Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A42E24C5FF11EF9D5355A2762E951A.roa
File: 70A42E24C5FF11EF9D5355A2762E951A.roa (raw, json)
Hash identifier: LSQq15pnZydUMHgBZnirIeDwrMHyA/RKlvh7akvKooA=
Subject key identifier: C4:EF:4E:00:7F:38:C7:11:A6:8D:47:A5:35:2C:A2:8A:07:48:AC:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A42E24C5FF11EF9D5355A2762E951A.roa
Signing time: Sun 29 Dec 2024 16:10:37 +0000
ROA not before: Sun 29 Dec 2024 16:10:33 +0000
ROA not after: Sun 12 Dec 2027 16:10:33 +0000
asID: 17561
IP address blocks: 154.217.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77392 (0x12e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:10:33 2024 GMT
Not After : Dec 12 16:10:33 2027 GMT
Subject: CN=6771747d-6b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:3e:fd:83:c0:a2:5d:16:af:f4:7b:99:76:
ad:5d:b5:88:f6:d2:d0:1a:4c:fa:d0:26:36:f1:cd:
c6:1e:37:59:c5:7b:e0:94:84:73:32:cd:e3:20:d4:
1a:9e:e3:ac:a3:af:47:76:2c:2d:45:c4:ed:98:48:
f1:d1:71:71:a1:97:db:42:57:c3:3f:d8:bd:f4:e8:
d3:e8:3d:c0:be:94:ed:0c:22:ad:37:8f:70:6a:9f:
b3:79:9d:05:dd:e4:dc:5a:a5:33:74:e8:df:51:54:
ac:11:73:62:7f:6d:fe:c2:8b:76:3b:c9:ca:13:b3:
a2:6b:c8:a2:56:3a:ab:6b:fc:63:04:1d:a6:b6:2e:
23:91:d2:b5:6f:d0:2c:17:8d:b8:f6:0a:0e:36:af:
7f:fc:3f:c2:1c:58:05:7a:29:ec:6c:66:c0:07:96:
60:58:83:c0:d6:19:36:74:47:87:64:ed:91:b2:e7:
a9:2a:13:65:48:a2:e2:41:94:e6:8e:7e:de:85:e7:
6a:23:4f:2d:95:0e:de:54:df:64:03:20:cd:ed:8f:
c1:40:9a:c1:6b:6c:d6:0d:00:c4:66:d2:ce:4e:bc:
54:45:e9:9f:c6:8a:49:db:b4:20:89:da:15:82:ed:
02:5a:fd:14:eb:f7:eb:30:25:e3:92:db:63:6b:df:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EF:4E:00:7F:38:C7:11:A6:8D:47:A5:35:2C:A2:8A:07:48:AC:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A42E24C5FF11EF9D5355A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4b:82:f3:bc:74:d9:a4:5d:2c:8a:66:8b:e7:da:66:45:d5:
42:61:7e:a6:c0:7a:ec:c2:f7:27:3d:d5:e8:9a:2b:db:f3:ca:
fb:ee:e2:62:ee:bb:9c:7c:ab:db:e2:36:2d:0a:11:62:16:e6:
ca:c0:92:26:f6:f5:03:d0:58:8b:52:45:4b:e0:5c:98:26:df:
36:d7:02:d4:3a:1b:cf:31:47:0e:69:5e:35:98:93:5b:2d:5c:
1f:85:f6:72:42:f2:d0:36:0f:ed:2d:49:55:70:bc:a5:f5:4a:
88:48:e0:51:ac:5e:c3:43:41:32:93:d3:1a:7f:d3:42:e8:7a:
dc:f6:b7:dc:79:c4:35:ec:b4:c4:b0:e8:a7:94:0b:71:0d:24:
9f:d9:53:06:ed:e6:b0:43:f0:94:a3:f1:e7:7b:fd:b1:cb:7a:
e0:0c:d0:0e:fd:f2:68:8d:2b:a8:83:c5:fc:43:39:7d:b0:48:
9b:ce:8c:e7:1f:45:b9:11:45:ae:05:50:3a:4a:c9:17:b0:19:
53:52:64:58:b1:e1:38:02:4f:68:34:de:f3:c9:3f:1c:30:7f:
f3:35:09:d5:69:1f:6c:31:02:d6:8f:76:bb:a7:f4:93:7d:09:
65:b4:5f:98:e3:0f:22:9f:0b:c7:e9:0a:22:47:89:9c:d5:3e:
93:06:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client