Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801DAE70C63611EFA0EC9A7B762E951A.roa
File: 801DAE70C63611EFA0EC9A7B762E951A.roa (raw, json)
Hash identifier: OFVpbp7R0mfhwVQOBO0+hRDYA5gECjiXygtALVpWed4=
Subject key identifier: D5:C0:4D:89:51:C8:4C:C3:FF:6C:AF:FB:57:3B:48:29:20:A7:6A:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01301F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801DAE70C63611EFA0EC9A7B762E951A.roa
Signing time: Sun 29 Dec 2024 22:44:45 +0000
ROA not before: Sun 29 Dec 2024 22:44:42 +0000
ROA not after: Sun 12 Dec 2027 22:44:42 +0000
asID: 17561
IP address blocks: 154.217.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77855 (0x1301f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:44:42 2024 GMT
Not After : Dec 12 22:44:42 2027 GMT
Subject: CN=6771d0dd-e571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:d8:68:cc:5f:e9:e8:8c:a5:68:af:f6:75:
2e:43:c7:4d:a6:ec:bb:dc:83:ce:d8:eb:1e:a1:9b:
d0:43:22:af:aa:2a:84:98:6c:b5:54:64:0e:7c:81:
64:9b:26:d7:b5:bd:ac:23:b3:bc:8d:02:cf:b8:b9:
65:19:93:47:2d:b6:9f:0e:37:ec:04:5e:ba:cc:15:
d0:a8:70:15:d0:ed:9c:07:fb:88:d6:eb:85:c2:f7:
95:c3:40:7b:af:3e:8d:7b:41:0a:ee:db:5c:be:29:
26:8f:3a:0c:eb:b8:f1:f0:1f:83:af:26:fe:c7:61:
3b:a5:54:ef:55:2c:ac:8f:c2:fd:9d:96:7b:ea:f2:
fa:d9:0a:39:9a:f7:8f:8e:68:36:69:ec:0c:e4:84:
0b:e1:ea:b1:0c:17:bc:46:94:1b:e2:54:0b:c8:50:
65:df:20:77:70:6a:e6:77:a6:9f:78:55:62:27:96:
0b:ca:4d:2b:81:56:24:f9:d1:00:b6:a9:25:c4:80:
b7:54:9e:a0:13:59:6f:44:ab:67:a9:f2:e9:9e:79:
f7:2f:a5:b8:4f:e6:2a:b3:f2:0c:3c:61:a2:3d:fb:
c2:05:2b:cf:6b:77:3d:2d:d2:b1:14:5b:50:e3:75:
7e:bf:a5:0b:1f:a9:70:21:ac:59:4a:85:9b:bd:23:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:4D:89:51:C8:4C:C3:FF:6C:AF:FB:57:3B:48:29:20:A7:6A:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801DAE70C63611EFA0EC9A7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.243.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fe:bb:4c:9a:ed:c0:ae:34:75:5c:7e:26:f2:ef:c9:cd:69:
33:63:c2:cf:06:97:07:b6:c3:1b:14:1f:18:2a:f8:51:0d:1b:
6d:87:a2:56:b2:ad:54:3f:9b:a3:c4:86:19:5d:9d:b5:e0:db:
31:67:8b:88:f8:17:a7:3d:98:8e:6e:3a:90:4f:48:ef:cc:13:
52:5c:6f:e3:90:5f:9b:43:e4:5a:a2:48:88:3f:f5:d9:f8:4b:
4c:28:ae:3d:88:73:c5:6d:19:0f:d7:fb:39:aa:b4:1d:ba:c6:
4f:6f:f1:6e:d3:36:04:fe:07:06:5c:06:7c:1f:57:d0:9a:1c:
d2:f9:55:72:51:0a:aa:93:60:95:7c:c6:48:3f:a0:5d:3e:42:
f0:e7:2d:b9:53:41:14:b0:6e:1d:93:a4:5d:35:97:b6:1d:f1:
cd:76:fa:53:17:f7:8c:a3:e5:5f:45:aa:b6:08:f7:7e:7e:6f:
e7:60:97:88:39:58:38:7b:f1:94:8a:0a:d7:37:67:ee:cd:28:
29:36:35:a8:4b:ea:a7:cf:ee:ff:8a:f1:b4:b4:81:3d:ca:33:
cf:50:cb:9a:ae:89:f6:93:38:29:41:df:89:21:24:fb:66:c2:
5a:64:92:4f:d9:25:65:47:59:59:3e:8c:a0:ad:5b:93:7e:22:
67:be:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:43 2025 by rpki-client