Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583D8ACAC41911EF97A330A1762E951A.roa
File: 583D8ACAC41911EF97A330A1762E951A.roa (raw, json)
Hash identifier: 4ZVsr0FoTtlXt7lVt4yzq9j/On0WyBjMdK260i+ZDAs=
Subject key identifier: CA:F4:75:9E:2B:63:A8:A7:03:D2:3E:3F:1D:A7:EE:40:9B:4F:06:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01297D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583D8ACAC41911EF97A330A1762E951A.roa
Signing time: Fri 27 Dec 2024 06:11:01 +0000
ROA not before: Fri 27 Dec 2024 06:10:57 +0000
ROA not after: Sun 12 Dec 2027 06:10:57 +0000
asID: 17561
IP address blocks: 154.198.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76157 (0x1297d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:10:57 2024 GMT
Not After : Dec 12 06:10:57 2027 GMT
Subject: CN=676e44f4-5862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:99:72:25:5b:42:d1:7a:18:17:34:29:9e:
1b:ce:d9:ac:3b:ba:b4:81:04:8c:54:0f:2e:6d:db:
b2:c9:c3:43:f3:6a:cf:44:8e:d5:4c:90:85:72:f5:
84:93:a1:18:f6:98:03:51:65:b0:a3:9f:9f:65:ac:
d0:66:98:50:49:91:17:fd:e1:a1:aa:5a:12:a7:af:
29:eb:69:38:f6:22:26:a6:ec:87:e7:9d:1b:b4:16:
98:1d:7b:b4:15:11:09:ea:74:3b:c4:65:f7:66:27:
68:56:2e:21:45:00:b4:f6:20:76:3c:a1:01:92:5e:
f1:a5:46:07:56:65:2f:2f:72:11:e3:5c:a4:fd:0f:
2f:9b:ef:5f:b4:e7:e8:2f:02:5f:11:0f:7d:98:25:
43:59:64:3d:0a:c0:76:8b:83:fb:de:ea:ba:ab:a0:
a6:9a:16:db:6b:35:f6:0e:42:09:6a:12:de:36:89:
01:91:da:b7:f5:31:3e:5c:48:81:7c:7a:17:fd:bc:
7a:cb:8f:20:d9:5a:dd:3c:b9:a8:de:be:b3:0e:a5:
fb:59:05:3b:ad:be:1f:f4:8e:e8:18:07:20:aa:54:
c4:00:6c:03:2d:cf:14:3e:2a:d3:c8:d9:1f:73:4b:
6c:6f:50:93:18:6f:a7:91:0c:0c:f7:22:26:c2:47:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F4:75:9E:2B:63:A8:A7:03:D2:3E:3F:1D:A7:EE:40:9B:4F:06:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583D8ACAC41911EF97A330A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:26:c5:7d:bf:32:85:d0:15:c9:15:7b:5c:2a:06:c8:a6:fa:
90:7f:83:88:42:70:0b:a0:97:0f:24:48:f0:c8:f1:53:b4:0a:
3b:be:6e:83:01:7a:21:3d:f0:d0:8e:55:f1:fb:c6:e3:32:32:
17:76:ba:57:0c:46:06:f7:9c:a2:c1:39:2a:a6:eb:f1:04:77:
6f:e3:38:1a:99:b2:4a:9c:a5:3d:f0:a8:08:94:16:69:be:7f:
23:06:65:ad:53:7e:4d:38:a0:be:d9:44:06:23:11:5c:26:79:
ec:4e:05:dc:60:8f:b9:b9:f4:bc:7f:63:a6:09:99:c3:c4:5c:
29:fd:f9:aa:4f:97:31:d0:7a:b9:d5:b2:3f:b6:8a:1c:3e:cd:
99:82:d8:8f:d0:88:85:d7:78:aa:c5:ea:14:e7:45:08:bc:98:
df:c5:41:82:2f:1f:4f:4a:8c:e1:71:a8:90:e6:4c:8b:5e:8f:
c7:28:f3:2c:cb:ea:ba:b9:6a:bd:20:b0:9b:71:ec:89:a7:eb:
60:21:a9:0f:7d:d9:e0:34:92:a3:87:47:73:e9:56:be:30:57:
7d:e7:3a:26:f6:3a:34:12:24:19:6c:b0:ec:f4:61:37:0e:18:
5b:c5:1a:a7:cc:87:1c:3d:d1:e4:42:00:0f:01:88:54:9d:d0:
88:76:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:55 2025 by rpki-client