Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D725604C53211EF8F801F8F762E951A.roa
File: 6D725604C53211EF8F801F8F762E951A.roa (raw, json)
Hash identifier: DfCBTEnhMT35X0L8kxtxlgCBh/cR9giDqmVRPbUfptY=
Subject key identifier: 7B:C9:86:13:98:0B:A0:1E:95:62:F9:0E:AC:45:0C:EB:4E:DE:C6:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D725604C53211EF8F801F8F762E951A.roa
Signing time: Sat 28 Dec 2024 15:43:05 +0000
ROA not before: Sat 28 Dec 2024 15:43:01 +0000
ROA not after: Sun 12 Dec 2027 15:43:01 +0000
asID: 17561
IP address blocks: 154.204.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76789 (0x12bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:43:01 2024 GMT
Not After : Dec 12 15:43:01 2027 GMT
Subject: CN=67701c89-e140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:10:8e:98:e8:b2:cf:18:b1:ce:19:9a:31:
a0:1e:d5:13:58:96:c0:e8:80:95:82:f3:44:31:f1:
e3:26:d0:43:d0:0d:0e:31:c2:a8:e6:7a:8d:be:80:
86:fd:06:94:09:b0:ea:fc:c5:e6:08:2a:6e:04:e1:
32:9b:59:7f:59:78:24:64:1a:e5:19:04:f6:37:5d:
8b:89:e0:18:d0:36:0f:90:1a:3b:c8:90:58:93:6f:
8a:46:e9:29:a4:f8:75:c9:6d:42:5e:b8:27:75:d5:
a8:e6:c1:f9:ce:9a:9a:df:0e:c7:01:ce:e5:c2:0f:
58:2a:45:00:1f:e0:bd:b6:8d:10:17:04:eb:02:1c:
84:57:0b:e8:d2:a9:a8:45:5f:99:89:b0:e9:2f:31:
65:74:47:4e:fe:4e:13:80:07:97:73:7a:da:72:62:
fa:dc:9b:3e:66:00:f7:14:ca:d3:03:57:25:ce:51:
74:b2:1d:a0:80:81:29:f1:77:d6:fe:0f:68:a3:5e:
82:4a:67:e4:a7:55:d3:c1:a9:33:17:47:4e:6c:43:
a0:8b:30:c9:15:d1:1c:94:af:fe:38:ad:18:2d:33:
75:f6:75:51:c1:c8:8d:ac:52:d9:f5:7a:4a:e3:11:
a3:85:b1:08:10:e1:22:fd:2b:e5:db:7f:8f:62:b2:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:86:13:98:0B:A0:1E:95:62:F9:0E:AC:45:0C:EB:4E:DE:C6:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D725604C53211EF8F801F8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.99.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:5b:d3:a4:ad:1b:e6:5f:e2:5c:23:ab:cd:5c:f2:e5:61:e9:
cc:a0:0e:68:af:b2:33:61:b4:9a:1d:6c:25:5d:7b:1d:f4:31:
e0:a7:6f:58:cd:6a:d4:1b:36:6b:e8:ec:88:25:20:29:98:4b:
8b:a1:a0:71:6b:ef:00:8d:36:70:9e:3f:7b:d4:c4:45:1d:c3:
fc:1c:95:a8:cc:cf:81:70:8b:40:e8:3a:df:ad:c0:60:22:eb:
ef:50:b5:43:13:9b:0b:ee:fd:f2:e8:33:48:e1:d4:c5:0e:09:
4a:a1:01:e3:5a:6b:34:f0:89:e7:06:6b:b1:58:9e:3a:0c:d1:
5f:7b:e2:ef:b2:46:36:f2:b0:ad:f0:81:53:e7:6f:5b:97:bf:
0c:c3:64:0a:a7:7c:ec:3c:23:ed:e9:e2:73:24:51:24:2c:8e:
0a:49:96:a7:58:d3:87:c2:50:9d:f8:30:a7:e5:88:7b:85:8a:
14:25:42:ef:6c:4f:a4:d2:63:dc:34:e3:00:df:19:b7:c2:6d:
03:dd:12:a3:4a:e7:09:ad:d0:78:69:4d:98:8e:46:7a:60:47:
5d:57:3a:d1:22:56:17:10:09:98:77:30:22:50:47:e4:ed:db:
ce:45:01:b7:92:b2:8e:30:dc:00:84:82:33:7c:2f:a7:1b:04:
77:bf:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:24 2025 by rpki-client