Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C029BB0C0D111EFB4B2FCAE762E951A.roa
File: 4C029BB0C0D111EFB4B2FCAE762E951A.roa (raw, json)
Hash identifier: fSp5L6fwWj8Jt/RMDHHsq3PKHVCEcnPqXlKPVTc/C+0=
Subject key identifier: FB:6F:7D:75:DB:3F:11:71:56:01:64:89:88:9D:49:B7:D4:BB:54:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C029BB0C0D111EFB4B2FCAE762E951A.roa
Signing time: Mon 23 Dec 2024 01:57:43 +0000
ROA not before: Mon 23 Dec 2024 01:57:39 +0000
ROA not after: Fri 10 Dec 2027 01:57:39 +0000
asID: 17561
IP address blocks: 154.83.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73272 (0x11e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:57:39 2024 GMT
Not After : Dec 10 01:57:39 2027 GMT
Subject: CN=6768c397-9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:d5:bf:ce:f3:b9:d5:be:3c:23:21:b8:51:
4a:5e:70:c1:81:33:50:02:93:da:f4:e9:a5:26:29:
8a:c6:13:7b:84:b5:b1:72:05:18:62:b3:fc:c8:25:
32:13:21:f7:f6:20:f5:31:d9:fc:c2:fe:56:0c:1e:
bd:ef:14:04:4b:36:c8:13:33:0f:37:2e:1e:15:87:
76:bc:40:55:66:0a:1c:03:17:8e:da:46:91:ef:e5:
3e:a7:07:63:4f:db:49:63:aa:3b:16:a2:ee:53:0e:
27:d4:c9:78:a2:7d:54:51:ce:60:f7:52:48:9a:ad:
f3:e7:5f:3f:8e:d9:10:6a:78:8a:bc:60:e7:11:dc:
41:5d:a8:e2:7e:75:d7:f7:d5:78:48:a8:b5:44:c5:
f4:ba:34:2c:2c:5c:40:c5:b6:4a:10:60:05:52:06:
f9:25:03:9b:74:67:d3:23:5d:5c:d8:4e:04:63:e4:
8d:92:49:a3:6e:83:0b:2d:77:b0:f5:d9:1e:1e:ba:
ac:a8:b1:45:e3:24:96:02:3c:19:00:b2:6e:86:8f:
84:51:5c:96:ca:c8:0f:d0:09:46:20:ed:e7:d1:f6:
4a:53:15:f8:e2:76:61:dd:5d:21:ba:91:8d:76:88:
3e:c8:c2:57:e0:b7:61:9b:38:6c:94:2b:8e:71:a4:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:7D:75:DB:3F:11:71:56:01:64:89:88:9D:49:B7:D4:BB:54:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C029BB0C0D111EFB4B2FCAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c4:64:ef:93:ea:4e:6e:6c:57:45:9a:96:09:56:0a:bf:d9:
55:38:c5:ad:25:49:84:4f:3d:af:bd:ee:52:dc:27:3e:a6:ce:
58:68:69:2d:f5:83:e1:a0:4e:0a:a8:df:6b:c0:74:3d:42:44:
61:16:28:8b:ff:3e:ef:69:d1:b1:c3:6f:69:21:05:37:b1:72:
05:fe:06:12:da:72:54:80:67:89:75:92:c9:bf:96:3f:26:96:
6e:2a:28:fe:91:76:06:62:74:42:2f:60:5b:1c:fe:0b:9e:ed:
9e:23:9d:c5:a4:a6:39:99:31:e3:b7:dd:33:b5:2a:b4:0c:f7:
f7:1b:c5:15:26:c2:43:48:c0:02:04:b6:9b:1d:16:45:88:eb:
f7:af:03:04:81:2d:32:2c:82:c8:af:ad:c3:f3:9d:68:ca:d5:
64:2a:cf:03:41:2e:ca:26:fc:e3:7e:6b:12:54:85:81:6e:20:
bb:88:81:fc:d9:6f:e5:92:d0:d5:d5:ce:e6:f3:1d:f6:f2:93:
cd:04:4b:4e:cb:ec:ef:73:60:ec:53:82:07:c6:e2:04:3e:1c:
f2:45:81:28:50:61:49:2d:a9:41:38:70:54:91:31:36:32:15:
4a:00:b8:d7:6e:1b:95:ec:45:9f:ba:37:68:95:69:5d:1c:ab:
0a:43:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:23 2025 by rpki-client