Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67999BAAC54811EFA53A4899762E951A.roa
File: 67999BAAC54811EFA53A4899762E951A.roa (raw, json)
Hash identifier: ynR/xjOyyCNb/D/EYVcL95vuZVju5jRdD+dXVPXvqKY=
Subject key identifier: 3F:EC:5C:7A:CD:B8:2D:FD:F6:E2:65:CA:A4:77:8F:F9:7B:39:AF:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67999BAAC54811EFA53A4899762E951A.roa
Signing time: Sat 28 Dec 2024 18:20:24 +0000
ROA not before: Sat 28 Dec 2024 18:20:20 +0000
ROA not after: Sun 12 Dec 2027 18:20:20 +0000
asID: 17561
IP address blocks: 154.209.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76993 (0x12cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:20:20 2024 GMT
Not After : Dec 12 18:20:20 2027 GMT
Subject: CN=67704168-2868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:78:69:44:69:1d:b4:2e:f5:2f:2a:0f:48:
c3:8f:ea:70:a8:cd:de:d4:c2:82:b6:c1:91:bd:a7:
2e:8e:de:a5:b3:fc:a1:1e:e4:0e:27:18:32:0f:c8:
df:62:8c:5c:77:9a:bb:0a:8f:3f:51:89:f7:ee:fe:
28:c5:dc:3d:e4:12:7f:e6:74:ac:d4:92:90:ca:7b:
d5:09:d3:16:c4:b3:22:d9:0e:7e:d8:53:8f:c9:9f:
f2:df:07:78:36:23:22:80:c7:6e:d0:c6:b7:bd:68:
28:0c:95:09:84:d4:0d:10:51:bf:aa:d2:a4:00:5a:
49:8f:b0:4c:c5:8d:79:ae:cf:03:c6:04:cf:01:7e:
72:e9:29:77:f5:c7:be:ad:54:8a:76:66:c1:88:ec:
26:27:5f:2f:ca:38:af:a7:60:43:49:b3:49:a1:86:
9b:e2:30:6c:1c:57:7a:bc:9b:a7:87:7c:81:82:fd:
61:bb:b1:ae:79:84:0e:49:72:a6:29:bf:7b:5d:78:
de:c9:b4:83:78:f7:fd:d2:da:9c:73:a3:ab:b2:f9:
3e:27:d0:f6:fb:2a:d5:e5:d6:9a:ef:a8:f4:49:d4:
26:0d:a7:37:7b:18:44:46:74:f1:b7:a2:96:b4:fd:
c7:ef:cd:4a:75:0e:cd:f5:9d:a8:7e:5c:70:9f:27:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:5C:7A:CD:B8:2D:FD:F6:E2:65:CA:A4:77:8F:F9:7B:39:AF:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67999BAAC54811EFA53A4899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:51:60:9d:5b:e3:f6:cb:ab:75:82:d5:10:0f:6d:dc:02:94:
c5:c7:a0:70:cf:87:4a:34:84:37:be:11:42:5f:2d:a3:86:10:
a7:38:88:24:ed:9a:02:54:6d:39:fb:d4:2f:1c:3b:ce:89:0c:
85:9e:05:6f:8a:04:b4:00:62:6a:ce:b9:ca:61:9a:1d:d3:f4:
9b:0a:74:44:bc:10:a7:04:7c:29:e3:37:59:19:ba:41:3f:a2:
86:67:af:0b:cc:b2:8c:f1:84:69:25:b7:c0:34:ef:eb:bd:ba:
b7:e3:ef:85:fb:07:c4:47:87:a6:b6:ea:4e:e1:c9:31:6e:1f:
65:5e:60:b4:57:ee:03:09:7e:ad:ce:32:23:ba:b6:c1:4f:7d:
75:22:df:e5:55:bd:aa:26:19:5f:33:ac:75:ac:69:05:47:28:
38:9a:95:36:d4:88:b3:06:e3:c4:4b:7d:c9:af:94:68:cb:a8:
c0:5a:fb:51:51:d0:84:b2:51:ec:95:07:bb:35:21:82:fc:50:
f7:31:95:62:c7:79:c9:e7:7c:ab:c2:d4:f2:45:0c:47:e8:48:
f4:16:ef:a4:30:e7:2e:69:a6:f7:77:b0:0e:bc:23:10:3e:14:
c1:41:44:39:f8:00:49:dd:c0:c0:b0:2e:67:34:f0:5a:ad:02:
4c:c7:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:47 2025 by rpki-client