Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B2A2D02C36F11EF8C36BF60762E951A.roa
File: 4B2A2D02C36F11EF8C36BF60762E951A.roa (raw, json)
Hash identifier: sxvonOawuM1cGO1X1wB/PXedo3IRhK3elcTZXrtnqWE=
Subject key identifier: 26:31:BE:09:12:CE:3F:A3:F6:0B:A1:4D:B2:ED:90:B0:39:0C:AF:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012718
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B2A2D02C36F11EF8C36BF60762E951A.roa
Signing time: Thu 26 Dec 2024 09:53:44 +0000
ROA not before: Thu 26 Dec 2024 09:53:40 +0000
ROA not after: Sun 12 Dec 2027 09:53:40 +0000
asID: 17561
IP address blocks: 154.94.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75544 (0x12718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:53:40 2024 GMT
Not After : Dec 12 09:53:40 2027 GMT
Subject: CN=676d27a8-0eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:68:1e:b7:e5:4d:c4:1c:74:a1:c9:64:4f:
7e:fb:e6:e4:6f:92:9d:a0:4f:28:72:09:6e:78:83:
9c:5f:52:a4:c3:a8:66:31:c5:59:2a:a0:28:25:a1:
5c:5a:36:81:65:8b:f2:8f:15:e8:b1:cd:6e:e2:a1:
f7:3d:c3:f0:54:2d:f3:5f:0d:cb:7d:98:36:ca:c5:
31:c4:58:44:4b:f2:a8:a0:8e:bb:ba:b1:74:c9:fd:
d0:23:0f:5d:0b:20:1f:91:32:be:93:9d:2a:c1:23:
dd:33:69:aa:da:f9:26:72:88:b8:49:63:53:41:92:
d2:b5:16:b5:9d:0e:a1:e6:31:b9:af:b9:a9:a4:0b:
e4:90:ab:e2:4f:75:09:94:ca:e5:20:2c:23:5b:e6:
a7:71:cc:fb:ce:bc:c3:b6:87:5b:28:52:62:b8:17:
48:98:f7:57:ee:f1:04:a8:02:44:06:d7:42:f9:fc:
16:51:ab:5e:ac:e2:66:87:67:9d:37:99:15:04:15:
39:9c:8e:fc:82:2e:0d:35:02:9f:a3:58:20:ac:73:
85:f5:73:08:0f:5f:d0:01:46:2d:a2:25:06:11:78:
e8:bb:ff:f5:e6:13:94:73:23:49:c3:1d:77:e3:5e:
d2:d7:49:b8:ab:52:48:00:7d:4e:6d:bd:d4:43:ed:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:BE:09:12:CE:3F:A3:F6:0B:A1:4D:B2:ED:90:B0:39:0C:AF:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B2A2D02C36F11EF8C36BF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:10:c6:85:55:95:54:d7:2c:75:01:de:66:9e:44:31:fb:bf:
fd:aa:b1:00:a9:5a:bd:05:05:7d:e9:ee:50:06:b8:4b:d9:45:
fa:44:29:bd:79:8d:6d:93:de:db:97:c4:fa:b4:52:da:3a:24:
bc:cf:17:08:99:1e:0b:66:97:63:f2:ca:94:5f:93:26:b6:69:
4f:95:dc:b0:d2:41:12:cd:2b:ea:17:63:b4:da:db:ae:45:0c:
a1:4e:95:d0:0c:4c:4c:ea:c2:22:44:7f:3c:ad:df:d3:8e:17:
cc:0f:57:74:c8:30:6e:09:68:39:6f:bd:0a:b2:d5:e4:dc:b5:
ad:be:42:59:da:36:75:21:35:49:62:09:c4:5d:61:a7:ad:48:
07:a9:37:11:23:a0:5e:7f:ed:85:f3:df:43:44:a6:56:e9:5a:
5f:97:97:1e:07:eb:e6:6c:bb:4a:f8:67:bc:62:2b:e1:12:59:
42:47:b5:e1:44:1c:6f:0c:f9:50:a4:92:e6:0f:a6:f4:91:b6:
f6:7d:b2:29:96:f4:7d:08:72:8f:dc:a4:d6:dc:ae:b6:3a:37:
7e:d5:8e:d5:f8:85:72:7c:26:a8:ca:7d:19:4a:f4:b7:cf:ec:
5a:15:44:cb:55:06:cc:a4:95:fb:84:00:cd:8b:d0:8f:65:20:
c2:a6:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:14 2025 by rpki-client