Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE8AFD0C61811EF9FC618BD762E951A.roa
File: 4EE8AFD0C61811EF9FC618BD762E951A.roa (raw, json)
Hash identifier: mBm9+WHpUkK0Hj2ofV8IX9HGZpGzLfOOwegi2ne1rcs=
Subject key identifier: 1F:5E:D1:87:FB:3B:05:19:F1:07:0A:D9:FE:A0:FB:6C:05:26:9F:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE8AFD0C61811EF9FC618BD762E951A.roa
Signing time: Sun 29 Dec 2024 19:08:38 +0000
ROA not before: Sun 29 Dec 2024 19:08:34 +0000
ROA not after: Sun 12 Dec 2027 19:08:34 +0000
asID: 17561
IP address blocks: 154.217.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77604 (0x12f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:08:34 2024 GMT
Not After : Dec 12 19:08:34 2027 GMT
Subject: CN=67719e36-4ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:15:9b:35:ae:30:fb:4d:27:19:42:22:18:
6b:91:30:45:bd:32:4e:ac:45:da:89:21:8b:c7:2b:
51:42:aa:4c:01:41:2f:2d:c0:48:4c:a6:0c:63:c3:
38:58:5d:91:f7:e6:c4:3a:77:f6:8c:88:9c:81:bd:
a1:c2:6f:67:6d:70:47:55:59:aa:34:7a:51:96:06:
74:1e:e8:e0:d2:bd:a4:82:1f:6b:d5:55:aa:e7:71:
fa:16:99:38:76:c0:28:33:f5:cc:b7:f7:bd:1e:f5:
94:5c:39:d1:05:78:44:d2:c7:e1:74:16:a9:ba:55:
8a:6e:7b:51:c3:f5:3f:27:16:c2:2e:8a:8d:05:61:
fe:4e:0a:f8:3f:bb:42:16:f3:13:d3:3b:a1:c2:e1:
92:03:ea:1c:5b:e2:ab:97:1f:7f:3b:23:da:a0:fd:
ce:21:50:83:cb:52:3a:96:ee:2a:09:84:c5:ed:15:
80:7e:b8:28:c9:a2:b0:02:a2:3b:64:e6:38:8d:2f:
e0:f2:0e:ab:22:92:92:91:0a:f3:9e:f5:e9:ee:df:
3e:ad:06:53:8c:5f:62:b3:01:94:30:f1:7a:74:11:
5c:1c:8e:82:44:29:93:55:20:da:79:93:b7:2b:66:
30:20:f6:06:09:be:43:24:d7:75:ca:b9:95:72:a3:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:D1:87:FB:3B:05:19:F1:07:0A:D9:FE:A0:FB:6C:05:26:9F:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE8AFD0C61811EF9FC618BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3d:39:0d:a8:7d:93:91:c8:30:6d:58:d3:08:25:02:e9:4a:
84:7e:6b:79:45:40:56:a2:91:7f:80:75:88:9c:b5:9c:88:7a:
71:44:76:2d:77:de:db:e6:60:3b:13:e3:9a:cc:0f:5b:3f:ac:
1e:20:c3:84:c1:98:48:6a:22:15:e1:b5:ee:84:b8:70:88:80:
5d:ee:0d:fd:40:5f:c6:fc:30:44:86:3b:f2:4f:31:3c:e2:8f:
94:f3:2d:af:27:f9:75:fb:09:13:c2:2c:33:15:2c:23:3b:b4:
e8:81:1a:f9:0a:2c:48:22:d9:f9:38:3d:bf:3e:b2:0a:ee:4b:
db:e0:e3:58:32:2e:09:41:e6:61:39:8f:00:13:5a:65:e4:3e:
7e:d5:d1:07:9c:58:ff:e4:b8:14:27:45:8c:7b:c2:89:72:7b:
3a:70:a4:21:1b:12:6d:b6:1f:ac:35:30:86:dd:30:66:b8:b5:
e4:20:69:e3:67:67:63:3b:e1:2e:79:bf:67:89:c3:65:8f:3a:
5b:27:79:c3:2e:6d:40:e5:d7:3e:ab:52:4a:cb:9b:0f:6d:37:
1c:1d:f7:bf:9b:00:19:32:39:bd:86:e5:a1:be:0e:d7:41:04:
1a:3f:ff:31:b3:a6:78:72:21:c3:53:35:5c:65:99:85:30:14:
4a:1c:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:37 2025 by rpki-client