a:cf:04:18:db:2b:1b:
95:4d:92:ca:f6:da:28:a5:80:71:d3:15:96:e9:cf:c0:9b:68:
0a:78:fa:59:29:b3:cc:48:14:ca:74:5e:6a:04:cd:d8:3c:b0:
7f:8d:63:c4:3c:81:d6:c6:40:ce:36:73:bf:0f:83:a2:b3:ea:
da:05:a5:e6:d4:ed:1b:53:ca:0a:e9:0f:e5:13:e0:8e:81:a1:
e3:cc:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:21 2025 by rpki-client