Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78433A28C52B11EF802D4D64762E951A.roa
File: 78433A28C52B11EF802D4D64762E951A.roa (raw, json)
Hash identifier: NW7vwoQwh+p7emGeACREiwMnFYeNu59EtnHJ4Z9N5p8=
Subject key identifier: 21:CD:43:0A:D6:66:BD:65:6F:B0:8B:0A:00:4C:28:09:17:5A:E4:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78433A28C52B11EF802D4D64762E951A.roa
Signing time: Sat 28 Dec 2024 14:53:16 +0000
ROA not before: Sat 28 Dec 2024 14:53:13 +0000
ROA not after: Sun 12 Dec 2027 14:53:13 +0000
asID: 17561
IP address blocks: 154.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76729 (0x12bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:53:13 2024 GMT
Not After : Dec 12 14:53:13 2027 GMT
Subject: CN=677010dc-802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:cd:8c:e3:86:fc:41:d9:c4:09:3b:ee:da:
2e:17:b8:20:bc:20:f5:bb:97:29:ce:61:4a:5c:c2:
b3:d0:14:5c:75:30:23:b8:e5:5f:63:fd:82:e5:d4:
31:6c:9d:f4:92:b7:f2:73:f4:0e:c6:cd:96:60:8a:
10:52:d9:6b:3a:00:2a:bd:48:5b:bf:87:cf:e2:bd:
3a:6a:a3:85:42:6e:e9:3f:5d:32:e9:28:5b:df:2d:
bc:d2:20:ae:c6:9d:5e:8c:be:92:78:22:87:be:34:
b5:af:95:02:b2:2e:8f:df:21:0d:9d:7a:53:3e:cd:
3d:68:53:20:5e:14:66:50:f5:84:42:6e:98:b0:fe:
e7:bd:c6:12:82:c9:42:b4:b1:7a:ba:11:45:da:50:
1a:00:b4:b3:89:d8:d0:93:db:b0:2b:1e:38:81:4e:
3f:8a:eb:20:56:13:83:6e:b4:57:e8:25:ac:fd:55:
de:00:76:d2:4e:d7:6c:77:7c:72:7e:de:36:aa:e4:
00:eb:0a:5f:d8:9b:e2:41:08:2f:a7:81:ad:da:9b:
ea:62:6d:59:5c:b3:53:99:2b:c1:e9:ab:17:70:34:
4b:6f:c7:c2:ca:b2:31:fc:2c:83:5d:b8:a2:97:b2:
e8:e4:df:5b:f0:4f:b7:bc:2c:13:8d:06:1b:f9:12:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:43:0A:D6:66:BD:65:6F:B0:8B:0A:00:4C:28:09:17:5A:E4:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78433A28C52B11EF802D4D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bb:2b:75:3c:52:0e:31:5b:db:6f:da:df:28:ab:07:f4:ce:
4e:38:47:cc:1e:8c:dc:3a:ff:28:b2:4e:8c:af:e9:d4:4b:b3:
3d:4a:48:02:19:1a:6b:81:1b:cb:97:80:90:1e:99:f2:7e:4d:
ad:ad:69:50:c4:20:eb:de:a3:8f:30:0d:77:da:0d:ca:49:cb:
1c:b9:47:c9:bc:8f:d7:c2:2e:91:cb:26:98:0d:9f:f3:f6:df:
cd:26:9d:e1:5f:37:2c:35:66:f4:64:85:3d:ce:25:41:a1:20:
81:24:0d:d2:1b:c9:9e:1f:99:61:25:e8:86:7f:61:8e:61:ce:
6e:78:82:e5:f2:60:85:54:d5:ed:0e:a7:74:17:08:cf:8f:de:
a3:a5:cd:64:83:7f:dc:b1:88:58:af:21:0d:97:3d:f1:49:62:
7e:50:09:12:28:63:2c:a2:5a:9a:b5:e7:91:cc:ef:fe:7c:91:
d2:50:85:eb:ad:73:50:8e:1f:23:6b:87:1b:91:67:44:e4:ee:
e6:21:fe:5f:ef:93:14:bd:b3:37:61:45:a8:82:1a:91:cf:b0:
ee:b8:06:e7:b0:9f:5b:e8:d6:b4:63:84:4f:ad:c3:18:c4:9e:
ff:4b:33:ae:41:f5:42:32:58:fc:e0:fa:c7:11:12:2b:fc:5e:
2f:a6:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:32 2025 by rpki-client