Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45101868C42911EF942C9986762E951A.roa
File: 45101868C42911EF942C9986762E951A.roa (raw, json)
Hash identifier: H71Ldx9hwPCdi4mSgFFR8iCQ+Vq5A9k7yhXgO8Du27E=
Subject key identifier: 33:74:5E:22:A0:73:EF:46:F7:AA:D9:20:25:91:F3:4A:FD:7D:62:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45101868C42911EF942C9986762E951A.roa
Signing time: Fri 27 Dec 2024 08:05:02 +0000
ROA not before: Fri 27 Dec 2024 08:04:56 +0000
ROA not after: Sun 12 Dec 2027 08:04:56 +0000
asID: 17561
IP address blocks: 154.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76299 (0x12a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:04:56 2024 GMT
Not After : Dec 12 08:04:56 2027 GMT
Subject: CN=676e5fae-acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:b5:ae:47:3e:77:12:7e:90:e3:6f:12:90:
0e:3d:b2:ba:35:da:e5:7a:fc:80:9f:44:ac:5b:b3:
c2:fa:2c:a0:0f:56:67:97:5f:3d:e3:f8:91:a5:d5:
24:cb:96:4d:15:da:80:77:b2:cc:7f:86:ca:24:fb:
84:7b:a6:59:af:68:fb:ad:e1:37:e0:07:59:42:86:
c8:a7:2d:1b:9d:87:0c:4c:fe:c7:27:01:ea:3a:49:
db:28:fb:93:81:9c:ec:75:b7:59:44:54:16:0c:83:
14:b8:3c:38:ea:f7:0c:4d:16:cb:aa:4f:3a:fd:6c:
77:43:23:b2:00:60:06:61:b7:e6:e1:5d:02:5a:83:
86:24:79:a3:40:bf:18:b4:cf:8c:55:0b:09:b6:0a:
5c:7e:6c:b2:09:21:b9:af:76:59:79:ce:92:a0:ec:
fc:fe:b1:46:80:f2:87:ea:bd:27:4c:ce:d6:8e:f2:
3d:a9:9a:91:fc:83:33:58:be:42:1e:35:4c:5a:a3:
21:c0:14:c2:96:6c:e0:e7:de:5d:63:6e:ee:ad:35:
b3:77:8a:3b:8d:11:81:cc:53:c4:e2:cf:72:86:bc:
c5:33:59:20:17:ff:8d:cb:7d:36:00:00:2a:d9:88:
c7:87:12:61:9e:80:5e:a3:90:6c:a9:b9:45:48:c4:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:5E:22:A0:73:EF:46:F7:AA:D9:20:25:91:F3:4A:FD:7D:62:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45101868C42911EF942C9986762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d0:6a:b0:d9:e0:e2:4d:79:1f:52:be:a6:54:cd:98:89:a2:
56:b4:c7:f6:28:9a:b8:2a:99:48:0f:f5:af:79:58:ec:07:ab:
a9:ab:18:e3:4b:2d:57:e3:cf:2a:6d:6b:62:25:73:5d:e5:b1:
cb:72:41:73:79:dd:d6:16:82:9b:32:e3:dd:94:49:42:77:b1:
3f:c8:25:42:d4:83:02:76:93:5f:a6:f7:ef:9b:a1:73:79:95:
b3:af:b4:08:2e:32:65:e7:ca:66:3b:c2:67:81:d8:76:e4:c0:
b5:fc:f8:2a:91:07:50:c4:e3:c6:cc:e2:e6:43:56:e6:48:6a:
b1:fa:48:98:f3:2a:4b:b8:90:7b:51:f5:a1:61:f0:0f:77:ab:
ee:52:6e:a7:e3:35:7a:e5:e9:37:57:a8:cc:6d:ca:03:3f:94:
be:92:cb:46:b8:dd:22:25:cf:55:06:f3:89:47:b3:c4:c1:6b:
2e:f0:41:58:89:71:dc:54:16:31:d3:e8:f9:c5:a5:a2:c5:e8:
ad:fd:2e:99:3f:03:dc:6f:a6:61:48:0a:3b:c1:ee:c2:49:be:
f0:f4:5c:ab:38:4c:05:81:f9:3e:4e:04:5b:19:6b:eb:61:9f:
43:56:0b:88:09:73:e2:b9:82:1c:f3:02:47:e5:db:e9:ec:47:
6e:c7:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:58 2025 by rpki-client