Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28CC9748C62311EFADE86081762E951A.roa
File: 28CC9748C62311EFADE86081762E951A.roa (raw, json)
Hash identifier: bMv9UVvlgdFz7UqVY3iZJjuoZLgkVKwH+c1ybgUjJIg=
Subject key identifier: CE:86:2D:11:2A:4F:E0:B0:BB:98:E0:41:5C:5F:E0:BD:48:38:E1:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28CC9748C62311EFADE86081762E951A.roa
Signing time: Sun 29 Dec 2024 20:26:18 +0000
ROA not before: Sun 29 Dec 2024 20:26:15 +0000
ROA not after: Sun 12 Dec 2027 20:26:15 +0000
asID: 17561
IP address blocks: 154.217.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77694 (0x12f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:26:15 2024 GMT
Not After : Dec 12 20:26:15 2027 GMT
Subject: CN=6771b06a-d997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:fa:dd:1f:a5:f3:25:ab:8b:a7:c5:c6:b8:
ff:cb:eb:30:87:9e:4f:05:10:ff:ab:50:b9:9f:97:
e7:ae:73:6a:07:0e:6e:83:87:0a:3b:fe:7a:79:3c:
88:94:e0:e0:68:6b:43:82:37:2f:c2:a3:6e:c3:55:
92:5d:a9:f3:f1:ce:57:1e:af:70:3d:df:f5:c3:0c:
49:39:94:80:db:22:ab:ea:51:2c:07:47:29:1d:53:
fd:4a:76:a0:22:ae:b3:aa:a2:f8:bc:53:8b:43:1f:
0d:b9:d7:be:33:fa:a7:c0:57:ff:82:01:90:5b:10:
98:80:ab:94:9e:27:0f:11:d0:36:5e:9a:87:c6:bf:
0a:e4:38:33:b4:5f:ec:32:db:de:e0:06:07:f8:2a:
f3:b2:ba:20:2d:d0:ab:59:51:72:ef:8f:d6:96:dc:
34:54:d2:f1:37:36:c7:2d:27:4a:75:db:c2:f0:5a:
3f:a1:c1:f7:72:6a:48:6b:cd:c9:aa:dd:3b:c1:2a:
e1:0a:cb:c8:43:a5:b0:a1:7f:af:e8:a4:18:59:9a:
94:bc:d8:22:3e:5a:51:07:1b:8d:71:3f:3e:4f:e1:
4a:be:e2:df:cb:08:d8:5e:30:ba:eb:10:59:a1:d7:
a0:a0:cf:98:22:4f:1e:94:e0:a8:39:fb:f4:7b:8b:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:2D:11:2A:4F:E0:B0:BB:98:E0:41:5C:5F:E0:BD:48:38:E1:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28CC9748C62311EFADE86081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3e:50:23:56:f6:56:7f:42:8a:fe:09:b8:0a:63:27:37:03:
0e:b5:70:75:af:de:89:38:57:cb:99:3f:8e:a3:2b:1b:1b:37:
fe:6f:47:9c:80:e0:9a:39:56:5c:46:ae:c4:2d:0d:d8:ba:89:
b1:6f:ac:14:f2:7e:eb:25:27:11:23:61:ce:91:9a:de:c3:d9:
1a:d5:42:ab:a1:ca:6f:d2:b6:f6:4d:1f:ff:7b:42:8e:4f:94:
4a:47:81:b9:b5:af:4d:86:c4:31:6c:02:2a:64:87:84:64:a5:
e0:d3:8c:d5:61:3d:da:0a:61:e9:5d:a1:01:45:e9:1f:f8:0f:
30:84:0c:d2:e2:f3:d1:aa:2a:3b:1a:bd:34:dc:9e:b0:b3:d3:
1f:2c:e4:5a:74:69:c6:5c:b5:c1:73:84:eb:26:35:f2:df:ac:
8f:81:1d:df:8b:00:e9:cb:7f:bf:b0:7c:74:c4:20:12:44:05:
19:db:5b:6c:39:5b:8f:4d:83:dd:06:7c:00:01:36:fb:84:22:
f4:55:e1:fe:34:17:c7:52:ca:30:e3:99:c8:72:cf:45:f0:cb:
ce:88:58:31:02:1e:b3:90:65:7d:9c:6f:8a:e2:27:71:c5:14:
31:23:88:e8:4f:11:4f:fe:a8:bc:f9:cc:4f:7c:52:4d:2e:20:
5d:7b:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:04 2025 by rpki-client