Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E5B269CC61511EFB205F3AB762E951A.roa
File: 7E5B269CC61511EFB205F3AB762E951A.roa (raw, json)
Hash identifier: RZAmxwT/eQi4G/AwZUNlTvKV04fVROrDn6m2V+Re9hk=
Subject key identifier: 63:5F:EF:DC:90:D8:8C:11:A6:2B:09:50:46:3F:95:E0:23:B4:FE:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E5B269CC61511EFB205F3AB762E951A.roa
Signing time: Sun 29 Dec 2024 18:48:29 +0000
ROA not before: Sun 29 Dec 2024 18:48:25 +0000
ROA not after: Sun 12 Dec 2027 18:48:25 +0000
asID: 17561
IP address blocks: 154.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77580 (0x12f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:48:25 2024 GMT
Not After : Dec 12 18:48:25 2027 GMT
Subject: CN=6771997d-a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:94:18:85:b9:7f:ee:3c:25:20:72:26:90:
9f:3a:ea:5f:75:59:a7:d8:2d:a0:b9:60:fc:95:8b:
f9:cb:f6:03:1e:de:74:3c:47:ad:cd:f2:b2:b4:f7:
55:df:83:0c:ea:b8:f5:a6:fc:21:87:3d:98:89:31:
11:3d:23:52:62:fb:85:12:88:ba:f0:52:18:ca:c7:
de:40:3d:59:f3:30:39:4e:43:c8:41:d9:9b:86:38:
23:e6:7c:89:24:46:cc:87:42:ed:57:99:6c:19:47:
76:1d:19:5b:ab:bd:69:a0:b9:70:ad:6e:74:27:c0:
4e:fc:41:18:53:7c:df:aa:96:dd:e3:ed:51:f8:21:
52:f2:ee:dc:75:17:c3:80:11:6a:be:20:f4:8d:55:
6b:93:3f:71:50:28:09:d4:3c:47:cc:a2:6e:9b:a3:
d5:d5:77:24:2c:fb:51:be:29:ef:2a:2f:16:7e:fc:
2b:8c:38:a7:a4:d2:6d:a4:3e:fb:04:b7:0f:50:94:
07:b2:b0:33:22:ff:a2:3b:38:a4:2d:be:27:38:8d:
ef:76:36:c7:d1:03:d6:25:5f:1e:e2:ab:62:11:97:
9a:b5:4d:32:b0:44:c8:2b:2d:d7:e6:8e:bb:f1:de:
e3:1c:f6:fb:ca:df:ef:f4:a8:97:f0:48:ad:6d:f8:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:EF:DC:90:D8:8C:11:A6:2B:09:50:46:3F:95:E0:23:B4:FE:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E5B269CC61511EFB205F3AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
05:58:21:18:e0:44:25:07:38:39:69:b5:de:88:8c:4e:0f:56:
45:ef:a6:5c:d8:59:2b:0b:c5:52:cc:64:13:f9:fc:4f:75:43:
4c:14:65:9c:11:8d:92:fb:c1:3c:11:1b:f8:08:23:ef:a0:bc:
cf:d7:3c:91:65:4b:52:e5:90:ad:88:27:53:ad:65:36:9e:c9:
e3:95:c8:d7:7f:44:c9:39:5c:3c:ae:02:42:0a:f7:36:23:93:
66:3a:6f:d6:10:2a:ef:a2:f1:8e:df:70:a5:24:2f:52:42:5a:
46:de:a1:39:ef:12:34:04:dd:c7:e4:36:4b:50:ef:6f:bf:1f:
3d:7e:16:04:7a:a0:65:ce:9b:58:14:59:bc:1e:c7:bc:1a:63:
67:d8:64:93:4c:f2:5b:21:0c:46:94:71:72:54:dd:2d:f0:ea:
46:b3:0d:78:86:97:c6:ac:a2:dc:54:d7:fc:17:2a:06:a3:68:
3e:1d:f4:e6:35:0c:b3:af:72:dc:15:39:26:c0:3b:2d:ce:4d:
48:a4:ca:9e:8f:ff:0a:fd:3d:e1:2b:1e:c5:df:2e:4c:8b:6c:
57:e2:ff:ce:aa:1a:be:fb:b5:38:e2:74:13:b3:b0:f4:90:65:
c0:c8:06:fe:e5:72:8a:b2:fc:04:71:de:6f:6f:1a:07:d0:01:
61:fb:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client