Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565D6B52C3CA11EFB732939A762E951A.roa
File: 565D6B52C3CA11EFB732939A762E951A.roa (raw, json)
Hash identifier: X+xmXl/NDHfN54nMt1ynDMau012PEnE97BaM2InNL0Q=
Subject key identifier: 75:CB:76:9A:57:CC:29:15:AC:D3:80:94:B6:04:88:82:C3:B0:74:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565D6B52C3CA11EFB732939A762E951A.roa
Signing time: Thu 26 Dec 2024 20:45:27 +0000
ROA not before: Thu 26 Dec 2024 20:45:24 +0000
ROA not after: Sun 12 Dec 2027 20:45:24 +0000
asID: 17561
IP address blocks: 154.83.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 21:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75772 (0x127fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:45:24 2024 GMT
Not After : Dec 12 20:45:24 2027 GMT
Subject: CN=676dc067-5f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:9e:ef:e0:e6:7a:cf:78:ee:37:7f:92:9a:
66:2d:df:67:ac:9b:37:7c:28:70:05:36:a4:36:91:
90:52:af:22:ad:b4:2a:4a:94:54:5f:a1:d5:28:3d:
5f:06:08:14:34:83:82:94:7a:c6:10:03:4a:bb:78:
ef:d3:19:f5:11:54:50:9f:0d:2f:3b:56:5e:0e:51:
37:ba:ee:78:14:11:27:c7:a9:a6:6f:ba:dd:ab:04:
0d:b7:70:81:d8:79:86:6a:1e:00:ae:ea:41:7a:cb:
99:a6:3a:db:cb:f3:ff:bc:eb:0c:1b:a5:1f:db:c1:
28:73:6c:ea:20:a2:3d:89:8c:52:d4:0f:4f:d8:b6:
07:05:67:29:2f:66:95:f4:53:a6:5b:ff:61:5c:e6:
c7:91:b7:27:b1:65:4c:c5:e5:6f:a7:d1:4d:14:c2:
8c:82:a5:7c:ca:2e:02:4a:65:1a:c7:4f:aa:98:54:
0d:36:68:10:34:78:e0:c8:77:ae:2d:15:28:73:76:
04:12:d2:af:23:5d:7f:c1:3e:44:a3:be:97:c9:f8:
5d:47:92:df:0d:86:01:08:e3:1e:62:50:22:7e:e7:
36:d5:87:c6:82:5b:da:20:e5:8e:fa:da:58:12:ce:
3c:3f:73:b0:7c:f1:cd:46:27:ef:7a:b4:1e:ed:2f:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:76:9A:57:CC:29:15:AC:D3:80:94:B6:04:88:82:C3:B0:74:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565D6B52C3CA11EFB732939A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:78:ed:52:ad:3f:1e:dc:a6:eb:c7:dd:17:7f:e7:dd:91:7d:
10:56:ad:c2:27:f3:14:5c:42:f4:17:22:a9:05:c6:ff:a8:42:
ee:e8:28:ba:95:af:ba:56:bd:86:a1:4c:86:09:bf:57:80:25:
d0:58:df:74:e8:6f:2d:5b:48:78:63:17:ca:1c:f6:32:27:ce:
02:24:d1:c0:98:45:51:1c:c6:a1:02:f2:53:7d:af:40:54:a4:
ef:dd:f7:42:92:7e:d8:91:3b:d4:4f:42:53:00:38:65:1d:15:
c3:27:67:42:6c:af:26:ba:9a:48:63:08:db:a7:43:e0:fc:51:
0e:f7:a6:fb:85:3e:4a:64:bb:5a:1d:d3:58:d4:b6:e1:73:5d:
a9:8c:64:93:42:d2:fb:ab:8f:e4:d2:e0:f5:f3:3b:3e:e1:f9:
84:80:17:ed:fa:5c:5d:cc:a8:02:c9:35:15:ef:26:c7:75:58:
06:76:f4:1b:d0:5e:71:fb:b9:31:fe:a0:2c:05:bb:10:6c:85:
d4:2b:06:84:ed:e3:89:0c:9b:3f:2e:4d:99:f0:96:ee:c9:1a:
da:65:0f:7b:cd:9c:fb:83:ae:83:e8:78:0d:63:f2:0d:5e:25:
cf:84:f1:c7:f2:9f:6e:cf:3a:61:28:1d:d1:50:f2:c2:8d:8e:
13:fe:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:08:40 2025 by rpki-client