Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6142CB6CC60311EFBE94D1B9762E951A.roa
File: 6142CB6CC60311EFBE94D1B9762E951A.roa (raw, json)
Hash identifier: ap+xpKETFsi3sUIMGTOz+kJcrmo5zTdVJo6GGfbIPP4=
Subject key identifier: 14:39:9E:86:CB:17:F3:7B:EB:DF:5C:13:36:04:DD:FC:55:AD:E9:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6142CB6CC60311EFBE94D1B9762E951A.roa
Signing time: Sun 29 Dec 2024 16:38:49 +0000
ROA not before: Sun 29 Dec 2024 16:38:45 +0000
ROA not after: Sun 12 Dec 2027 16:38:45 +0000
asID: 17561
IP address blocks: 154.217.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77426 (0x12e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:38:45 2024 GMT
Not After : Dec 12 16:38:45 2027 GMT
Subject: CN=67717b19-e12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:3f:1a:b5:c8:6b:71:1c:e5:eb:09:0f:5e:
b9:41:31:b1:e9:b4:31:19:60:6d:82:f1:41:3a:b1:
c9:c0:70:7c:b4:bb:ca:74:7e:69:bd:0a:20:fe:d0:
eb:93:d2:3a:ab:3a:41:95:f1:93:aa:ad:c8:0a:3a:
a5:2d:44:9e:bd:d5:75:de:73:99:7c:85:15:f0:20:
6a:70:dd:51:a3:9d:63:7b:cb:28:3e:52:07:23:93:
78:5d:97:72:51:1a:b0:66:97:d1:90:8b:cf:55:62:
d7:aa:98:98:5d:09:a3:49:1a:72:88:b5:ca:ef:3c:
06:e2:b4:02:8a:bf:38:0b:cb:88:c5:c7:f1:c9:a3:
49:44:19:0d:c2:ea:48:89:fc:31:70:32:3b:73:54:
62:da:d1:b9:2d:7c:39:6c:19:2f:ae:b1:c3:d5:ab:
59:2c:f2:1b:cf:2d:16:46:68:5a:18:80:ec:07:59:
93:d7:39:19:a9:60:a5:31:05:cc:57:0b:8d:3c:14:
9e:b3:e7:6a:66:7c:f3:dc:13:64:2c:7f:fc:a4:8c:
f3:65:5b:f0:23:e6:2f:21:65:0b:aa:e2:61:7c:94:
f9:26:1b:97:c5:3c:d7:6f:75:23:67:7b:cd:ef:1f:
e5:b2:14:84:13:ae:89:95:a3:bd:0b:93:14:44:d8:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:9E:86:CB:17:F3:7B:EB:DF:5C:13:36:04:DD:FC:55:AD:E9:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6142CB6CC60311EFBE94D1B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b3:8c:d0:74:e4:85:12:f9:c0:2c:85:d6:20:0b:30:d2:b6:
51:72:53:86:c6:bc:b3:31:1b:63:0f:5a:ce:1b:05:f3:8c:59:
b8:20:8c:f5:b9:a3:63:79:49:f7:f6:50:2e:8c:ec:05:2f:8c:
5e:10:81:67:9a:2a:a4:3f:61:61:18:17:d3:b8:4b:90:5b:25:
58:58:78:8e:0b:a2:af:e2:f5:51:f1:79:20:12:89:32:57:16:
45:78:df:a3:e9:27:c3:e6:a8:3b:25:00:14:5a:34:23:94:33:
a4:01:ca:56:16:71:bd:4a:03:20:93:87:77:a7:b8:24:a6:d7:
4f:32:33:b6:d4:57:7c:59:e3:db:d8:80:19:e8:bb:6f:42:12:
8b:fb:72:e3:64:1e:68:d7:ff:59:f7:6f:eb:b8:66:f2:d8:81:
91:2f:d1:ff:f3:a1:78:04:4a:79:a0:78:3a:c4:1b:83:cf:5c:
09:5c:35:ab:b2:57:08:64:f7:9d:a5:e4:cf:28:1a:df:b6:67:
4e:35:43:81:e5:17:7c:d9:8d:63:18:8c:e3:7a:b3:d8:d9:e6:
06:92:f3:36:2b:7a:d0:16:6a:69:cc:29:2e:83:45:e6:24:41:
2f:24:95:7e:b9:e3:14:99:9c:8a:e1:b9:64:55:26:37:9a:3a:
d9:a5:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:59:14 2025 by rpki-client