Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BED1A5EC42811EFAAE35E80762E951A.roa
File: 6BED1A5EC42811EFAAE35E80762E951A.roa (raw, json)
Hash identifier: MCKbBz4GfUYy7WTfWxcA2/2omm09mDIGwQaSBVjdNug=
Subject key identifier: A4:29:B0:CB:30:83:B3:83:C2:49:7B:E4:F8:40:B1:F2:9C:93:C0:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BED1A5EC42811EFAAE35E80762E951A.roa
Signing time: Fri 27 Dec 2024 07:58:56 +0000
ROA not before: Fri 27 Dec 2024 07:58:52 +0000
ROA not after: Sun 12 Dec 2027 07:58:52 +0000
asID: 17561
IP address blocks: 154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76283 (0x129fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:58:52 2024 GMT
Not After : Dec 12 07:58:52 2027 GMT
Subject: CN=676e5e40-fdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:50:c1:c2:10:99:91:09:b8:23:e7:80:e2:
c3:c0:eb:0d:3b:f4:7b:7a:66:db:be:68:5a:0a:e8:
66:14:e7:e3:1b:76:38:bb:7d:58:8d:10:f5:4c:ac:
67:99:1f:51:34:14:c5:98:44:41:b5:b9:5e:c0:5f:
86:ef:a4:10:50:cb:77:28:76:59:96:b3:56:be:a3:
b0:05:91:b6:c1:1f:4b:c1:8b:5d:06:0c:aa:49:49:
9c:3f:93:d5:65:98:dd:98:52:07:f8:7e:90:19:13:
7e:01:4c:bf:18:d2:b7:7c:df:98:ef:a2:7b:c1:f6:
b7:39:4c:a8:c2:99:fe:a9:a5:63:09:7f:e7:87:cd:
95:7d:01:47:c4:0e:07:3b:5f:f9:f7:8f:b4:b6:9f:
d3:db:3f:d4:f9:f7:86:0e:85:ad:28:e6:9f:1f:22:
48:aa:a3:07:d1:24:b9:d2:23:c9:6a:c9:1c:2d:04:
a2:dd:26:b1:66:64:16:2e:d0:2c:b5:a1:a4:2b:84:
81:a4:77:62:6b:6c:e6:c9:58:a1:36:7e:e4:fb:9a:
3e:68:50:0e:4e:7a:87:b3:4e:62:c6:c8:76:2c:5e:
2d:1a:68:69:35:c5:61:8c:80:37:1a:9f:82:65:ce:
c9:2b:73:d7:c0:18:74:a1:d6:0d:81:c0:d7:55:65:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:B0:CB:30:83:B3:83:C2:49:7B:E4:F8:40:B1:F2:9C:93:C0:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BED1A5EC42811EFAAE35E80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e7:94:9a:f1:03:22:ae:b6:67:24:e8:52:9a:2e:77:9d:43:
09:25:6d:b1:c7:93:d0:ee:5e:92:43:b5:9d:51:af:cf:b9:ab:
2c:d0:3c:4f:9f:a7:16:88:d0:46:d3:ab:de:fb:7e:2c:5b:ba:
ef:3d:e0:85:77:6d:8c:a6:e0:13:ee:e0:68:95:db:2d:c2:59:
c6:9d:4d:bd:88:ff:24:e5:2b:70:88:65:11:57:19:33:bb:16:
6d:b4:53:bd:15:d5:a8:82:9c:c9:98:e2:75:00:fe:8d:b6:ec:
33:b5:4c:3f:e9:b3:0b:fe:d8:5f:87:23:53:46:41:38:d4:a6:
dd:22:d2:83:37:09:57:08:49:2b:1a:27:56:53:d2:e9:b2:ea:
76:7e:55:3e:1c:2c:01:77:27:8d:67:d1:11:f7:ba:b4:1c:ac:
5e:93:0f:73:4e:94:68:f1:d0:16:4e:0e:02:09:d2:c5:d8:82:
a7:d1:fe:2b:5d:28:0a:57:aa:f1:3c:86:d1:6d:73:30:36:03:
74:ed:0d:55:4f:d7:cb:ed:e7:4f:78:68:0c:45:5e:f8:dd:b1:
bb:5e:e4:1d:5f:a6:22:de:dd:54:8a:b1:e4:8e:07:57:e3:27:
54:cc:3b:2b:ab:9b:4c:0a:46:6f:c0:70:87:a2:d3:1a:01:ae:
69:14:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:38 2025 by rpki-client