Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9FBF52C61911EF9A8E8945762E951A.roa
File: 7D9FBF52C61911EF9A8E8945762E951A.roa (raw, json)
Hash identifier: UpjxNgssA89F8HnypbEoOZ1a/BoPLsNdzvtMyJcCvks=
Subject key identifier: A9:3B:F1:4A:99:F4:56:47:A9:03:9B:88:D6:00:CB:DA:73:8B:6E:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9FBF52C61911EF9A8E8945762E951A.roa
Signing time: Sun 29 Dec 2024 19:17:06 +0000
ROA not before: Sun 29 Dec 2024 19:17:01 +0000
ROA not after: Sun 12 Dec 2027 19:17:01 +0000
asID: 17561
IP address blocks: 154.217.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77614 (0x12f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:17:01 2024 GMT
Not After : Dec 12 19:17:01 2027 GMT
Subject: CN=6771a031-3c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:62:60:19:15:b8:04:cd:90:38:4f:82:f1:
e9:20:d3:06:5c:fd:5b:c5:37:79:13:4b:21:a5:ec:
58:5a:69:54:60:3e:87:54:ba:f8:29:9b:8f:74:ca:
87:72:21:a3:3f:30:f1:23:2a:68:1e:6c:67:a4:b8:
ea:6f:df:7c:61:f5:8d:04:56:74:7c:8b:3a:09:03:
4e:11:2e:10:a1:e0:00:6b:90:ef:9d:f2:5c:24:48:
5e:ca:31:31:5b:04:4b:cb:44:af:f7:0c:2f:12:d1:
94:a5:8e:43:9f:f2:61:f9:ad:38:c0:77:65:2e:9a:
96:ce:a2:c3:ef:38:85:a8:df:02:3d:ff:ae:55:27:
49:a2:52:e4:b5:60:5c:6f:fa:fa:41:98:0c:12:fe:
b0:2a:45:68:6c:40:2b:7a:f6:4e:59:28:d4:74:6a:
04:3b:bd:01:21:21:ba:16:a7:b2:3c:50:46:37:ad:
fd:8d:e4:dc:4f:96:c8:43:17:8b:f4:b1:fa:b5:14:
dd:f8:5f:cb:cd:98:b7:2e:1f:90:2d:19:a6:21:a9:
d4:48:ca:6b:6d:89:d1:e1:23:fd:ae:70:23:72:4d:
17:cb:d4:50:45:39:e9:fd:6f:38:b5:b7:c1:92:e6:
8d:6e:fb:d7:6d:68:29:5f:18:7e:30:05:e0:7a:f9:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3B:F1:4A:99:F4:56:47:A9:03:9B:88:D6:00:CB:DA:73:8B:6E:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9FBF52C61911EF9A8E8945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bd:24:57:bd:78:0b:02:8a:33:dd:9c:8f:06:23:52:02:e7:
c1:17:82:bf:b5:5a:cf:d7:b6:36:82:7f:52:c6:9a:c8:fa:9c:
01:6f:28:72:21:b1:ff:7b:39:66:9e:db:4a:af:77:95:8d:59:
fe:26:03:79:e3:c3:7a:12:b9:65:72:fe:14:64:23:94:fb:5b:
08:49:61:ed:92:b9:e4:f9:67:8a:e6:b2:d6:b7:93:4b:bb:15:
85:53:0a:0c:55:04:a6:75:b7:d6:19:39:a5:69:2d:08:e7:0a:
64:87:61:6b:e6:a1:96:45:c4:d2:6a:d7:4c:6d:04:ea:99:84:
06:cc:94:44:e7:f6:f8:87:e1:36:06:c8:b4:f9:05:66:c5:9e:
74:d7:46:8f:1b:5f:f1:1c:9e:85:f3:6d:c4:ba:c4:a2:6e:3d:
04:45:20:1a:74:16:e2:12:6e:9c:04:13:0e:b7:a8:3e:be:1e:
0a:57:81:13:f8:86:eb:80:b5:69:af:ed:10:fc:23:94:f0:18:
4f:24:fd:95:b5:c8:f0:3b:3e:cd:6f:cd:f0:6a:59:8c:60:ba:
17:dd:b1:d9:1f:9d:22:d4:1d:a2:cf:1f:15:bb:fc:5f:11:92:
3b:ea:72:ef:cf:2b:76:54:1b:0c:c2:16:47:f9:4d:12:69:f7:
5c:8c:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:44 2025 by rpki-client