Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784A464AC5EB11EFBBC4ADA5762E951A.roa
File: 784A464AC5EB11EFBBC4ADA5762E951A.roa (raw, json)
Hash identifier: uFUZAP31l+p2QitzUXAgmnwJBvrtRA0vvLedIYT27rI=
Subject key identifier: 74:35:EB:92:A6:12:B1:48:6F:2E:42:2D:3F:EE:D5:01:53:F3:86:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784A464AC5EB11EFBBC4ADA5762E951A.roa
Signing time: Sun 29 Dec 2024 13:47:40 +0000
ROA not before: Sun 29 Dec 2024 13:47:36 +0000
ROA not after: Sun 12 Dec 2027 13:47:36 +0000
asID: 17561
IP address blocks: 154.211.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77224 (0x12da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:47:36 2024 GMT
Not After : Dec 12 13:47:36 2027 GMT
Subject: CN=677152fc-d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:56:b0:d5:c5:46:bd:87:e2:6b:06:4c:6e:
24:3e:92:8b:57:ea:ee:63:47:79:7f:5b:ae:c4:d8:
b2:57:66:40:af:2d:15:28:0d:f8:43:a2:fb:c4:e8:
ea:59:ac:24:25:3e:da:18:20:7e:5a:55:ff:97:2c:
8b:88:5e:09:40:48:f3:6e:1a:0d:5c:26:3f:8b:05:
0d:b4:33:b0:3f:fe:ef:f6:24:a3:f7:af:3e:07:f5:
6d:1a:1a:d5:b5:33:13:2f:82:6f:55:84:18:b0:6c:
61:20:0b:b0:55:a1:2b:86:ce:87:c2:ab:e4:21:2c:
31:a3:86:29:78:d1:54:f3:d7:44:5a:5f:c4:21:72:
13:ca:14:4e:75:32:3b:a4:e8:7b:5d:cd:5e:84:84:
02:38:db:04:6d:52:0a:11:53:a0:9e:c8:66:ca:24:
a3:aa:ee:a6:b0:92:90:9b:85:9c:3e:26:bd:78:05:
e9:50:dc:85:3f:f0:fa:c7:c6:94:9d:30:c1:4f:59:
32:a3:ca:4a:c4:51:86:6c:ad:3e:ac:a7:f7:ff:60:
f7:5f:eb:93:c1:ae:94:52:7e:e9:06:4f:ca:f9:8b:
d8:e6:54:d4:c1:30:49:13:a0:4d:72:df:36:fc:0f:
bb:17:a7:4c:3e:42:ac:cc:16:c8:a0:ea:8a:9b:03:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:EB:92:A6:12:B1:48:6F:2E:42:2D:3F:EE:D5:01:53:F3:86:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784A464AC5EB11EFBBC4ADA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a5:ad:12:f1:58:0d:50:e0:7c:65:e4:fd:27:0b:bd:92:5a:
43:f1:30:18:54:66:30:1f:16:37:38:ba:b1:b9:23:f4:bb:16:
71:86:8b:fb:0d:94:5b:2d:a1:cb:f2:53:19:be:c4:04:cb:78:
8e:6f:99:b1:04:03:d0:e1:66:76:b1:27:c3:b7:ac:9e:73:6f:
a7:40:fa:ae:4e:5f:e5:5e:c0:1e:f7:8c:f1:c3:57:ac:6f:ca:
26:17:bc:a3:14:be:3b:30:e8:75:d8:ba:f5:3c:84:1a:da:29:
a8:8c:87:13:05:b0:55:65:e5:36:9f:01:be:1e:38:8a:1a:57:
df:7d:fb:d6:a3:92:2b:32:06:d1:ed:89:01:86:e7:0b:a3:fa:
05:f3:8a:66:fe:99:64:9d:ac:02:ca:24:f6:e2:84:3b:15:f3:
37:79:65:ed:7c:fc:b3:be:ca:00:0d:cd:07:80:46:10:d0:18:
02:76:48:0a:e8:2d:41:24:1c:99:02:5d:d9:5c:38:79:23:22:
c9:36:67:99:ac:a9:eb:a3:d7:4b:8d:23:76:00:37:70:7d:16:
6b:07:85:6d:fa:6d:f5:55:a0:3c:ac:5b:e8:22:21:29:03:fa:
db:cc:d5:35:62:5b:fc:9d:1e:84:dd:5d:5c:0f:fe:a2:d1:34:
1e:f2:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:22 2025 by rpki-client