Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE0011CC5FD11EFA408A694762E951A.roa
File: 7AE0011CC5FD11EFA408A694762E951A.roa (raw, json)
Hash identifier: vqmzua2KGx5Zo8iaDuTpD5Hu17lFRECYs3kub6UZamg=
Subject key identifier: 9F:14:58:05:63:1B:D1:A0:D3:2D:71:FF:30:A7:E4:9E:49:0B:25:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE0011CC5FD11EFA408A694762E951A.roa
Signing time: Sun 29 Dec 2024 15:56:35 +0000
ROA not before: Sun 29 Dec 2024 15:56:31 +0000
ROA not after: Sun 12 Dec 2027 15:56:31 +0000
asID: 17561
IP address blocks: 154.217.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77376 (0x12e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:56:31 2024 GMT
Not After : Dec 12 15:56:31 2027 GMT
Subject: CN=67717133-3af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:c0:78:92:4e:ce:66:a0:a8:22:46:52:7a:
e3:af:ae:07:8d:3a:e9:9e:d0:ce:24:ce:d9:ee:bf:
0f:ac:1a:5d:a5:f0:5c:cd:e7:71:55:fb:6f:2f:d6:
c6:75:35:00:6f:24:9c:25:17:a8:07:eb:60:47:21:
ec:42:9f:55:92:29:48:a5:ff:91:a8:e0:5b:fc:19:
49:c1:52:60:da:c2:6a:80:6e:d9:55:83:b7:31:6d:
d1:ca:d8:bc:7b:26:99:de:2f:13:9c:5e:d3:5c:a1:
ac:2c:e0:05:42:08:b1:fe:31:c6:c5:3f:5e:62:c9:
77:22:06:f0:5b:05:b1:1f:dd:23:64:bc:72:ec:da:
cc:53:5b:62:ff:e8:f5:50:08:b1:e9:57:ca:8c:55:
b1:42:9a:04:c1:9f:5e:03:78:70:bd:0f:3f:cb:6b:
47:08:28:11:cd:0a:83:70:46:cb:f6:6d:9f:87:99:
08:46:38:35:ca:19:de:2d:24:69:68:19:f5:31:43:
07:d3:23:12:7e:ad:ba:50:5b:b5:f2:ea:e9:ab:38:
5f:24:86:5d:22:77:f2:f5:d4:3c:ec:c6:88:30:20:
0d:ae:ed:c0:a4:ce:c6:79:96:b7:02:57:f9:f7:fe:
db:da:b6:2f:75:37:be:ba:1e:0b:16:f3:95:86:dd:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:58:05:63:1B:D1:A0:D3:2D:71:FF:30:A7:E4:9E:49:0B:25:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE0011CC5FD11EFA408A694762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.3.0/24
Signature Algorithm: sha256WithRSAEncryption
08:36:9b:ec:f7:d9:9d:c3:cf:2d:aa:8a:dd:9a:5e:99:92:77:
d7:dd:e6:68:85:60:3e:d3:42:c3:c7:96:7d:ca:2d:85:a0:a6:
5b:f3:53:c1:db:fe:65:91:85:c2:65:4f:a2:be:ad:32:d7:69:
f4:90:07:02:df:a1:fd:f1:57:40:4b:b8:3f:c8:7b:39:41:56:
91:62:d9:6b:0f:aa:5e:b5:f2:63:31:0e:e5:23:4a:1a:6c:bc:
0a:a2:7f:d1:d3:2e:02:ba:99:f0:7e:f1:b5:ea:6e:62:16:56:
61:3b:d4:6b:89:24:97:90:19:61:6c:0d:f3:ab:9b:7e:bd:83:
4f:44:9e:19:a6:87:9e:3c:85:27:16:64:17:1b:30:b5:29:f2:
ac:a2:2c:6e:71:5d:c8:d6:4c:4f:6e:fd:59:1f:5f:e1:1f:89:
9b:6a:94:53:48:35:cb:55:72:a0:5a:5d:4a:e8:bf:29:4d:3e:
b2:0b:38:5e:0b:50:96:9a:a5:16:72:70:14:3a:30:54:c8:50:
c4:6f:60:ad:09:51:8d:ae:ec:0a:e0:bd:2b:ba:56:1b:d7:48:
9c:5f:2d:17:6a:41:e9:a4:c4:fe:d9:e6:6e:bf:0b:7f:de:09:
30:e7:c3:70:c4:c3:ab:43:0c:1e:55:10:a6:fd:ab:31:a6:3c:
a0:47:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:51 2025 by rpki-client