Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C2C58C54211EFAC6DE372762E951A.roa
File: 5D5C2C58C54211EFAC6DE372762E951A.roa (raw, json)
Hash identifier: ir4jOTqwRzFLYNBxLaaRSbLqKckqccTD/Th3Yb8HMHs=
Subject key identifier: C1:2E:9B:36:65:FA:F7:C2:A6:25:13:B6:FE:91:D7:2D:1C:FD:36:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C2C58C54211EFAC6DE372762E951A.roa
Signing time: Sat 28 Dec 2024 17:37:10 +0000
ROA not before: Sat 28 Dec 2024 17:37:06 +0000
ROA not after: Sun 12 Dec 2027 17:37:06 +0000
asID: 17561
IP address blocks: 154.206.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76937 (0x12c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:37:06 2024 GMT
Not After : Dec 12 17:37:06 2027 GMT
Subject: CN=67703746-dda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fa:de:0f:32:b0:02:09:a8:fe:9f:9d:fc:41:
bb:d5:ec:a0:11:ca:08:3c:8a:b7:87:1a:f7:a1:1c:
4c:20:b4:3f:ea:7d:39:47:fc:e5:51:1a:b0:3b:71:
28:b4:31:e7:3f:21:f5:b0:cb:7c:52:0f:93:41:26:
eb:0d:d9:a4:b1:6c:6e:07:67:22:9b:5d:1a:bd:2d:
91:25:60:3f:96:5e:60:b7:d5:63:99:c1:8e:fc:0c:
6e:c9:56:a5:bf:85:82:03:78:2d:d3:36:b5:69:21:
c8:c8:92:3f:77:33:4a:15:64:bc:82:5d:ea:9f:7f:
55:fb:db:92:5f:26:a7:b9:45:f6:87:66:c2:85:d5:
9b:ac:bc:11:8e:91:8b:c1:ff:c0:76:cd:01:50:53:
8a:2b:6d:eb:ab:0a:26:40:b5:f4:95:8a:4f:db:23:
71:48:33:1c:20:5a:10:4c:08:f1:07:00:db:f1:80:
81:36:1d:5b:e3:f8:93:7e:2f:5a:6c:bd:89:5a:74:
20:3a:1c:92:c0:79:6d:65:f7:98:34:d3:42:c0:02:
e1:92:1b:a4:30:9b:66:a4:b4:9c:3d:57:bd:d8:49:
73:c3:eb:f3:50:a3:f1:d4:f4:3f:ca:04:73:62:27:
ff:31:79:4d:68:18:88:c5:05:78:fb:31:e8:41:e8:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:9B:36:65:FA:F7:C2:A6:25:13:B6:FE:91:D7:2D:1C:FD:36:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5C2C58C54211EFAC6DE372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:17:30:75:a9:6f:63:70:1a:7b:a6:50:d8:af:42:3f:66:ca:
5f:ca:25:ca:dc:3b:61:2c:7d:45:c1:e1:76:cb:fd:97:f2:f6:
7f:56:93:f8:0e:1a:13:8f:72:93:c6:bb:02:f3:68:39:8e:8c:
55:a9:52:f8:aa:5b:b3:28:df:a7:3f:87:eb:af:0f:87:9e:a5:
8c:87:08:6a:9f:ff:40:b6:2a:5f:44:a1:96:31:59:2e:67:6e:
31:b0:4f:d8:19:ab:5d:94:e3:fd:e4:41:46:6d:86:5d:e5:bf:
4b:f6:aa:58:97:a4:df:15:a5:29:a6:a0:47:3a:48:4a:a0:74:
ef:1a:9f:ed:9f:fc:41:8a:ce:9b:d3:e7:87:1b:55:e5:62:07:
82:c2:1e:7e:d8:19:e7:fb:a8:70:e3:0c:e6:c3:bd:4e:07:c0:
1d:73:20:0a:7b:43:8e:e0:d0:e4:23:e2:d1:82:8b:62:b4:5f:
b8:85:f8:65:4b:ca:b8:ee:30:ac:54:87:a8:e5:1f:43:6e:96:
cd:68:6c:2c:61:d6:f9:5b:5f:93:f0:5e:f4:cd:50:0a:72:d2:
d4:64:f0:4b:f4:a9:2a:a5:06:bf:fd:24:cc:bf:73:f2:f7:fb:
0d:23:0f:dd:0e:fc:58:f2:68:1b:1f:86:ae:d1:b6:ba:c8:99:
83:62:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:17 2025 by rpki-client