Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/322C213CC63711EF8F33217E762E951A.roa
File: 322C213CC63711EF8F33217E762E951A.roa (raw, json)
Hash identifier: jnBYlar886DqFupxA3AaNp+mobRjIBVmciMYoeoQM8s=
Subject key identifier: 89:03:67:FC:F8:C6:79:D6:7B:3E:B9:E7:2A:DA:DB:66:E0:E6:BF:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013025
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/322C213CC63711EF8F33217E762E951A.roa
Signing time: Sun 29 Dec 2024 22:49:44 +0000
ROA not before: Sun 29 Dec 2024 22:49:40 +0000
ROA not after: Sun 12 Dec 2027 22:49:40 +0000
asID: 17561
IP address blocks: 154.217.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77861 (0x13025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:49:40 2024 GMT
Not After : Dec 12 22:49:40 2027 GMT
Subject: CN=6771d208-4e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:65:61:8f:29:e9:52:54:5e:e3:44:2f:50:
39:40:f1:a6:49:63:46:be:32:83:9c:85:3f:35:cc:
82:7f:22:bc:7d:ab:34:c5:40:cd:db:a4:e3:d9:3c:
bf:a6:bf:c7:bf:ab:4a:1c:26:cd:6e:58:2a:c7:0c:
f2:00:49:1f:0c:83:b4:8c:86:e4:21:b3:25:89:02:
53:bc:88:b8:14:e0:bf:d9:81:70:87:f8:2f:86:5a:
8f:ac:ab:ca:7e:f3:b1:03:81:16:82:a9:b8:96:84:
00:a8:87:f7:4e:a5:53:c2:85:3b:62:b2:dc:63:b9:
3e:03:cd:da:b8:0c:ad:f8:d7:72:3b:a2:7e:d0:ea:
79:2e:0a:2a:8d:e0:b6:98:90:34:63:b3:b9:d1:e8:
99:a0:75:7b:85:b9:23:e4:47:60:98:35:94:35:47:
54:01:53:7a:e0:b8:87:0e:15:20:7f:06:82:4b:1e:
bb:a6:36:6b:98:c9:fb:55:8e:b8:95:17:ce:41:f5:
2f:a0:93:60:ec:0a:90:10:8a:00:d5:8f:75:e8:06:
76:4e:84:6c:62:e6:ec:b4:1e:4a:3a:89:ac:94:31:
e4:03:e8:35:0a:90:17:66:8f:c0:6c:31:c2:e2:cc:
e4:fd:7f:15:48:7c:da:40:99:06:c7:e0:5c:20:fb:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:67:FC:F8:C6:79:D6:7B:3E:B9:E7:2A:DA:DB:66:E0:E6:BF:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/322C213CC63711EF8F33217E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0b:4e:cd:70:f1:0d:fc:31:69:d7:6c:13:ad:db:29:c0:5d:
8b:a7:cf:e4:09:34:a0:6c:62:23:7a:8f:2b:07:ad:55:4a:4e:
4e:a4:8c:d6:a5:66:ed:75:fe:38:c1:95:7a:b3:6d:aa:44:e8:
7f:62:a6:8b:d9:db:25:0a:43:ff:65:be:05:a4:e4:7a:e9:24:
22:13:c1:b2:39:f9:02:af:9f:0e:02:de:70:d7:8a:47:ff:15:
43:6a:cf:bd:f5:21:36:27:53:75:19:5c:3f:c8:e7:11:4a:77:
5d:9c:51:77:cd:7c:84:f6:da:9d:bd:ce:80:e4:9f:fd:eb:87:
8e:df:08:3a:b6:96:65:75:fe:4e:df:fb:35:65:3f:54:eb:0c:
d9:07:08:e8:40:14:75:bd:86:98:c2:08:72:cb:17:21:95:c9:
b3:96:67:46:3e:07:62:7b:12:d3:66:c1:a0:a3:9e:89:1e:98:
d0:40:98:18:fd:ac:6b:05:dd:ef:88:3d:6b:6f:94:0a:06:57:
95:84:40:69:13:a6:78:59:a3:2a:49:03:84:74:45:8f:31:82:
5e:19:a6:18:2e:cf:32:7e:7d:77:6f:a5:4b:02:86:16:d9:ce:
f7:dc:5b:1c:ff:f7:e1:8e:98:21:dd:bc:43:06:fc:f4:6c:89:
c5:81:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:53 2025 by rpki-client