Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CE879F2C34C11EF9BAB3D81762E951A.roa
File: 2CE879F2C34C11EF9BAB3D81762E951A.roa (raw, json)
Hash identifier: nGgjZlHnD0gPfGdVTTIFLn7LGf/ndTdh9JT+tuXqHEQ=
Subject key identifier: 1C:9C:4A:46:71:FE:80:F7:D0:59:C7:49:DF:4A:8F:A4:E8:84:9E:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012579
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CE879F2C34C11EF9BAB3D81762E951A.roa
Signing time: Thu 26 Dec 2024 05:42:21 +0000
ROA not before: Thu 26 Dec 2024 05:42:17 +0000
ROA not after: Sat 11 Dec 2027 05:42:17 +0000
asID: 17561
IP address blocks: 154.83.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75129 (0x12579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:42:17 2024 GMT
Not After : Dec 11 05:42:17 2027 GMT
Subject: CN=676cecbd-3ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:81:1d:90:97:aa:db:9a:ca:10:58:a0:96:
37:c0:14:f5:2b:59:7f:9d:c4:2d:7c:3e:2b:05:27:
37:5d:22:98:b5:94:87:d6:8e:64:6f:d4:f3:55:99:
c8:66:da:a3:98:dc:ee:c1:0d:8e:4d:27:2c:7c:e2:
b7:2d:26:06:cd:55:84:c9:68:46:1c:2f:d2:1f:d4:
8b:e6:2f:64:69:2d:38:6e:73:a1:49:a3:9c:13:40:
4d:b9:fc:39:77:fa:88:97:23:dd:4c:4f:a3:1a:7b:
89:76:a9:02:03:40:33:00:c1:82:15:69:09:24:02:
54:ba:86:5c:4c:18:8f:ab:0a:f9:31:c0:87:09:d1:
1d:8b:6c:32:99:97:1e:9a:84:4a:d3:98:11:b0:35:
e0:0b:8f:bd:ea:14:1c:59:52:d4:66:8b:be:25:b2:
06:a8:b1:2a:5c:32:24:c9:6b:74:3a:05:79:af:cc:
49:16:35:27:7c:da:f2:30:fc:b9:19:e0:f9:6d:b1:
02:4b:98:77:04:4e:d5:47:6d:26:45:8f:b5:42:93:
43:9c:44:ce:1f:3f:52:53:2a:22:76:f6:61:3a:6c:
0f:e4:8d:59:9f:57:2d:0a:72:40:df:ee:84:a9:fc:
ab:8c:ed:a9:25:65:5c:9c:59:6c:f9:d2:91:b4:64:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:4A:46:71:FE:80:F7:D0:59:C7:49:DF:4A:8F:A4:E8:84:9E:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CE879F2C34C11EF9BAB3D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:47:20:10:86:8d:e0:24:67:2b:90:8b:16:92:89:94:97:b1:
92:5b:f3:ee:d6:dd:96:e0:dd:13:b3:2c:43:a2:ec:77:bf:86:
c4:0e:8a:51:0f:9c:38:a7:22:e5:9b:8f:ef:9f:07:73:71:72:
b4:a1:33:dd:da:7b:71:4e:f2:ef:f2:e8:2b:c7:d3:90:53:4d:
db:e1:de:38:ac:a5:74:62:cf:0f:9c:bf:d9:69:b3:12:c3:ba:
07:5a:29:ed:b9:07:0d:0a:51:08:52:d8:f7:16:27:20:07:36:
d8:9b:2e:95:7a:12:0f:1e:51:46:f0:85:f0:07:c7:c2:50:33:
70:43:a2:65:f5:2a:96:38:2a:2d:9c:00:6f:39:53:a5:79:e5:
b4:3c:1a:c4:3c:69:df:5c:a5:2f:23:a3:dc:1b:27:57:38:f1:
b1:5e:d3:28:f9:85:40:48:84:61:a5:93:eb:02:6a:28:1e:76:
92:30:5b:ca:c5:12:8a:a9:25:e0:74:fc:29:95:fd:51:e2:2b:
d3:f4:c2:61:23:25:55:ea:90:9f:f9:cd:60:e1:81:ec:21:29:
aa:d0:27:a4:5b:1b:58:57:bd:83:c1:99:d8:a7:b2:86:d0:11:
f1:88:77:cd:26:63:bb:d3:40:e7:71:c1:46:89:05:0b:37:e6:
eb:e7:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:03 2025 by rpki-client