Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B868A2C54C11EF90B7FEB1762E951A.roa
File: 52B868A2C54C11EF90B7FEB1762E951A.roa (raw, json)
Hash identifier: iGmPCCrG0nN9DFZvGW29SkCzAiG+OuuVwZkWRj4NHBQ=
Subject key identifier: 44:AA:9A:65:43:B8:81:74:0A:A9:2C:03:47:8A:93:14:CC:7B:81:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B868A2C54C11EF90B7FEB1762E951A.roa
Signing time: Sat 28 Dec 2024 18:48:27 +0000
ROA not before: Sat 28 Dec 2024 18:48:23 +0000
ROA not after: Sun 12 Dec 2027 18:48:23 +0000
asID: 17561
IP address blocks: 154.209.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77029 (0x12ce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:48:23 2024 GMT
Not After : Dec 12 18:48:23 2027 GMT
Subject: CN=677047fb-06ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:e6:65:70:ea:db:11:a7:c3:35:6f:07:1f:
20:08:24:cc:5c:b4:d9:fc:c6:99:0b:a4:af:c7:20:
ac:e0:d0:e9:64:d2:40:39:e8:c0:05:62:5d:99:ca:
65:49:d1:dc:1f:94:bc:2b:d2:6f:c2:1c:b2:05:cb:
32:49:d1:d5:3c:f8:e7:e1:aa:23:ef:d5:54:e1:9e:
28:23:d7:22:e5:e6:f4:9c:84:80:be:c6:18:07:05:
73:27:40:ef:9d:46:e7:cd:37:22:2c:f9:33:73:3e:
3f:ae:79:cd:2f:a4:9e:19:f3:f2:17:ef:a7:7b:fd:
2c:6c:b1:89:fa:a1:d3:a1:50:b3:5d:96:65:07:fd:
4c:7e:4c:aa:20:1a:1d:f8:6b:e6:ce:ab:ae:cb:38:
dc:82:b1:8e:cc:41:de:62:1c:dd:59:7a:c3:0a:4d:
7f:a9:79:ab:d3:79:ad:7c:43:08:f9:bf:50:da:3f:
60:c0:4b:d3:cc:92:91:8e:a2:46:92:22:b5:7c:ef:
5a:e3:36:05:ed:b5:b9:70:8a:aa:2d:73:9f:59:1a:
86:54:99:80:14:43:df:30:dc:cd:81:f7:a1:29:5d:
0e:fb:74:1f:bf:6f:f8:d9:ed:52:0a:2f:33:41:3e:
b9:e4:f2:d5:36:71:a7:a8:7d:af:20:b1:f8:cd:9c:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:9A:65:43:B8:81:74:0A:A9:2C:03:47:8A:93:14:CC:7B:81:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B868A2C54C11EF90B7FEB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.79.0/24
Signature Algorithm: sha256WithRSAEncryption
53:16:92:54:33:8d:86:dd:8b:9b:88:31:1c:88:37:a4:47:a5:
5c:1f:8c:bb:34:b6:d5:bd:0a:d0:22:c8:5b:f0:64:46:11:4c:
c5:bb:9d:cb:db:1e:8e:57:63:59:01:a6:62:7d:d7:14:8f:e1:
91:89:6a:30:30:79:fd:6a:ed:88:dc:73:2a:26:73:8e:6e:1a:
85:de:8c:a0:0f:1c:66:12:09:99:39:87:7d:f2:50:90:4f:88:
a7:bb:a7:8c:42:96:fc:e8:ed:57:e4:c9:12:32:2d:80:99:b5:
0a:04:32:a1:33:89:88:ea:cb:6d:bf:b8:ae:de:b6:dc:3b:b1:
e2:b9:5b:8a:6b:db:99:26:87:b1:f4:0d:cf:dc:cb:a0:b8:d5:
a2:1b:9c:19:7f:8a:85:da:bb:0c:c6:56:31:f9:09:6c:79:60:
14:59:0d:b3:0f:d5:73:7d:8c:42:32:ee:6a:42:32:5e:d8:32:
ea:1a:16:16:5d:1f:6e:6a:ad:b5:2d:11:27:c5:6c:33:19:2b:
5e:4f:37:32:9a:e1:0b:87:67:c0:ce:5c:e6:97:65:92:fc:f8:
5b:d8:da:e3:97:c4:fd:85:e1:6e:a7:71:52:e2:30:c2:7c:a3:
5c:a7:08:ec:3f:7c:76:8e:b9:57:1f:0f:f7:20:fd:bb:fb:51:
b2:f2:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:10 2025 by rpki-client