Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A013ACC36E11EFA422435A762E951A.roa
File: 27A013ACC36E11EFA422435A762E951A.roa (raw, json)
Hash identifier: 9yXzVt/Fg1L/INnTL+Zn0aakVq+ZkO2b9KPnDytur8g=
Subject key identifier: 47:29:0F:51:7C:99:90:47:3E:F8:D0:F9:F6:9C:2A:C4:C9:3C:2D:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01270C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A013ACC36E11EFA422435A762E951A.roa
Signing time: Thu 26 Dec 2024 09:45:35 +0000
ROA not before: Thu 26 Dec 2024 09:45:31 +0000
ROA not after: Sun 12 Dec 2027 09:45:31 +0000
asID: 17561
IP address blocks: 154.94.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75532 (0x1270c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:45:31 2024 GMT
Not After : Dec 12 09:45:31 2027 GMT
Subject: CN=676d25bf-34b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:f3:a4:a6:e1:9b:e0:74:43:b4:5c:85:e1:
b4:f3:69:17:7d:22:da:ff:bf:8f:52:c9:34:e6:98:
51:a1:d3:58:fa:98:fc:69:f6:4c:11:c6:4b:f5:e2:
14:a9:2b:2a:07:11:bb:a0:37:f4:84:80:3b:9c:cd:
c3:39:0f:31:e9:b1:a3:05:a0:81:c6:c5:ad:c3:94:
da:08:9a:ee:58:be:80:65:07:70:5d:4c:cf:c3:66:
26:b1:42:cc:c6:19:c1:7e:f6:fa:02:3f:50:0d:50:
5b:dc:3e:5f:7a:db:53:42:ce:02:7c:0d:50:54:47:
57:90:3c:37:f1:02:11:b6:95:06:02:aa:2f:73:ba:
21:0c:6e:17:25:9e:50:bd:cd:90:a6:01:7f:1f:d8:
ed:a4:e5:59:c1:a6:e8:ef:63:47:0c:27:35:92:55:
26:0e:76:5a:95:6a:61:95:aa:bc:d1:14:97:2f:a0:
07:f0:ce:d8:46:45:37:d0:4a:56:46:21:a7:cc:2b:
c6:ae:c4:03:af:6c:07:ba:20:07:d4:21:41:99:68:
c4:92:29:32:9a:c2:fb:5e:95:9a:73:78:00:75:2b:
cd:fd:ce:ca:35:90:0b:99:4c:19:14:d9:88:89:b9:
d3:db:49:8f:6f:d9:e3:3a:1a:9f:0b:a2:44:0e:31:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:29:0F:51:7C:99:90:47:3E:F8:D0:F9:F6:9C:2A:C4:C9:3C:2D:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A013ACC36E11EFA422435A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.157.0/24
Signature Algorithm: sha256WithRSAEncryption
39:51:df:e6:b5:86:c9:e3:16:18:7e:8a:a4:02:f1:d5:f3:8b:
03:97:08:61:59:81:9f:86:e0:c4:2b:41:1a:ff:3e:ae:00:17:
1b:45:bc:ee:72:a2:19:e5:e9:9d:9d:91:6b:89:ff:79:c5:c6:
6c:c4:fc:bd:83:ab:ff:c5:85:fc:aa:76:21:60:b3:3b:9c:0e:
a3:0c:b9:75:c2:32:07:e2:89:48:6c:76:9f:4d:b1:ff:7a:14:
90:54:7b:7d:45:3a:e7:d5:ac:4a:19:2b:51:2d:b6:a4:a4:57:
70:cc:60:71:fe:94:b8:08:e0:9b:69:4a:a6:05:10:09:73:55:
b9:4c:09:6a:db:39:10:ce:e1:cb:e1:65:f2:39:f7:5c:53:b8:
4d:e0:42:02:cd:50:92:5f:19:c1:81:e3:50:2c:34:0e:b4:fd:
8f:d1:42:b5:85:62:fd:d0:3d:b4:12:9a:a5:b5:b3:37:a1:eb:
30:d7:da:d0:76:e3:3d:b0:17:1a:87:5f:39:b8:4c:a5:95:73:
50:e9:5c:ee:65:84:d1:32:26:81:d0:8e:43:c6:02:3d:2a:35:
86:49:0c:63:c5:e0:35:7c:96:d5:4e:a2:28:1e:69:b1:db:8a:
c7:85:73:f1:f1:0d:98:67:d3:63:14:cc:a6:32:06:9b:ea:31:
34:cb:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client