Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524BEFB4C60B11EF8C07CD6C762E951A.roa
File: 524BEFB4C60B11EF8C07CD6C762E951A.roa (raw, json)
Hash identifier: JDxC/A3wT5qKiJPv+iU2Pf8Y+53+pFe4WmYJHsajl1A=
Subject key identifier: 6F:3C:10:9E:F9:C6:70:D1:2C:74:99:1F:63:FD:D5:22:12:1D:E6:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524BEFB4C60B11EF8C07CD6C762E951A.roa
Signing time: Sun 29 Dec 2024 17:35:40 +0000
ROA not before: Sun 29 Dec 2024 17:35:36 +0000
ROA not after: Sun 12 Dec 2027 17:35:36 +0000
asID: 17561
IP address blocks: 154.217.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77494 (0x12eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:35:36 2024 GMT
Not After : Dec 12 17:35:36 2027 GMT
Subject: CN=6771886c-b9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:8b:39:6e:83:f9:3f:5c:17:69:55:f0:22:
8d:36:f1:80:f9:eb:09:c0:43:da:ea:ec:86:37:c5:
e5:14:f6:fb:40:6a:62:81:fd:db:30:c4:76:65:d2:
3a:8d:1f:b0:b1:19:72:81:a4:64:ca:af:2b:1a:ef:
79:c9:62:66:aa:05:85:9d:37:c3:59:7f:2a:26:07:
fe:1e:4f:22:af:58:59:f2:8d:dc:14:17:b7:4f:55:
9d:7f:a4:c7:6e:35:93:1c:34:2b:28:d4:3a:51:d8:
83:d2:a4:61:f3:eb:23:73:d9:d9:5e:70:aa:4b:0b:
c0:36:d9:75:eb:98:17:c3:67:fe:2d:90:67:c0:d6:
3c:4e:65:e0:dc:5d:a1:63:48:f7:8b:b4:16:28:83:
92:f2:92:61:28:3d:7d:20:5d:19:a5:a2:9c:ea:e5:
a5:ac:3c:a0:74:49:71:aa:0d:e5:32:40:c8:b7:ac:
71:91:47:d1:75:a8:ef:c3:84:03:ef:7d:d7:3e:17:
4c:b9:e0:2e:7d:fd:88:41:8d:bb:a4:ee:0c:c6:1a:
1b:f3:b6:73:b2:21:bc:35:b2:2e:60:72:25:51:38:
a4:87:e5:40:e9:3d:18:13:70:52:2a:61:a1:58:79:
57:21:7d:bd:4c:8a:2d:60:36:25:4f:ae:e8:92:4d:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:10:9E:F9:C6:70:D1:2C:74:99:1F:63:FD:D5:22:12:1D:E6:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524BEFB4C60B11EF8C07CD6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.62.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d4:7d:dc:0a:59:c2:83:da:45:bf:af:98:91:04:11:08:eb:
08:4a:93:4f:ca:f2:46:3b:ea:d1:88:92:00:cf:bf:67:39:f0:
fb:29:e6:80:e1:8c:f8:fc:24:4f:66:a5:91:4f:b4:a6:8a:35:
cc:1a:97:e7:e1:1c:02:56:27:e8:ec:26:0e:af:0b:98:63:d6:
75:9c:65:f0:bf:9f:ad:5a:0e:d3:b6:23:89:b5:d0:6c:cf:6a:
69:1b:f7:b2:3d:f3:97:e1:8f:4f:2e:91:23:b1:be:17:e3:24:
25:93:ef:c3:bc:f2:2d:cf:ad:b9:98:a3:2d:2c:95:ec:a9:ea:
6b:7d:51:5c:df:2f:84:b4:6b:40:b3:6d:63:d9:8c:27:12:7f:
91:82:f2:97:d3:ab:85:6f:b7:03:de:be:d4:18:fb:d2:8e:34:
17:9c:a1:17:fe:b0:21:bf:ab:01:41:f5:d1:0a:7e:2f:3e:68:
4e:c1:66:77:8d:c4:8b:e0:8a:04:7b:f0:44:81:e4:98:14:e1:
1c:de:65:71:32:f1:1d:3c:ca:db:49:67:66:49:10:4c:54:65:
d8:d3:04:b5:a6:c0:54:04:14:62:bd:55:37:3a:0b:4e:96:af:
e9:4e:79:a1:95:df:49:79:3b:66:d1:bb:04:44:df:8c:7a:ac:
64:06:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:57 2025 by rpki-client