Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469A9600C60811EFB84CA459762E951A.roa
File: 469A9600C60811EFB84CA459762E951A.roa (raw, json)
Hash identifier: U7CtS1px497c2YKIn+1Jfaq8W1SW0twZl2XnxKnOxt4=
Subject key identifier: 24:84:B4:0C:BD:C8:55:B9:88:56:10:19:51:31:65:C5:47:1B:7E:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469A9600C60811EFB84CA459762E951A.roa
Signing time: Sun 29 Dec 2024 17:13:52 +0000
ROA not before: Sun 29 Dec 2024 17:13:48 +0000
ROA not after: Sun 12 Dec 2027 17:13:48 +0000
asID: 17561
IP address blocks: 154.217.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77468 (0x12e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:13:48 2024 GMT
Not After : Dec 12 17:13:48 2027 GMT
Subject: CN=67718350-4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:ea:56:df:ce:d3:f9:37:cc:f3:28:bb:aa:
4c:21:ff:53:87:da:18:30:b7:54:df:09:2e:2f:b0:
2e:08:e8:45:f4:de:1d:bd:3d:43:b7:fe:a8:5a:92:
b5:2f:da:10:48:f5:ac:e1:94:6a:8e:05:de:8c:a4:
d6:5f:d0:4b:fb:70:74:a0:c3:a4:f1:3c:87:ef:5c:
90:a6:65:2b:68:87:f5:b5:48:19:02:80:06:48:f4:
36:5a:5d:e7:8b:b4:de:d0:75:10:48:b4:79:9a:39:
b7:8e:90:d2:80:4f:2d:2e:9c:74:cc:3e:45:1c:0e:
ae:52:31:5a:22:96:4f:96:b2:05:eb:ad:f1:88:78:
6b:fe:47:6c:de:d2:54:d6:64:3e:3e:94:d0:7d:1d:
a8:f7:f7:af:a5:29:38:ff:f5:6d:07:a3:71:76:23:
09:62:d7:71:de:b7:ca:57:9e:4d:7c:71:dd:1a:91:
fd:d4:37:e2:19:6e:8f:bf:0d:7e:9d:6c:f1:b9:14:
6d:91:6e:cf:38:3e:84:fe:7b:c6:cc:3a:f3:09:33:
46:0a:e3:58:c9:d6:cb:61:71:e8:1f:a4:b8:2b:b1:
bb:49:1f:73:a0:cd:b9:87:7f:d4:ba:65:b7:f2:d2:
5b:36:44:da:c1:a3:95:73:3b:85:6f:54:51:1e:01:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:B4:0C:BD:C8:55:B9:88:56:10:19:51:31:65:C5:47:1B:7E:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469A9600C60811EFB84CA459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:35:29:aa:82:ce:44:ad:3b:1a:cc:a3:4c:15:b5:4f:8a:e9:
fc:f7:dd:74:f8:9c:aa:69:b5:24:71:6c:3a:4f:72:5b:13:b5:
eb:e5:82:e5:1a:3b:88:7a:bb:30:92:c7:ee:63:f3:6b:68:19:
c2:03:83:ec:db:65:67:fd:6f:b8:7e:74:29:30:52:6a:5c:8f:
07:f6:31:b5:d5:71:22:b6:1c:e8:e6:a6:07:5e:b1:19:c2:bc:
83:b2:a5:80:17:54:18:49:30:10:55:9c:b0:d8:00:3f:f1:34:
4e:b8:a3:0c:b6:92:6f:73:15:35:0f:ac:3b:02:ad:0f:4b:9b:
f3:0c:e2:6c:8c:5f:72:56:dc:df:3a:0a:5a:e8:9f:1b:7d:18:
3d:dc:ee:83:98:3c:f1:45:3d:24:25:c0:27:56:31:ae:bc:e9:
04:5a:45:f0:0e:7e:e6:c2:f6:8e:38:43:02:03:23:05:89:9c:
09:76:92:34:34:d6:6c:a8:31:af:8d:0e:83:98:87:fc:c3:89:
7a:4b:f8:d2:6f:ae:9e:2e:8b:52:f9:6a:d4:da:f7:97:fc:f2:
0d:9c:60:f1:e8:3d:c8:f6:61:1c:0c:42:2f:20:e9:37:c6:ac:
15:a4:ec:ca:3b:a2:2a:1a:1c:58:06:79:8b:a2:52:ca:9d:71:
bb:73:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:22 2025 by rpki-client