Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4682F28EC62B11EF88078EB3762E951A.roa
File: 4682F28EC62B11EF88078EB3762E951A.roa (raw, json)
Hash identifier: Ekgwnjt5TQ+cC/H7OunCrVbcCgz+id/7tFW3bekAwao=
Subject key identifier: F0:C6:E0:58:4F:76:C4:A7:06:54:03:50:F6:7B:D9:89:04:E7:94:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4682F28EC62B11EF88078EB3762E951A.roa
Signing time: Sun 29 Dec 2024 21:24:24 +0000
ROA not before: Sun 29 Dec 2024 21:24:20 +0000
ROA not after: Sun 12 Dec 2027 21:24:20 +0000
asID: 17561
IP address blocks: 154.217.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77762 (0x12fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:24:20 2024 GMT
Not After : Dec 12 21:24:20 2027 GMT
Subject: CN=6771be08-45fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:cb:5d:6d:93:ba:12:6d:b4:84:40:59:8f:
f4:ca:10:f8:d7:c8:7b:2f:19:6d:d3:b8:08:c2:08:
46:c6:d5:a6:6c:aa:2f:47:fd:6b:74:c2:e9:87:19:
fc:9f:f7:e4:33:dd:99:62:3d:5d:c7:33:59:10:36:
41:b3:d2:92:69:55:1f:f8:c4:5f:6d:1b:ba:8f:29:
76:72:17:e0:0d:27:09:a6:92:4b:a0:0c:9d:9a:61:
e8:eb:80:e6:7f:7c:d2:47:8c:a0:1c:76:f8:d0:cd:
a1:99:8a:b5:12:91:6d:b5:bd:93:be:a2:b7:63:6e:
1a:ca:87:39:80:59:fb:3b:e8:93:89:45:15:73:68:
48:56:4e:2a:ff:b4:f1:a4:99:f3:50:32:b0:66:fa:
bf:c0:d5:0b:d1:b7:71:d4:45:15:e4:cb:90:42:37:
2f:bd:67:e0:3f:68:8b:1b:a0:0c:fb:ea:56:05:f5:
a7:d1:d0:d5:fb:e5:80:55:a2:50:5e:f3:4d:a6:68:
56:8a:24:ed:44:67:cc:05:f7:6c:c1:c8:24:cb:f4:
f1:07:16:d2:d7:9d:72:b2:1b:5c:15:6e:ce:2c:5f:
ef:2a:53:80:d8:61:c6:84:be:13:1c:57:f2:50:cf:
cd:fc:39:4d:ff:89:0e:b5:50:e3:dc:55:2b:e4:28:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:E0:58:4F:76:C4:A7:06:54:03:50:F6:7B:D9:89:04:E7:94:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4682F28EC62B11EF88078EB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.196.0/24
Signature Algorithm: sha256WithRSAEncryption
52:92:3f:b9:25:57:09:bc:c1:9e:60:f2:d1:fa:ea:8a:54:a6:
72:a2:20:d7:32:b8:b7:f4:0f:0d:21:3d:fe:70:4c:b9:51:c5:
93:70:18:04:c8:53:6e:92:e3:06:d2:48:42:0d:a5:ed:79:2c:
7d:7b:29:dd:c2:2d:54:33:ed:71:ae:56:89:75:81:67:66:be:
79:4a:51:67:fd:d4:1d:42:91:e5:ae:9c:d3:7f:aa:83:8a:95:
53:52:fe:1b:b2:2e:5b:00:2d:7e:6e:c1:cd:b2:a8:9a:e4:b6:
9f:bd:2c:4f:ef:a8:c6:d4:36:d8:af:45:35:e5:18:00:b1:ed:
20:70:66:d6:c5:80:5d:48:b5:d8:44:13:a6:a9:c3:b7:39:f2:
ef:82:f7:fa:be:21:bf:5b:37:8b:e8:d7:84:11:38:1d:f0:c2:
cd:16:1d:2f:42:39:ac:92:3a:6f:4e:94:7e:16:06:9e:29:73:
63:86:52:bf:94:27:f5:ef:2b:33:de:0f:14:93:54:cc:34:b9:
fa:98:7f:b6:2a:6d:ee:2f:db:70:14:3d:c2:56:74:e7:e8:f2:
db:17:2b:18:7b:cc:52:54:b4:03:11:28:23:95:b2:92:d9:15:
68:21:f0:ef:59:0c:76:32:0d:70:fc:17:ea:10:c5:69:08:cd:
dd:86:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client