Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD3A532C60011EFB469EEA6762E951A.roa
File: 5BD3A532C60011EFB469EEA6762E951A.roa (raw, json)
Hash identifier: cbvBSbf0YhJ/Ars7+us2E51WHiuFzxzXw1a930gcIS4=
Subject key identifier: D0:B5:87:C9:BA:CA:2B:67:37:BF:46:39:19:49:B2:D7:2B:96:FE:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD3A532C60011EFB469EEA6762E951A.roa
Signing time: Sun 29 Dec 2024 16:17:11 +0000
ROA not before: Sun 29 Dec 2024 16:17:08 +0000
ROA not after: Sun 12 Dec 2027 16:17:08 +0000
asID: 17561
IP address blocks: 154.217.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77400 (0x12e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:17:08 2024 GMT
Not After : Dec 12 16:17:08 2027 GMT
Subject: CN=67717607-68df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:ed:af:ec:07:68:df:9f:d8:d3:23:0f:e4:
d1:b3:e7:90:eb:09:19:b0:a3:50:25:3b:db:45:81:
79:2b:6f:38:1f:69:6e:c7:cb:3d:b6:b2:47:43:cd:
5c:a5:c9:d1:19:a9:6a:01:93:81:38:9f:3f:8d:eb:
6e:40:f0:76:1f:4e:cc:44:61:c3:a1:5a:72:1e:c6:
78:30:53:2f:37:e2:91:5c:a0:fd:6f:08:b7:b0:79:
62:32:96:8a:19:7a:2d:c0:c5:d3:59:e6:55:57:34:
81:3d:42:eb:cd:19:d8:bb:61:19:9c:3d:a6:d0:3c:
53:46:13:24:97:33:2b:65:5d:56:30:5a:05:25:69:
e1:72:9f:aa:32:43:61:dc:c6:37:41:36:a2:a3:e9:
48:ff:f6:92:38:5c:06:44:7c:a8:ea:60:ce:58:78:
8d:0c:85:27:15:ea:d2:d4:59:91:d5:ef:b3:a8:fe:
91:44:34:0e:fb:b1:f9:e9:a9:a5:e4:79:13:31:cc:
62:5c:f5:c5:83:40:ba:81:f2:c3:96:de:03:72:df:
85:b6:05:f4:6b:bb:90:28:93:c7:4f:bf:d6:d7:ba:
fe:e2:38:f1:34:0b:bb:1e:c2:d3:8d:f0:8d:68:f0:
9e:d4:f2:03:5e:aa:82:1f:a7:cb:14:3e:61:bc:c5:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:87:C9:BA:CA:2B:67:37:BF:46:39:19:49:B2:D7:2B:96:FE:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD3A532C60011EFB469EEA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.15.0/24
Signature Algorithm: sha256WithRSAEncryption
01:68:b3:5d:e3:b3:d1:fb:c6:65:ca:b2:77:e5:f2:16:16:3f:
12:23:e5:6a:b0:f0:2a:b1:f2:75:e2:0b:bd:cd:41:23:c2:c1:
da:9b:fc:6e:b3:3c:dc:c6:9b:1d:ae:10:06:8e:bf:e4:c9:b6:
d7:8c:a8:37:d3:d4:8e:cd:e7:33:f0:b9:3b:78:f7:bf:ee:c4:
3f:7b:a2:b7:55:36:24:0d:2a:c3:14:20:59:07:dc:0a:d0:2f:
31:24:ee:d0:f2:08:ee:65:4e:7b:c4:83:9a:6d:d0:a7:67:be:
70:a2:fb:0f:6d:79:aa:80:71:d2:90:17:3d:82:ea:12:c2:e3:
45:01:e8:e9:2c:82:aa:e2:78:cd:3c:64:54:b7:2a:eb:5e:71:
a0:ea:8c:42:7a:de:15:3c:8d:b3:f8:34:ba:4e:4b:d7:f0:3a:
5f:11:f9:d9:f3:be:2e:1b:6d:e7:da:ae:a8:82:94:54:38:e1:
ae:96:01:d0:6e:ad:07:59:15:e6:43:d2:dc:ef:5c:e7:d1:09:
1b:23:07:e5:a9:04:0f:99:a7:15:5b:ca:ac:0f:6d:43:ba:33:
63:87:c1:54:cb:d2:1b:82:a1:74:48:47:bf:a5:a6:8b:cb:17:
51:e5:26:54:09:07:1a:a9:75:ea:ff:33:d0:8d:66:b8:6e:0f:
43:a9:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:15 2025 by rpki-client