Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78497C14C5DD11EFADA5694D762E951A.roa
File: 78497C14C5DD11EFADA5694D762E951A.roa (raw, json)
Hash identifier: 7j+xJ3zwUGg16q2AHS0WVO1+lkLhUvK+iqD210XsSpE=
Subject key identifier: 38:7E:90:5D:53:E4:CF:7C:52:8C:1F:47:53:79:64:26:83:C1:74:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78497C14C5DD11EFADA5694D762E951A.roa
Signing time: Sun 29 Dec 2024 12:07:27 +0000
ROA not before: Sun 29 Dec 2024 12:07:23 +0000
ROA not after: Sun 12 Dec 2027 12:07:23 +0000
asID: 17561
IP address blocks: 154.210.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77102 (0x12d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:07:23 2024 GMT
Not After : Dec 12 12:07:23 2027 GMT
Subject: CN=67713b7f-94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:96:ec:0f:68:1a:0f:f6:60:b9:d2:fe:a8:
3a:19:8b:a3:c1:aa:ba:ad:41:7b:33:8b:c2:7a:c2:
a9:4b:36:6a:17:ca:c5:0a:fd:a6:10:b9:57:2d:4c:
de:92:fe:a2:83:9e:fc:58:ed:f8:40:12:23:08:54:
97:50:5b:77:39:08:5f:26:0a:24:fc:19:94:f3:29:
62:f8:be:00:5c:3d:02:a2:11:00:e1:2d:70:71:3f:
fa:80:f3:92:e4:b9:b1:4c:5c:0f:03:77:0d:6d:74:
ed:31:20:47:50:3d:4b:54:a7:f4:3c:07:21:c0:3c:
a5:66:58:90:fe:b0:53:55:91:e6:35:6f:3b:59:a5:
13:99:2b:7c:ac:4c:36:e8:be:eb:67:91:42:39:eb:
e9:34:81:c4:23:98:f0:15:05:3c:87:4f:0d:5b:f5:
d6:5e:db:4b:61:56:db:7f:fb:5b:3e:8a:c7:a3:18:
5c:79:7a:d2:fc:28:f7:80:f3:83:2b:88:f1:1f:ba:
c9:fd:a2:73:19:4f:9b:8e:41:de:c1:f3:75:9f:30:
28:b5:7f:39:cb:92:70:33:31:74:eb:f9:cc:d1:57:
b2:92:a1:31:df:25:90:ad:f7:64:0b:dd:8f:44:79:
82:09:d8:43:3b:04:dd:e4:fb:7d:25:f9:9e:84:ce:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:90:5D:53:E4:CF:7C:52:8C:1F:47:53:79:64:26:83:C1:74:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78497C14C5DD11EFADA5694D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:0f:c6:e6:60:8c:41:01:ac:6a:1a:80:be:4a:d3:69:b0:a7:
0e:10:40:35:6f:d4:f8:ba:71:fc:92:20:26:75:06:e1:c4:fc:
db:b2:04:ad:81:a7:7f:4d:4f:60:aa:85:00:9c:ce:b7:73:34:
1c:ce:9c:9f:f3:12:57:b6:c1:a0:7f:0e:d1:53:93:b2:e1:8e:
54:88:cd:89:29:67:b2:92:d9:7d:06:63:99:a3:99:25:d4:55:
8d:88:b3:ab:76:0d:86:9c:1b:1e:ef:1a:a4:65:43:3a:47:a2:
34:32:10:84:de:21:4c:5d:c4:19:85:bb:37:66:4e:c1:75:cc:
14:89:43:20:9a:c5:4a:ef:8c:f5:c1:67:ad:5f:99:00:41:8d:
48:17:38:85:7f:27:01:55:67:9c:2b:87:70:f2:ad:46:82:d2:
4c:c1:7c:c6:72:f6:5b:cb:bc:a7:0c:83:f5:4b:d3:30:50:90:
56:05:d2:38:09:ab:ff:e4:0c:b6:a5:ef:50:a2:49:b8:48:33:
40:16:6a:eb:96:d4:bb:6c:45:38:69:a7:f3:21:87:02:92:9a:
ac:aa:8b:b3:16:85:54:70:54:20:fd:80:a9:74:b1:c0:46:c9:
d8:6f:25:db:d0:5d:7e:05:ee:79:a9:fe:88:93:9b:5d:07:0a:
3c:b9:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:46 2025 by rpki-client