Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362CC58AC60911EF85170360762E951A.roa
File: 362CC58AC60911EF85170360762E951A.roa (raw, json)
Hash identifier: rE9ibDNp/3RAEhBTYAM3I8+4f4hxL7ijkQWLa0rQvfQ=
Subject key identifier: CE:4E:1C:C2:A3:F1:11:BA:10:51:2A:22:A5:01:C7:F6:F9:7A:6E:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362CC58AC60911EF85170360762E951A.roa
Signing time: Sun 29 Dec 2024 17:20:34 +0000
ROA not before: Sun 29 Dec 2024 17:20:30 +0000
ROA not after: Sun 12 Dec 2027 17:20:30 +0000
asID: 17561
IP address blocks: 154.217.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77476 (0x12ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:20:30 2024 GMT
Not After : Dec 12 17:20:30 2027 GMT
Subject: CN=677184e2-3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:ef:52:d7:72:4c:45:d0:1e:38:2e:ff:22:
4e:dc:dc:6a:0c:a2:99:c8:d0:52:68:ca:da:c7:d4:
f2:88:ed:3a:66:18:75:fa:02:49:95:4c:9f:8c:e1:
99:fc:d4:20:cd:ba:b1:0d:80:a2:d4:c0:79:97:34:
54:8b:b2:9b:b2:3c:67:79:6e:68:65:18:c2:6a:a6:
b8:d0:4d:b2:5b:c8:78:2f:d4:61:47:78:6a:a4:1b:
e3:e5:10:ec:ec:9f:5d:6f:cc:48:4e:6c:c6:ed:05:
c5:b9:ab:3a:c8:7b:9b:9f:98:8b:a5:36:d2:ba:9c:
09:35:5e:9b:09:3c:ca:0a:72:af:88:b2:79:a4:8f:
92:79:7a:ad:7d:7c:f1:40:92:16:b4:35:e9:50:98:
67:90:23:fe:fd:a2:b1:55:c7:a9:14:09:c1:f9:27:
b6:26:b7:b1:9c:3b:f1:a9:ad:4c:a8:6a:db:e5:fd:
73:75:37:df:62:80:22:ca:c1:85:29:f9:c3:2d:6d:
4b:97:28:c9:6c:8f:15:08:a0:40:79:31:1f:21:4a:
46:1e:7d:c5:1a:79:d8:e5:41:89:ae:43:58:f2:04:
93:ce:db:b5:e0:e0:14:fc:ec:26:b9:5c:76:09:e5:
dc:94:b9:a0:c2:fb:df:a6:6e:0d:0f:c4:7c:c4:be:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:1C:C2:A3:F1:11:BA:10:51:2A:22:A5:01:C7:F6:F9:7A:6E:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362CC58AC60911EF85170360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.53.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6f:bf:d0:eb:68:8c:09:ae:81:bf:f2:60:88:bc:18:87:60:
f7:74:d0:08:79:3f:73:aa:5f:b0:1b:a1:05:9d:c8:a3:34:97:
34:24:8f:c5:cb:52:7b:3a:27:d9:2c:39:13:e0:87:33:27:14:
e7:80:4e:28:9c:0d:bf:8e:4e:bc:59:f8:83:17:e2:d7:a9:bd:
12:76:2c:8d:a6:b0:2d:d0:b7:46:f9:e8:8a:fe:7f:44:18:2d:
be:b8:31:f1:ec:43:d4:72:84:ca:20:4e:d2:e1:d7:c9:fd:53:
70:0d:d6:e6:5b:7d:f8:3f:52:aa:64:71:a5:d5:c4:81:d7:17:
40:67:04:70:c5:8a:8f:91:e0:29:1b:0d:50:25:7e:dd:91:60:
e4:9d:ab:f8:a5:53:be:25:83:1f:78:69:36:fb:ca:f5:46:03:
af:7c:6e:6a:d1:f3:b1:4e:b7:e0:18:3f:dd:8c:ce:62:52:0c:
d3:ee:07:04:fb:38:fd:5e:ac:48:c6:0a:d8:c0:23:0a:5c:2b:
ce:e9:11:90:8d:db:bf:e7:4b:22:5a:63:f3:66:b9:5d:68:ef:
f0:f7:74:82:4e:36:af:d9:a4:d8:79:2d:a4:b4:a0:ef:51:94:
e7:b6:de:28:d9:aa:7f:1d:61:ed:0d:03:82:38:7c:4e:b7:10:
96:cd:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:30 2025 by rpki-client