Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/526B4E2AC52C11EF8FFEA968762E951A.roa
File: 526B4E2AC52C11EF8FFEA968762E951A.roa (raw, json)
Hash identifier: 7QoqKAz7/0yT/9pwd2Kugov/gS/kXDM5D4+6QVfKDRc=
Subject key identifier: 4F:EE:F0:67:03:64:60:4B:8B:75:6A:08:72:B1:8F:CC:42:CE:DD:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/526B4E2AC52C11EF8FFEA968762E951A.roa
Signing time: Sat 28 Dec 2024 14:59:22 +0000
ROA not before: Sat 28 Dec 2024 14:59:19 +0000
ROA not after: Sun 12 Dec 2027 14:59:19 +0000
asID: 17561
IP address blocks: 154.204.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76737 (0x12bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:59:19 2024 GMT
Not After : Dec 12 14:59:19 2027 GMT
Subject: CN=6770124a-c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:84:1d:bf:8a:23:0f:d5:a3:51:f6:ed:3b:
aa:2a:c5:00:b2:04:32:32:3d:4c:2e:0f:2c:99:34:
ad:bc:35:87:57:1e:dc:4a:56:81:19:bd:25:66:fc:
71:e2:0e:ea:72:a3:f1:9b:c6:df:6c:04:29:0a:4c:
25:54:af:9b:42:de:09:a5:77:34:94:9c:58:0e:cf:
0a:17:36:d6:37:73:53:79:08:03:bd:47:36:01:0b:
f1:a9:9e:5e:10:2f:16:60:33:8a:79:3e:b1:3b:7b:
09:c1:00:de:51:31:35:a3:ac:f3:a7:ac:96:b3:55:
9a:3f:16:4f:a4:0f:9d:17:61:11:0a:6f:8e:66:92:
29:e9:14:bb:fb:0c:4d:36:41:3c:fa:78:8b:de:b6:
bb:2d:df:21:1d:c4:ce:86:8f:8a:f9:02:a9:04:e0:
5a:87:75:12:b7:00:99:45:3e:e2:3e:94:2c:9a:a0:
4a:f8:d8:8b:37:7d:0c:b6:07:59:ec:48:49:48:c8:
56:16:43:59:0a:fa:9f:fb:57:b8:fb:55:71:c6:a9:
80:47:08:4b:99:1c:40:ae:6b:bb:00:fb:32:04:4b:
dd:15:ff:60:84:04:98:ca:98:3d:c8:44:75:0f:45:
23:2c:33:14:51:77:28:fb:8b:0c:7e:67:b9:79:2a:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:F0:67:03:64:60:4B:8B:75:6A:08:72:B1:8F:CC:42:CE:DD:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/526B4E2AC52C11EF8FFEA968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c4:0b:94:94:18:a5:2c:57:f3:f0:86:54:df:75:ba:eb:06:
2f:e4:fd:01:f1:ba:ba:98:2c:b6:80:fd:f5:e2:2e:9c:e8:c4:
19:d8:35:c4:a5:aa:93:2b:e5:25:b3:a9:36:46:97:b7:d1:c8:
2e:d1:84:6f:90:f5:df:a5:2c:f4:f2:99:e3:f4:77:d4:ea:a8:
33:f6:30:04:52:81:84:18:0c:a1:4e:62:aa:7c:a8:94:46:eb:
a2:fa:94:b5:48:4d:fe:1b:b2:e2:a2:ce:69:cc:43:a1:7e:47:
e5:c4:5a:74:c0:9e:68:fe:11:e4:c0:0d:2b:69:87:43:2b:a5:
e6:a0:e2:41:ac:78:fc:3d:04:72:83:83:a5:3f:c6:fe:4c:7d:
25:48:d9:dc:e1:c8:13:eb:98:ce:7b:44:7f:3b:f9:56:97:d9:
59:2a:34:f1:e4:40:ab:13:fa:cf:dd:09:d7:0b:83:20:d9:74:
85:dc:99:d1:34:f2:72:cd:54:f3:a9:56:07:53:21:aa:09:bc:
21:ad:bc:12:03:b9:3f:a9:4e:d8:7d:61:74:71:99:5d:8d:a8:
b3:0f:65:7c:4a:e7:9b:15:bc:2f:f0:1a:11:20:81:23:aa:47:
94:a9:b0:8c:2b:ee:09:93:8e:d3:a3:bb:ce:42:5c:7f:45:17:
4a:0a:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:02 2025 by rpki-client