Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9D18BCC52F11EF99B5DD7B762E951A.roa
File: 4D9D18BCC52F11EF99B5DD7B762E951A.roa (raw, json)
Hash identifier: bYG92x2GZVhCtfBRNkR3aHI7J5dwR2nFdJ/EVzMGnZE=
Subject key identifier: 26:71:AC:31:68:47:29:EA:41:A0:77:7E:4B:68:BE:01:F4:A1:C3:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9D18BCC52F11EF99B5DD7B762E951A.roa
Signing time: Sat 28 Dec 2024 15:20:43 +0000
ROA not before: Sat 28 Dec 2024 15:20:39 +0000
ROA not after: Sun 12 Dec 2027 15:20:39 +0000
asID: 17561
IP address blocks: 154.204.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76765 (0x12bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:20:39 2024 GMT
Not After : Dec 12 15:20:39 2027 GMT
Subject: CN=6770174b-75e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:4d:77:ce:00:e0:bc:bc:66:dc:c2:05:17:
b3:80:cb:94:61:95:08:4b:cd:eb:76:1c:fe:6f:a7:
d6:d8:21:2e:e1:49:17:42:eb:22:8e:10:dc:4b:60:
ae:61:b4:fa:69:ec:6c:f2:18:83:1d:62:7a:aa:d5:
9e:82:bc:5d:35:68:17:18:aa:ec:43:ca:74:5d:ef:
32:c1:be:59:ad:9d:a0:40:cf:bc:c2:d7:3e:48:b9:
4f:c5:ec:cf:c2:ac:22:4d:4f:7f:73:f5:25:98:01:
b4:ba:b4:a7:c1:2e:6b:61:26:e5:43:86:2d:cc:02:
52:5b:e9:d6:4c:6b:3e:52:cc:29:0c:51:b8:b9:37:
b3:83:f3:9a:68:dc:d3:84:bf:3b:c9:c2:28:80:4d:
42:fd:95:01:fe:3f:78:c0:84:46:12:00:30:cb:da:
f9:b3:d4:ca:24:aa:12:2f:95:ff:cc:47:46:0e:ee:
3d:a7:eb:25:b7:bc:26:f4:d1:d1:8a:0f:99:1e:47:
c9:f2:67:d3:aa:93:d9:78:68:85:9f:bd:5e:75:e4:
18:0d:4a:e6:9d:b1:cb:06:8e:9e:5f:fc:d3:e0:0f:
76:46:73:b5:77:32:4a:5e:a7:ca:2b:62:06:3e:d4:
a2:dd:37:40:d3:f9:3f:38:a9:99:d6:d8:af:11:b0:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:71:AC:31:68:47:29:EA:41:A0:77:7E:4B:68:BE:01:F4:A1:C3:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9D18BCC52F11EF99B5DD7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
73:86:d4:b5:b1:6a:e6:c4:ef:f6:3d:86:fe:dd:16:33:40:7c:
42:f5:1e:18:5a:6e:c4:a8:f3:64:34:7a:51:61:e7:29:57:26:
4b:f9:32:3b:48:0e:43:a9:6e:70:92:d3:26:6b:cb:a3:04:4c:
f2:44:bb:88:e7:42:dd:05:3f:59:b8:ba:96:82:db:6d:ad:37:
ea:8a:74:af:21:e4:a1:7a:6b:da:25:82:4a:11:00:c9:10:1b:
db:57:c3:10:06:9f:93:40:fe:1a:2e:65:b8:91:7f:e0:48:68:
15:3a:2b:2f:97:c5:e0:b6:8b:1b:00:73:3a:2a:09:dc:f2:e5:
24:22:44:fc:26:3f:60:9b:e6:f1:1e:b7:5f:3d:72:46:ce:2b:
f6:03:36:8a:95:5f:fd:bd:bf:7f:e7:d9:e0:ca:20:2c:70:ce:
14:19:44:1b:30:ea:f1:8b:08:48:37:c6:d4:88:6a:43:df:15:
7f:f6:ee:ba:2c:b2:c8:75:e0:69:cb:61:fd:44:ff:26:0d:3a:
9b:16:19:ba:a8:57:42:ed:0d:ee:af:e1:2f:2d:04:bd:8d:c6:
e6:31:9c:92:06:87:3d:85:13:46:74:89:d8:ed:d7:dd:f4:02:
11:50:8d:7b:20:ea:1c:86:25:be:f6:c2:e5:89:8d:ec:a7:73:
d7:06:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:22 2025 by rpki-client