Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33408D36C61611EFA7BF3DB0762E951A.roa
File: 33408D36C61611EFA7BF3DB0762E951A.roa (raw, json)
Hash identifier: xV1QD25M22QiR1qc1KBZKUHn0jrK2Rn90Zh0IKNapVU=
Subject key identifier: 5B:6F:5A:43:31:FC:FD:19:75:8F:86:EB:FF:36:A4:22:F8:CB:63:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33408D36C61611EFA7BF3DB0762E951A.roa
Signing time: Sun 29 Dec 2024 18:53:32 +0000
ROA not before: Sun 29 Dec 2024 18:53:29 +0000
ROA not after: Sun 12 Dec 2027 18:53:29 +0000
asID: 17561
IP address blocks: 154.217.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77586 (0x12f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 18:53:29 2024 GMT
Not After : Dec 12 18:53:29 2027 GMT
Subject: CN=67719aac-66d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:c2:63:ab:68:97:23:50:28:4c:95:69:78:
11:8d:98:56:c4:bb:ad:73:7a:cf:66:87:35:e2:ca:
72:6f:0e:2d:95:d8:38:35:7c:fe:07:e2:15:8c:5e:
e5:ba:ba:0f:fb:43:ee:98:89:2c:30:e8:7a:2e:76:
58:85:06:35:8e:09:d4:63:cd:3e:8e:af:86:f9:e3:
f8:7f:ff:58:b6:3f:4a:c3:f8:e9:a3:c3:36:66:df:
47:2d:12:53:52:8e:a4:c8:c5:db:7e:ec:35:c0:2b:
04:4e:3e:dc:34:dc:fd:08:d8:4d:0f:0b:5f:dd:be:
42:c7:dc:99:5e:ab:6e:c8:12:98:6e:0b:bf:fc:dc:
43:7e:88:5c:a3:5d:3c:df:d2:16:dd:dd:ac:11:ed:
7a:02:70:3c:bc:17:07:9d:31:28:26:40:dc:aa:53:
3b:fd:78:ea:81:ac:14:fe:c8:07:ea:e5:82:37:2a:
c4:3a:76:e0:f9:d8:f7:91:b3:93:e6:5c:ad:15:97:
6c:54:d2:f5:a4:57:65:9e:cc:cd:e2:7d:b2:39:1a:
ab:59:13:87:00:f9:52:dd:a2:4d:90:d9:45:a7:08:
7a:55:65:a6:84:1f:48:a5:77:a8:da:97:0e:02:47:
41:20:b4:5d:8c:db:2a:d8:e2:23:2b:13:f7:91:92:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:5A:43:31:FC:FD:19:75:8F:86:EB:FF:36:A4:22:F8:CB:63:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33408D36C61611EFA7BF3DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.108.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ca:55:85:d8:03:53:50:c8:33:f2:d7:ed:8e:34:c5:aa:52:
24:e6:9f:97:b7:d6:ee:89:8c:2f:64:68:fb:47:f4:e5:29:52:
de:c4:a1:96:20:d4:09:f7:80:ce:6f:46:4b:0f:a1:d1:af:8c:
7c:0f:63:e4:45:17:00:e0:38:14:65:dd:c4:ad:35:9b:00:14:
b6:ae:3a:14:62:53:61:69:a1:14:bf:43:df:bb:69:ed:4d:bf:
c7:74:bf:dc:ce:1c:3f:b5:1b:59:57:fd:2e:a5:6f:f2:cb:cd:
5c:d7:17:ad:6e:34:af:73:03:6d:58:9a:9a:04:84:e8:5f:b6:
bf:a3:bf:46:04:b5:9f:fa:5e:4d:6d:2b:ad:34:0d:81:1e:ab:
e6:3e:d4:93:8c:6d:53:ff:2b:a2:e7:42:2d:3a:c7:50:c7:96:
da:1e:18:95:a3:d4:24:4b:d3:e2:fb:30:92:86:fc:ba:3c:80:
5d:f5:a8:f3:49:bc:22:db:ea:c5:a0:34:c3:ef:e5:05:89:bd:
fc:68:b8:84:10:67:1e:76:07:74:17:fd:27:77:e8:b5:0a:81:
fe:dd:43:7f:22:b3:57:aa:eb:b6:d0:b3:d9:8d:a1:5a:23:f5:
2f:33:3a:b1:96:e1:12:5c:4e:81:aa:56:d9:b0:26:05:db:55:
81:d0:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:46:53 2025 by rpki-client