Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7E0B4AC42511EF9A66716D762E951A.roa
File: 6A7E0B4AC42511EF9A66716D762E951A.roa (raw, json)
Hash identifier: GwI/Jpi2cojjbPTzPwDxm6vqKMtT3G1aXJ7ma9yi86Y=
Subject key identifier: CB:90:D8:55:BB:52:FC:B0:0E:B1:D5:96:BA:15:16:77:D5:49:54:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7E0B4AC42511EF9A66716D762E951A.roa
Signing time: Fri 27 Dec 2024 07:37:25 +0000
ROA not before: Fri 27 Dec 2024 07:37:21 +0000
ROA not after: Sun 12 Dec 2027 07:37:21 +0000
asID: 17561
IP address blocks: 154.202.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76273 (0x129f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:37:21 2024 GMT
Not After : Dec 12 07:37:21 2027 GMT
Subject: CN=676e5935-2080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:fa:8d:fc:f6:b5:9d:16:04:54:b9:db:a3:
9f:8b:c9:5a:8c:bd:ac:86:31:49:74:6a:a7:5d:36:
48:56:76:5d:02:c1:68:76:51:75:22:32:05:72:82:
36:f9:b2:82:f9:e5:4e:94:cb:40:ea:a2:e7:dc:b2:
f8:2a:ee:84:48:23:5c:49:ff:bf:95:ff:c3:e3:9c:
ed:d1:1e:04:c1:36:4b:7d:b0:c7:5e:10:dd:9d:7b:
e4:45:13:11:fb:4a:9c:6c:4c:65:eb:e4:2f:9a:21:
51:ff:57:e0:d4:9a:cd:85:15:3f:8f:6f:1c:b0:13:
07:53:a0:cc:49:49:c1:10:ce:ed:16:12:f6:fd:19:
7d:86:f5:4d:72:e4:0b:df:7b:62:02:ad:9d:38:17:
d4:f9:38:ea:76:00:0f:f9:cc:e7:8a:02:01:f9:ec:
6d:56:13:46:4b:64:26:3e:23:f2:5d:24:6f:30:fd:
1b:b0:fd:72:c1:ef:d6:25:5c:33:42:d7:e0:db:49:
4b:96:80:f3:4b:ce:4f:59:c4:4d:51:d6:b3:2c:1d:
70:11:cb:4b:60:c7:83:4c:c3:2a:cf:8c:3c:ec:71:
56:29:18:b8:6a:f7:0f:9c:a0:be:cf:d0:61:4a:1f:
30:94:32:b8:39:ac:75:c4:de:11:ae:9b:17:db:10:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:D8:55:BB:52:FC:B0:0E:B1:D5:96:BA:15:16:77:D5:49:54:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7E0B4AC42511EF9A66716D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d5:17:bd:28:48:2b:fa:d4:fd:68:1f:f3:5d:43:a5:47:0c:
70:62:71:9b:e8:5c:26:ef:4f:b5:8e:c8:97:fa:f1:3a:f1:ec:
33:82:50:66:83:95:84:6a:6a:00:1b:91:f8:6e:3a:c9:8f:0a:
db:15:5f:27:8d:fa:97:8c:c5:6e:8e:b7:12:35:d3:4b:68:e0:
95:c3:03:f0:eb:fb:7c:73:19:c0:80:60:20:1d:f0:0f:fb:97:
33:ae:9b:b5:16:9d:0c:c9:d2:0f:34:25:52:91:b1:15:91:8d:
81:e7:fc:9c:6a:be:07:a6:0a:a8:98:e1:78:5b:9b:25:6a:90:
c6:a6:22:51:94:f1:70:82:cd:cc:cd:8d:39:61:1a:dc:2d:e5:
83:64:24:89:9a:bd:50:16:92:8a:ff:43:ea:8f:50:ad:45:e3:
12:64:be:84:65:3d:8e:93:77:58:93:7e:8a:cc:64:fc:6e:e1:
80:c2:15:81:f7:4c:91:06:6f:87:0a:8f:2c:c6:16:d0:c6:4d:
90:dc:79:5f:43:70:c1:c8:98:22:56:2b:b7:87:a2:72:e4:51:
70:28:3d:ee:ed:f5:cf:12:19:4c:5d:aa:03:f1:50:19:e1:5e:
4c:b9:89:74:8d:fc:bb:08:18:85:46:ed:15:8e:99:42:48:9b:
59:b4:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:01 2025 by rpki-client