Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B52E70C35E11EF86E9A873762E951A.roa
File: 52B52E70C35E11EF86E9A873762E951A.roa (raw, json)
Hash identifier: SjjicRMjhshB1wM+GvN1kkaOwxwHdVwQoDYTLaSIq6s=
Subject key identifier: 7E:14:17:DD:0F:EC:3E:70:28:FE:60:93:D1:95:30:2C:0F:6A:0C:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012617
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B52E70C35E11EF86E9A873762E951A.roa
Signing time: Thu 26 Dec 2024 07:52:15 +0000
ROA not before: Thu 26 Dec 2024 07:52:12 +0000
ROA not after: Sun 12 Dec 2027 07:52:12 +0000
asID: 17561
IP address blocks: 154.88.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75287 (0x12617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:52:12 2024 GMT
Not After : Dec 12 07:52:12 2027 GMT
Subject: CN=676d0b2f-ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:a4:c9:e8:86:c4:a2:db:ea:8c:e3:70:76:
01:7a:d5:09:82:68:9f:fa:4d:cd:43:c2:60:e3:ec:
41:cb:15:33:cb:26:9b:cc:4f:5e:b5:d9:21:a9:4a:
a1:4f:c4:92:be:d4:eb:c3:55:3b:28:86:b6:bc:48:
ff:5e:2b:82:95:08:cc:f3:cf:9b:7a:60:68:85:98:
14:f0:ce:58:82:37:f5:ae:c8:b6:5f:c8:c2:a8:62:
b4:5e:2d:d5:46:df:d6:07:05:20:fe:f9:ab:12:42:
67:75:b2:c3:b3:7e:51:e5:51:cf:72:9d:81:43:69:
53:08:82:c3:ab:b1:02:21:02:6a:53:87:49:58:15:
e5:46:b7:15:4c:81:fd:38:6f:80:60:28:8d:dc:c1:
d8:92:00:96:7e:22:1d:d4:7a:bc:d9:61:d4:01:3a:
e6:a7:ef:ca:0e:98:8f:c4:de:02:c4:59:e9:7a:de:
f4:b0:09:87:82:df:93:9e:e1:07:e5:27:a5:0b:3d:
a4:93:c9:19:06:9e:33:33:c4:ef:78:a9:39:ce:1e:
9f:84:b5:89:21:1a:74:17:64:59:2e:cc:bd:86:98:
27:74:7d:0d:f4:ed:8b:23:47:7f:ad:0e:98:63:ad:
36:0d:55:69:f8:8d:16:d0:0a:22:29:40:5d:e6:57:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:17:DD:0F:EC:3E:70:28:FE:60:93:D1:95:30:2C:0F:6A:0C:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B52E70C35E11EF86E9A873762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.62.0/24
Signature Algorithm: sha256WithRSAEncryption
83:dd:f4:02:19:4e:94:77:7a:b0:d9:42:f8:fa:03:64:73:a3:
49:a9:5c:cb:30:91:10:ae:92:aa:dc:8c:a9:f5:3f:2d:cd:9b:
a1:05:4b:16:98:ca:77:56:a5:cf:e4:44:42:4d:b9:e5:1e:36:
ae:b5:a7:09:db:61:96:ed:e5:cd:a3:be:b9:d8:e2:42:75:54:
a9:aa:58:e0:6f:b9:b0:06:8e:b1:8c:ee:0b:ea:14:f2:c9:f0:
b6:9c:03:ab:35:92:b2:d0:9d:32:b6:ba:c1:4a:f4:ba:89:29:
4c:43:97:6f:ce:21:7d:c1:ce:3a:ea:34:4b:ae:af:e0:05:db:
70:e4:64:fa:a7:63:b9:39:e6:fc:27:60:17:f2:44:2a:83:35:
3b:b8:03:67:fb:43:1c:c9:89:2b:75:53:4b:df:67:37:3d:91:
91:20:ad:5a:4e:d2:19:c0:f1:24:64:36:3f:bc:a9:37:be:b1:
2d:ef:09:f3:c5:d0:d5:d6:99:47:2a:d6:d8:ff:7f:4d:f7:08:
d9:39:c4:84:71:75:d9:35:de:62:ff:e8:14:83:7b:cf:aa:37:
2b:de:27:d7:81:3b:53:c0:53:5b:a6:04:67:4d:4a:e9:2d:10:
aa:16:33:d5:88:3d:a3:28:89:47:b5:0f:78:2f:1f:08:06:f4:
de:9d:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:36 2025 by rpki-client