Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A8FFD4C60211EF913062B3762E951A.roa
File: 37A8FFD4C60211EF913062B3762E951A.roa (raw, json)
Hash identifier: 87XVy0lxMTXOHPylTrzb0AbO1AiGsEV2X8dSNUdNyo8=
Subject key identifier: 0A:40:DD:26:05:50:73:76:73:4C:0A:C6:9B:A4:9C:81:A4:68:1F:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A8FFD4C60211EF913062B3762E951A.roa
Signing time: Sun 29 Dec 2024 16:30:30 +0000
ROA not before: Sun 29 Dec 2024 16:30:26 +0000
ROA not after: Sun 12 Dec 2027 16:30:26 +0000
asID: 17561
IP address blocks: 154.217.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77416 (0x12e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:30:26 2024 GMT
Not After : Dec 12 16:30:26 2027 GMT
Subject: CN=67717926-6fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:03:83:1b:c2:bf:04:cf:b2:0e:9d:74:08:
b6:02:11:44:be:80:e9:7a:03:37:02:c8:4b:1a:23:
29:68:28:75:be:57:f3:09:0f:59:74:bc:70:55:d7:
ed:9d:28:08:36:fd:cf:7e:8f:72:30:93:1f:67:4b:
30:ae:2f:b8:3c:e2:80:65:78:b1:1f:ef:21:08:b0:
21:0f:27:df:f4:96:b7:d2:b4:62:d6:05:71:1c:3e:
1f:69:9d:6d:01:a8:f5:30:6e:42:b9:11:bc:b6:2a:
1a:f4:75:42:93:5c:5a:86:25:5a:64:1d:fe:6b:f7:
f5:e3:1b:76:99:cc:e6:25:b9:3b:4e:2e:91:2f:e9:
5b:b4:39:86:73:95:75:4d:45:ce:34:28:3e:03:f4:
03:f5:77:09:11:dc:75:17:a3:bc:b7:7c:82:41:e8:
d6:e3:3b:43:49:75:83:e2:50:35:8a:6e:1f:26:85:
7e:78:49:06:ec:19:e3:8b:e1:88:b0:c2:11:c0:f5:
d7:f7:11:c1:7b:9b:5b:6b:6e:15:d0:5d:a7:e6:f0:
90:ba:da:26:27:b8:bd:02:96:f2:0f:15:87:d1:b7:
40:c6:24:62:dd:be:9e:e4:07:8e:43:a2:a8:2d:1a:
3c:2d:62:aa:da:c5:ec:04:ef:e6:81:1a:3d:99:87:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:DD:26:05:50:73:76:73:4C:0A:C6:9B:A4:9C:81:A4:68:1F:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A8FFD4C60211EF913062B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.23.0/24
Signature Algorithm: sha256WithRSAEncryption
67:25:ae:ea:31:9d:b9:13:8a:d2:64:87:f8:51:6d:b0:0b:cf:
9f:38:1e:73:41:5a:3f:88:c1:bc:fd:22:75:cc:d7:4c:4f:aa:
a4:98:01:8a:d9:d7:61:1a:d7:f2:13:9f:e8:d2:92:4f:04:aa:
6c:57:59:68:45:12:00:e6:94:49:a7:17:2e:51:2c:ff:69:68:
8d:79:6f:88:ee:71:8d:c4:20:9e:2f:d4:df:d9:b6:48:f7:f6:
56:4f:02:6e:3a:85:7b:3c:f9:06:9c:7d:71:2b:0d:5e:f5:c6:
f1:f2:b1:41:11:d3:1b:f0:b4:ac:8f:51:ca:01:7a:be:ab:4b:
06:f4:1e:ab:93:25:bd:24:b1:30:e7:2c:b7:d6:b5:47:3f:e8:
b3:6d:32:7f:28:f3:cc:c3:d5:2f:e7:18:b6:20:81:7b:33:7c:
18:29:89:26:81:fc:ac:72:c9:3c:26:c5:d4:8c:71:0e:ab:5c:
47:06:47:22:92:2b:29:a4:82:b7:9f:26:e9:3d:a5:51:a3:56:
b4:06:39:5c:4a:cd:2c:85:64:82:c5:ec:54:6e:cf:46:a5:5e:
41:de:38:56:bf:8e:e2:ef:ff:4d:c8:d8:9c:fd:39:cb:08:94:
0f:97:9d:42:5a:1e:72:95:07:11:69:25:42:9f:03:a7:5e:5f:
c1:1a:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:04 2025 by rpki-client