Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3CA982C5EE11EF8804E2B6762E951A.roa
File: 7E3CA982C5EE11EF8804E2B6762E951A.roa (raw, json)
Hash identifier: jThxyQwhA3PnIk/koxTWh4Nf3H3t4TnEvaqNgs8z/Mw=
Subject key identifier: 5F:35:F4:9F:D3:B0:CA:DF:7F:93:F6:C5:AD:22:90:96:69:D8:F0:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3CA982C5EE11EF8804E2B6762E951A.roa
Signing time: Sun 29 Dec 2024 14:09:18 +0000
ROA not before: Sun 29 Dec 2024 14:09:15 +0000
ROA not after: Sun 12 Dec 2027 14:09:15 +0000
asID: 17561
IP address blocks: 154.211.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77250 (0x12dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:09:15 2024 GMT
Not After : Dec 12 14:09:15 2027 GMT
Subject: CN=6771580e-a043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:9b:2a:18:cd:7d:86:73:eb:32:6f:f9:c9:
29:45:78:29:1d:4a:9b:4b:ab:6a:aa:3f:62:03:98:
a3:0a:25:39:0a:9f:e8:eb:16:f0:66:6b:0e:12:b6:
29:49:0c:c2:c7:02:32:a4:4a:9d:a3:51:7a:56:76:
cc:b3:c1:65:b7:9e:4d:45:0f:4f:38:13:9d:c7:ae:
8f:b6:72:ed:33:9a:7b:32:8c:2c:04:6a:d9:70:6c:
99:36:06:9e:e9:0f:5f:50:68:4b:4c:46:a1:a3:63:
6d:11:b8:03:11:72:f4:31:87:70:df:f4:6e:a1:78:
23:7a:51:89:29:31:2e:2b:f6:4d:dd:82:56:67:85:
a1:d1:c9:3e:65:b6:33:b1:d0:69:a9:ee:04:8d:93:
10:b1:c1:c2:b3:0d:0b:32:e7:10:d6:5d:3a:6e:5b:
d0:9d:5a:bb:77:11:8e:4d:67:be:86:0c:85:4c:32:
35:52:91:49:d6:78:88:0e:8e:b5:34:cd:05:b9:d5:
d7:e3:cf:d1:92:a1:8c:9b:06:bd:28:47:49:52:94:
96:46:38:2f:2e:02:d2:ae:58:7d:74:1a:08:f4:d0:
23:74:8f:4b:99:ac:2c:2f:00:19:61:54:f6:50:1c:
22:45:78:a4:64:cc:c3:70:1b:00:14:d7:da:89:bf:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:F4:9F:D3:B0:CA:DF:7F:93:F6:C5:AD:22:90:96:69:D8:F0:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3CA982C5EE11EF8804E2B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:87:10:54:8c:df:f2:ff:7c:fd:e8:66:a1:d3:ed:12:71:4c:
30:b3:29:e5:83:cd:7d:4c:d4:20:92:d9:15:ad:87:28:5e:17:
f0:16:6b:30:18:96:da:10:2c:6e:8f:41:7f:9b:0c:16:fd:f1:
1e:64:86:79:2b:f1:fc:f5:13:76:be:c1:d8:2e:db:1a:ac:8d:
89:c5:ff:3c:46:ad:6d:2f:fc:ef:c0:96:a9:22:70:53:9e:78:
13:f3:de:a9:82:71:ec:f9:3f:22:b4:7c:3e:ae:53:93:aa:89:
5b:4c:d7:81:22:ee:52:1d:07:81:29:59:c6:56:7b:24:b0:35:
26:22:ec:e8:d4:48:88:8c:d6:32:9a:7b:4a:67:d5:ea:4f:97:
83:77:49:01:a4:58:54:13:61:1f:a4:92:ba:ef:12:80:a1:a9:
16:65:94:67:af:24:46:c8:80:91:6d:e5:ca:10:ed:c7:71:62:
07:16:88:54:73:e9:b4:5d:82:4f:65:db:cc:06:7b:c3:b0:9a:
ab:c8:6b:6c:d4:81:ee:33:46:4e:7a:50:9f:f4:ba:23:62:eb:
1f:31:a7:5a:64:5c:f9:b8:cb:19:49:66:75:be:24:70:a2:bd:
de:77:94:71:06:d8:2c:78:6e:d9:1e:55:80:ca:ea:25:97:3c:
3c:0f:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client