Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DF4ED8C62A11EF9AB42CAF762E951A.roa
File: 53DF4ED8C62A11EF9AB42CAF762E951A.roa (raw, json)
Hash identifier: X+f9bnZxNqv4pM4eSFu7h6TjIBAcpy9pjvnGqfhynRE=
Subject key identifier: A1:17:84:33:8C:E6:B6:C8:4E:4F:9C:FF:0D:C1:1B:C4:D5:2C:96:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DF4ED8C62A11EF9AB42CAF762E951A.roa
Signing time: Sun 29 Dec 2024 21:17:37 +0000
ROA not before: Sun 29 Dec 2024 21:17:33 +0000
ROA not after: Sun 12 Dec 2027 21:17:33 +0000
asID: 17561
IP address blocks: 154.217.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77754 (0x12fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:17:33 2024 GMT
Not After : Dec 12 21:17:33 2027 GMT
Subject: CN=6771bc71-701d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:8a:be:8f:40:fb:0e:a1:a2:b3:bb:69:bf:
43:9f:1a:0f:7e:20:d4:64:53:f1:10:b7:0d:4c:be:
9e:7d:34:99:76:68:f5:e8:89:ed:3b:3b:dd:57:83:
88:c0:0e:c6:49:c5:74:e5:3f:b4:99:85:7b:ec:9e:
db:f9:9b:8f:48:cc:bf:02:0d:d5:9c:33:d8:7b:44:
e7:de:c4:d9:64:c4:07:06:03:e2:3e:14:a4:11:3a:
58:fa:23:09:73:52:e7:2c:49:9a:6b:c2:17:2c:c8:
22:c2:5d:40:46:8e:90:da:bf:cf:7d:99:21:2b:58:
0b:b1:5c:dd:67:1e:19:83:3b:85:d7:48:80:48:ed:
88:df:38:8e:4d:3b:0c:b9:b1:80:34:6d:b6:d2:97:
a1:c9:bf:e5:57:38:ff:ba:80:21:54:04:a8:21:76:
c7:3c:40:89:cd:87:44:26:d2:46:91:9b:6b:e1:5d:
c1:fe:54:5a:38:30:ac:ac:cb:21:e1:6f:1b:e2:a1:
09:b6:6e:ad:bf:e6:f0:c7:2e:f9:78:83:73:f6:37:
4f:c8:a5:3d:57:97:15:9e:9c:c9:34:e0:79:fb:0f:
b0:61:22:98:f5:99:78:54:9f:af:1b:c6:35:78:ae:
0b:48:4b:10:2e:8b:aa:db:0c:b0:13:31:e6:56:75:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:84:33:8C:E6:B6:C8:4E:4F:9C:FF:0D:C1:1B:C4:D5:2C:96:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DF4ED8C62A11EF9AB42CAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f3:7c:a6:60:49:82:78:c3:89:2e:57:26:23:98:e3:d7:f5:
67:c5:b7:68:2c:df:d9:4b:4e:4d:70:4c:6a:b2:af:3e:0d:e0:
d7:ae:ef:36:2d:ae:13:ad:00:08:c1:e9:36:a4:71:04:e8:49:
13:39:4b:19:aa:59:c8:c2:83:dd:36:54:94:d9:9d:ed:35:7f:
62:c2:60:74:20:f5:9c:ef:ac:07:f3:04:0c:31:45:90:5e:d6:
f4:ca:8b:47:76:37:73:b2:5a:0d:04:08:04:f0:19:b4:fb:e2:
e2:b8:09:38:79:1c:ae:72:72:71:bb:8b:b4:d2:d4:cd:0a:de:
4a:82:00:a7:45:a5:07:ce:8f:58:05:61:f5:a2:26:fb:1a:93:
43:8e:9d:ec:02:7f:cc:48:86:24:ed:d6:3c:2a:61:1c:49:15:
bf:c2:59:c4:2b:1c:50:2b:a0:2b:8a:3b:44:18:42:48:90:f0:
38:ae:30:b6:67:21:dd:0f:61:69:e2:a6:88:29:b4:5a:ef:b3:
7a:7b:c5:b9:61:f0:b6:af:b6:76:ad:7f:f3:28:8a:a2:b1:e1:
d0:ff:dd:86:a6:57:69:be:e9:78:6b:7e:ac:7b:7e:bf:5f:70:
21:fa:f8:43:e7:81:bc:8c:5a:44:ab:ac:4e:a6:19:b9:18:cc:
3e:9c:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:09 2025 by rpki-client