Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69143786C54011EF9E95DF67762E951A.roa
File: 69143786C54011EF9E95DF67762E951A.roa (raw, json)
Hash identifier: EXNZsq9xExNul9rLmWZlwfCt0mO0Xy2/sdqGcqt0RbU=
Subject key identifier: 80:77:39:EE:19:CE:C5:4E:5F:26:F8:01:4A:CA:BC:C9:D9:B1:7E:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69143786C54011EF9E95DF67762E951A.roa
Signing time: Sat 28 Dec 2024 17:23:10 +0000
ROA not before: Sat 28 Dec 2024 17:23:07 +0000
ROA not after: Sun 12 Dec 2027 17:23:07 +0000
asID: 17561
IP address blocks: 154.206.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76919 (0x12c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:23:07 2024 GMT
Not After : Dec 12 17:23:07 2027 GMT
Subject: CN=677033fe-a3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:00:8f:32:6e:66:28:86:f9:d4:94:be:91:
0d:a8:da:4a:c0:ac:df:8c:c2:60:bb:ee:38:ab:60:
62:b4:6e:3d:82:e0:a4:57:f8:f6:f1:b7:17:91:3f:
a6:3d:da:20:38:22:f4:4b:47:9e:97:37:49:3f:3a:
5c:4e:7a:fb:20:78:58:85:1c:85:be:98:ce:1f:64:
25:83:56:d0:f1:35:2e:83:50:b0:09:0b:c8:06:85:
7b:9f:71:6d:c6:0d:96:87:de:f5:9c:ad:31:e6:1e:
9e:fb:b7:dc:2f:7b:77:93:41:2a:b1:97:87:34:34:
e0:c6:b8:5d:5e:88:7e:ac:34:69:cc:8a:60:95:7f:
39:85:c2:02:1e:9a:f3:5a:86:75:59:37:ae:ff:9e:
d3:4f:14:68:d2:30:fc:84:12:24:f7:b8:97:0a:45:
62:e3:c3:b5:6c:52:08:7a:2b:9b:f6:d7:f3:d3:ab:
4a:a5:99:4c:b7:8d:e1:a2:73:ae:e4:83:fc:81:eb:
2e:12:e2:e7:f4:d5:69:7b:fc:d6:13:9b:8c:05:ea:
02:06:12:0b:58:4f:b6:67:fc:69:ee:f9:ac:d8:d1:
90:64:d1:b0:b8:64:c8:55:c8:d8:f0:75:d9:91:3e:
e6:86:27:f8:b1:8a:c6:e1:2a:9f:43:e4:b3:96:a7:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:39:EE:19:CE:C5:4E:5F:26:F8:01:4A:CA:BC:C9:D9:B1:7E:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69143786C54011EF9E95DF67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.243.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ba:a0:f2:c3:c8:73:ef:35:e5:8e:85:54:59:ec:66:e7:db:
ab:54:8c:9d:85:bc:ad:e8:8a:ea:a9:30:de:68:b8:ab:c0:5b:
b0:1c:ac:21:ac:6d:8e:57:31:00:0e:cb:e3:d0:38:52:6f:ab:
b5:4e:c8:c1:3e:20:d8:09:a6:5e:ac:96:80:1b:f5:83:0d:5f:
fc:31:32:03:e0:b0:78:12:a5:18:73:0b:bb:1c:d9:0c:59:38:
c6:a8:99:bf:55:9f:be:2c:8d:43:43:92:b8:e3:94:cf:19:e1:
84:a7:c7:90:9a:9b:7f:df:6c:ac:95:e9:6c:ff:41:87:76:e9:
fe:85:7f:fc:e8:32:c7:ae:46:88:f8:20:5e:66:79:ce:39:8b:
4d:ba:ca:a4:4d:3d:2f:69:8f:a3:15:b1:45:76:7e:22:1e:d6:
43:0f:43:1d:41:6e:1e:08:77:d7:be:ae:42:14:54:07:6c:92:
60:ea:58:3c:61:83:9a:9e:40:04:d1:af:4d:1e:1e:78:9b:43:
84:e6:a9:e5:2c:de:98:a8:81:b4:e0:8b:2b:ee:68:0c:8f:89:
26:03:85:1c:be:63:05:6e:b3:25:2f:cf:38:66:48:b6:03:65:
74:d6:82:fe:2f:43:46:da:79:e2:26:99:e4:d0:0a:20:70:3d:
e2:a9:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client