Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4711884EC53311EFB40A6D93762E951A.roa
File: 4711884EC53311EFB40A6D93762E951A.roa (raw, json)
Hash identifier: JZQqhubtim2nzO6cZuQepsh8Jlse+usakIi162mNgiY=
Subject key identifier: D1:58:E5:7D:18:7D:61:31:09:08:50:AF:F1:37:C6:6F:CB:72:3E:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4711884EC53311EFB40A6D93762E951A.roa
Signing time: Sat 28 Dec 2024 15:49:10 +0000
ROA not before: Sat 28 Dec 2024 15:49:06 +0000
ROA not after: Sun 12 Dec 2027 15:49:06 +0000
asID: 17561
IP address blocks: 154.204.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76797 (0x12bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:49:06 2024 GMT
Not After : Dec 12 15:49:06 2027 GMT
Subject: CN=67701df6-df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:6a:cb:80:94:78:1b:d5:fb:d4:c0:d4:5b:
c1:c3:0f:5b:d8:b1:5c:0f:2c:0a:37:12:d6:81:15:
93:10:ef:56:39:23:5f:72:73:41:7d:57:5c:02:dc:
73:08:b5:f6:76:77:6d:5c:c6:29:d9:57:c2:ad:f0:
94:f2:38:33:20:0f:74:b0:b9:a2:a5:59:ab:76:95:
c3:cb:45:e2:83:06:d5:18:d9:3f:7f:c6:cd:28:6f:
b5:db:06:bd:d7:cb:4a:49:5d:e6:cf:8f:70:19:a8:
30:2b:43:1b:fe:92:d0:82:2b:a0:41:47:59:02:8a:
2e:3c:2d:4c:31:88:68:a7:18:44:b2:6f:cc:34:7e:
27:c1:80:02:1a:7f:de:31:cc:f8:9f:1c:51:a5:03:
f1:6f:d4:b2:e5:41:6a:9b:0b:d9:3a:b5:cc:0d:61:
58:a9:f5:f4:ff:a1:66:8a:4d:de:41:23:bb:58:20:
f3:31:24:67:37:40:4f:86:cc:08:fc:2e:f1:1d:fc:
2e:86:5f:8c:a9:4d:17:12:52:04:b0:78:a8:ad:b0:
4b:9b:a6:b6:f1:46:ef:56:93:eb:e2:97:58:a5:8b:
9e:a5:ab:b5:64:7c:03:ac:a3:f3:22:ba:44:d8:b3:
30:0f:a2:90:b7:e0:8e:96:f8:14:65:16:a6:42:75:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:E5:7D:18:7D:61:31:09:08:50:AF:F1:37:C6:6F:CB:72:3E:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4711884EC53311EFB40A6D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:39:62:ec:a1:05:5c:59:39:00:2f:87:63:50:79:c5:e5:af:
e8:41:c5:49:a1:40:23:77:b7:79:48:03:e8:4e:30:60:c5:00:
a9:e4:29:e5:6e:a3:e6:75:e8:2c:d0:be:d7:13:08:d8:9b:ae:
25:a3:d0:f3:38:6f:53:c7:7c:70:2d:1f:dd:20:b2:21:97:c4:
09:63:f9:ea:de:d6:5d:d1:69:0e:f1:d0:39:da:14:ae:ea:10:
91:db:6b:ab:b1:c9:0d:fa:a8:ed:b6:ac:bc:96:c1:ee:cc:f8:
03:c8:f5:0b:b7:46:8e:93:30:ce:e7:2c:2a:46:b6:5a:3c:c7:
fb:89:e9:65:c3:e3:8e:2a:7a:d4:cb:51:fe:6b:08:8f:20:2d:
68:1a:39:58:28:75:08:d1:d6:26:e7:a2:7f:33:8b:a8:2b:56:
8f:ad:9b:62:ca:33:30:2f:c4:08:2a:e7:6d:af:25:7e:1a:35:
57:d5:66:49:c0:21:8b:7e:68:e5:57:bc:a4:d8:af:b7:e7:d8:
ff:95:e9:ab:58:28:f0:c9:82:89:37:09:cb:62:4c:19:36:ad:
fa:b5:f5:ef:bc:78:92:87:96:ec:c9:64:ea:2d:08:13:cc:e5:
b9:07:a0:7a:52:87:7d:f1:6f:7a:ef:a8:e0:59:84:34:c3:9e:
38:03:d3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:27 2025 by rpki-client