Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420AD20C60911EF918A5B60762E951A.roa
File: 7420AD20C60911EF918A5B60762E951A.roa (raw, json)
Hash identifier: 3cShWxz131omkehDuoLoAnAAlSSYO+KrcNyDZjSBUF4=
Subject key identifier: B2:03:73:05:51:A8:34:F1:8A:4C:A3:84:CE:2A:F5:00:7B:B0:2A:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420AD20C60911EF918A5B60762E951A.roa
Signing time: Sun 29 Dec 2024 17:22:18 +0000
ROA not before: Sun 29 Dec 2024 17:22:14 +0000
ROA not after: Sun 12 Dec 2027 17:22:14 +0000
asID: 17561
IP address blocks: 154.217.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77478 (0x12ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:22:14 2024 GMT
Not After : Dec 12 17:22:14 2027 GMT
Subject: CN=6771854a-39aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:61:b3:38:11:8f:ab:ad:a2:c4:3e:fb:65:
15:3f:dc:23:4e:cb:e6:0e:17:d7:7c:d2:aa:43:9c:
c0:5b:ae:80:8f:1a:cc:95:a0:aa:42:20:2a:30:8b:
6d:55:73:f9:ed:f2:28:14:a9:60:ea:c4:12:ff:1c:
0a:27:e0:ad:c2:1a:fb:05:96:f4:a5:39:32:63:54:
6d:c6:2b:5b:0e:b1:59:b2:7e:2d:b6:68:b3:c2:49:
5c:2a:d2:9c:36:32:21:f4:6e:30:2d:b3:da:d6:e3:
fa:07:17:63:0a:82:2e:de:74:ab:e2:03:59:0e:8f:
3b:57:d1:17:bc:a7:e1:da:1b:25:86:9d:fa:0a:cf:
a8:4f:c5:d0:cb:71:b3:e3:ed:0a:1c:88:7b:bd:24:
2d:06:61:4d:fb:a6:f7:f2:1c:46:2e:94:25:c3:25:
6e:ff:96:32:a2:7c:48:c9:9d:5a:5e:0c:fe:0f:e6:
c3:b1:ea:d0:b3:be:66:aa:a6:a6:17:f4:1a:87:de:
c4:80:63:cb:dc:b9:54:13:08:d8:c6:d8:43:50:31:
c1:86:86:8d:f5:1c:ee:00:e8:6c:47:c3:68:cb:55:
86:86:12:e2:52:a8:c2:cf:f8:11:47:89:57:13:34:
58:24:f4:c8:3c:ae:30:57:fd:a9:6e:30:43:ff:79:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:73:05:51:A8:34:F1:8A:4C:A3:84:CE:2A:F5:00:7B:B0:2A:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7420AD20C60911EF918A5B60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.54.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8c:11:27:03:9a:c8:fe:92:43:48:ae:2c:c8:98:f9:3c:d9:
6f:8f:a5:44:17:7b:30:f4:03:7e:7c:a4:74:ba:e4:3d:cd:9d:
4c:20:00:24:f7:d8:b6:13:16:f8:a1:1a:c3:39:a3:fb:ac:28:
ed:5b:67:c8:88:9d:16:23:55:4a:e9:fd:53:d7:db:39:ae:ec:
3e:0a:e7:13:a9:0d:b0:93:7c:f8:00:a6:3e:ed:7c:9d:c9:7a:
ba:ac:1a:94:a6:fc:52:df:cd:89:0f:9e:91:35:af:37:31:ea:
c5:18:c9:68:f2:83:ad:31:5c:10:9d:9a:3a:21:38:f2:9a:8d:
bb:81:0e:51:f5:c5:d3:26:8f:da:8c:2f:70:f9:f1:d2:93:3b:
45:d3:14:12:f0:07:37:5c:c9:f4:e0:e8:c3:58:14:ed:65:2a:
65:c9:98:79:32:d1:f9:8d:31:f2:9a:25:fd:15:f5:cf:5d:f7:
1d:3a:f8:db:04:5f:2d:e3:77:8e:f5:9b:ae:c3:59:ae:d9:df:
a3:c8:b6:e8:40:92:8d:23:b0:1a:0a:d5:68:6c:64:41:70:c3:
30:ce:29:5f:1d:d0:ab:a6:30:8f:75:34:e3:c6:b4:ec:5c:a2:
42:50:91:9a:b6:70:2f:f5:c2:53:10:1e:1b:34:cb:b7:fc:66:
c8:7e:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:05 2025 by rpki-client