Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DE6DD5CC62C11EF9D5C0ABC762E951A.roa
File: 7DE6DD5CC62C11EF9D5C0ABC762E951A.roa (raw, json)
Hash identifier: wq74ryS3G75sA6SuqCTyGvyTjMaPTh5wsGE0rFdbWZg=
Subject key identifier: 60:0B:3E:D3:ED:9B:C9:AA:9A:45:60:C1:6A:05:AC:68:5C:27:7D:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DE6DD5CC62C11EF9D5C0ABC762E951A.roa
Signing time: Sun 29 Dec 2024 21:33:06 +0000
ROA not before: Sun 29 Dec 2024 21:33:03 +0000
ROA not after: Sun 12 Dec 2027 21:33:03 +0000
asID: 17561
IP address blocks: 154.217.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77772 (0x12fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:33:03 2024 GMT
Not After : Dec 12 21:33:03 2027 GMT
Subject: CN=6771c012-4b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:e9:3c:b5:23:44:a4:f2:1b:7d:a9:ab:58:
b0:74:3d:33:b2:72:43:53:25:f6:09:3e:d6:9e:74:
d3:f8:9a:8f:aa:11:fb:13:be:b9:c5:3f:a5:12:11:
0f:9b:6b:ed:cf:89:21:42:9c:8c:94:2e:e1:eb:6a:
41:c4:ed:63:47:67:c3:80:bc:9f:21:eb:eb:6b:7f:
0f:16:01:11:db:88:c1:5d:94:f1:83:2c:3b:be:60:
32:56:f6:20:93:5e:d4:ac:57:49:a0:9f:75:45:5a:
e0:54:10:05:92:83:5c:39:9f:4e:64:0c:be:ac:3c:
d2:1b:24:9a:58:92:37:04:e8:79:ef:46:b7:3f:ed:
79:62:3a:d3:f5:43:30:5d:23:ed:ba:63:3a:9b:b1:
76:81:a2:f0:45:60:36:b9:3d:75:dc:d2:67:db:b7:
ec:2a:61:2c:67:32:cf:ae:bb:e0:09:d6:0e:12:de:
eb:f9:a0:49:a9:d5:fd:4f:a7:fc:e8:cd:04:56:dd:
af:84:0e:2f:55:1e:e4:04:92:63:2c:d5:f3:38:92:
7a:3d:48:ab:c2:0e:85:df:76:5b:d9:63:6d:54:09:
93:18:88:09:92:9d:95:14:1d:a9:7b:4b:c2:10:0e:
d2:c1:f8:6f:3c:3a:ee:e5:0c:b6:2e:f0:60:a1:40:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:3E:D3:ED:9B:C9:AA:9A:45:60:C1:6A:05:AC:68:5C:27:7D:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DE6DD5CC62C11EF9D5C0ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.201.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cf:79:75:b6:ba:b4:2f:77:2e:b4:b9:e0:6f:ae:2b:6e:74:
23:51:c4:84:38:a8:63:0b:99:f2:73:f1:c0:3d:40:8c:0e:e2:
df:d3:d8:41:ed:5d:de:5b:7c:54:e4:3c:7e:ee:18:e1:25:5a:
d9:09:51:6c:8a:20:ac:7d:87:98:a6:7b:95:60:f8:b0:8b:71:
bd:88:f3:f3:20:8e:01:96:da:ce:6e:79:d8:ec:a7:ec:f3:02:
6c:d0:c4:45:46:8b:b6:0e:66:fd:ae:67:86:76:63:59:b4:6b:
fe:03:73:10:b4:c1:ce:5e:97:c0:01:a8:1a:6f:87:c0:28:35:
09:47:92:99:db:41:d3:60:26:d7:af:f7:7a:67:83:98:a3:01:
ef:f9:7a:9a:0f:7a:31:0c:03:45:89:86:03:a0:18:bd:7e:e7:
7b:e4:87:34:39:ed:d3:c7:0d:e4:14:c8:90:6f:0c:44:2d:e2:
fb:b1:fc:57:7c:75:41:61:2a:83:37:a3:95:30:ac:c4:9b:f8:
2d:74:7e:fe:d3:2a:d7:49:1e:a9:45:1c:d8:4a:51:f5:f8:c7:
9d:3b:45:92:15:9f:d0:3b:07:56:6a:25:4f:fa:e4:a5:70:08:
5f:1c:20:7e:1c:1c:a3:35:10:fe:46:6f:06:9d:d3:76:58:f9:
b5:bd:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:23 2025 by rpki-client