Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA584B6C5FA11EF8FA24781762E951A.roa
File: 2CA584B6C5FA11EF8FA24781762E951A.roa (raw, json)
Hash identifier: Y3gJrSKo3aZZy24zHeqR6s1ODYJaDGChmIAkhRdv5eI=
Subject key identifier: 50:EE:2E:50:F6:8C:AE:5B:DC:26:70:B2:A8:EC:1F:B7:67:F4:BB:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA584B6C5FA11EF8FA24781762E951A.roa
Signing time: Sun 29 Dec 2024 15:32:55 +0000
ROA not before: Sun 29 Dec 2024 15:32:52 +0000
ROA not after: Sun 12 Dec 2027 15:32:52 +0000
asID: 17561
IP address blocks: 154.216.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77348 (0x12e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:32:52 2024 GMT
Not After : Dec 12 15:32:52 2027 GMT
Subject: CN=67716ba7-e24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:df:ce:6a:b7:55:6a:0c:bd:5b:18:c0:4f:
c1:99:7c:f9:39:69:02:fd:a9:14:76:12:46:fc:53:
da:2f:2a:d3:3c:15:a4:95:44:46:b6:02:91:3a:17:
e1:3e:75:b3:4d:fe:d6:30:7e:69:81:df:cb:0b:ab:
20:c7:95:e7:a4:68:74:f5:03:b7:92:6a:91:6b:f4:
21:db:26:88:34:1a:a4:cd:d7:ae:db:5c:be:18:72:
d0:84:bc:f6:d2:3a:05:19:fc:27:9a:68:c2:be:7c:
3b:4a:fd:68:bf:73:23:f9:29:6d:41:60:8f:41:9b:
c6:0a:41:31:15:d2:49:fc:1b:61:f1:aa:d7:37:bd:
90:6a:00:e0:b1:40:a1:42:0d:2c:de:4d:ce:fc:23:
e5:e5:26:f0:35:22:53:69:62:54:f2:78:26:c6:6c:
be:bf:a9:fe:4f:5e:84:5b:85:59:44:1e:94:ee:f5:
be:9b:de:53:be:83:96:65:bf:df:a4:76:1a:69:fb:
6a:3f:ec:ab:bb:b9:d8:45:83:e9:43:45:37:d4:ed:
d4:5f:8e:43:89:a8:81:2f:bd:4a:8d:d1:d2:17:27:
b4:d1:d4:95:13:d2:56:ae:37:a1:4c:01:e4:fe:3c:
d8:9c:71:b9:49:db:f8:b3:8e:da:52:b6:31:74:e1:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EE:2E:50:F6:8C:AE:5B:DC:26:70:B2:A8:EC:1F:B7:67:F4:BB:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA584B6C5FA11EF8FA24781762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:03:e0:a0:70:e0:a0:32:2e:c6:ea:c3:f4:cc:d4:96:a9:5c:
79:0f:a2:90:05:e8:a9:66:5f:1b:45:53:f9:76:f8:f9:37:80:
08:be:63:93:e0:7d:f1:45:7d:1d:d6:b1:ba:7c:77:98:5c:d8:
50:54:01:20:7a:f9:6d:71:25:dd:30:50:17:84:72:f2:4d:26:
eb:ea:ce:ff:39:2f:a9:45:02:df:15:a9:16:34:cd:15:72:f8:
ce:45:0c:0b:d6:a4:6b:08:f0:3c:4c:0a:64:8c:71:e7:d0:17:
fe:e3:a5:2c:94:c0:eb:c0:a1:cd:64:a2:2a:7f:b3:d8:ec:10:
3f:aa:e7:6c:f2:1d:f5:17:95:0a:bf:d1:f7:9c:89:fe:86:46:
f5:77:46:27:06:d5:ea:64:d1:ec:00:b6:3a:5a:1b:95:30:2f:
20:26:d0:c0:d2:a8:de:f8:48:fb:6b:d1:fc:36:98:20:77:3a:
01:8b:49:fd:3b:37:a6:28:40:07:29:36:5f:f8:6e:18:b6:c4:
50:79:fc:9f:cb:37:6b:9b:ab:fe:ef:01:b3:a0:e4:0b:0b:61:
3b:29:8a:5e:bb:bd:34:01:38:bc:76:b4:12:20:d3:27:3c:8c:
11:3a:d5:4b:bb:d3:84:88:ce:1b:60:ac:3e:e1:fc:95:c0:cc:
03:1d:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:42 2025 by rpki-client