Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75646738C61011EF9ED6208B762E951A.roa
File: 75646738C61011EF9ED6208B762E951A.roa (raw, json)
Hash identifier: 2pl46wVIGEfYIrRDrXQKO0F3RVrXvgIJ3b37xJvcPao=
Subject key identifier: A7:8A:20:77:EB:22:EA:13:4C:59:F2:10:D4:9F:0E:F7:DD:5A:41:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75646738C61011EF9ED6208B762E951A.roa
Signing time: Sun 29 Dec 2024 18:12:26 +0000
ROA not before: Sun 29 Dec 2024 18:12:23 +0000
ROA not after: Sun 12 Dec 2027 18:12:23 +0000
asID: 17561
IP address blocks: 154.217.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77538 (0x12ee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:12:23 2024 GMT
Not After : Dec 12 18:12:23 2027 GMT
Subject: CN=6771910a-e9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:45:2d:58:3a:2f:8d:b9:6a:06:5c:6b:a5:
c4:03:b5:a4:5c:a3:a0:bf:7a:03:9d:8f:47:c3:21:
b6:b2:67:29:34:02:b4:64:a1:f0:5e:5a:56:13:e2:
47:9a:08:a1:15:55:20:da:09:69:59:ba:21:43:59:
b5:b2:94:b7:48:68:c8:55:d6:e8:8b:b2:1a:20:9b:
05:a4:08:cc:5a:98:ff:1a:9c:15:2e:97:fc:86:76:
30:10:05:4a:65:ca:59:d3:ec:0b:5c:ea:b3:6a:e2:
84:1f:72:da:46:e7:3c:4c:07:bd:ca:22:16:94:1c:
04:87:f0:c3:a2:56:a5:2a:56:32:f9:82:cb:b4:88:
66:23:af:4c:30:bf:06:a8:76:34:62:e8:50:8f:51:
8e:19:bf:69:ba:3a:7e:ee:36:0f:95:9b:b7:d1:65:
15:7f:5a:18:35:a7:a6:d7:73:7b:37:22:04:5b:0b:
7a:99:28:02:1e:6e:42:0d:8d:d4:ef:76:49:10:c0:
fd:43:c5:b7:9a:bf:e1:16:2c:3f:54:1c:34:fa:c8:
79:e1:b0:b3:bd:b3:97:30:88:5a:3b:05:55:64:32:
93:b7:da:93:55:92:c8:ce:77:a7:85:05:ff:e4:8b:
36:63:50:6c:4c:db:36:3c:d6:4f:ba:fd:0a:7e:3a:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8A:20:77:EB:22:EA:13:4C:59:F2:10:D4:9F:0E:F7:DD:5A:41:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75646738C61011EF9ED6208B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:51:1e:df:5c:9f:40:46:08:84:74:fa:59:23:e1:6a:74:28:
fe:87:bd:54:6a:ab:ce:ce:db:3b:4e:a5:9d:67:e6:12:3d:60:
30:0c:75:82:2e:e9:f0:84:60:4a:00:64:05:18:03:96:7e:a4:
62:f3:8b:4d:84:db:95:42:d0:33:eb:6d:ba:f1:1b:79:6c:14:
14:a4:88:aa:73:9e:e4:71:5e:f6:d0:0a:69:4d:a8:0f:b7:4c:
54:36:84:7a:16:03:a2:ad:58:35:dd:b1:6c:a0:8a:b8:f6:20:
44:8d:09:af:b1:c5:c3:ff:26:f0:05:b1:04:24:9f:98:17:b1:
73:44:80:1a:32:06:06:20:ae:95:cb:3e:1b:92:57:20:a9:02:
6d:fd:4c:e2:3e:41:5c:0b:dd:c3:48:d7:55:9d:fc:99:57:89:
05:42:36:94:e6:be:0e:39:61:62:02:d9:98:a0:30:cc:9a:0b:
e0:8a:a7:31:37:d7:89:b3:37:88:eb:fc:2f:0d:2a:78:00:cc:
95:35:9f:c7:d1:ed:71:1a:43:49:ed:73:d5:00:6e:41:c8:68:
d2:b0:2d:98:0d:04:a1:cb:14:2b:88:c0:fc:00:f1:fa:59:80:
93:c7:e5:9b:e8:2e:00:0e:0d:3f:14:4d:b5:58:8c:95:a0:63:
31:8e:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:48:11 2025 by rpki-client