Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BCDA18C60811EFAFF5BE5B762E951A.roa
File: 81BCDA18C60811EFAFF5BE5B762E951A.roa (raw, json)
Hash identifier: FoL/LvGWI+9ubPVr2cNnJTsjUVcU362iAmMsCW7lwwU=
Subject key identifier: DC:17:33:E1:43:F2:03:52:E3:F3:32:1E:DD:54:7D:2C:CC:3F:0E:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BCDA18C60811EFAFF5BE5B762E951A.roa
Signing time: Sun 29 Dec 2024 17:15:31 +0000
ROA not before: Sun 29 Dec 2024 17:15:27 +0000
ROA not after: Sun 12 Dec 2027 17:15:27 +0000
asID: 17561
IP address blocks: 154.217.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77470 (0x12e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:15:27 2024 GMT
Not After : Dec 12 17:15:27 2027 GMT
Subject: CN=677183b3-4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:12:4c:4d:22:3a:22:11:08:fc:8a:25:93:
c6:cc:72:44:1b:67:7c:e9:73:af:68:5f:59:ab:ab:
ec:05:ae:dd:8d:78:45:5d:35:75:7c:25:c2:ee:88:
0a:a7:ee:ca:81:9e:7b:bc:20:27:3f:bb:09:0e:c6:
08:96:4f:d1:2d:ed:50:97:be:cc:14:de:0a:d7:c4:
04:0c:37:dd:a8:20:64:82:c4:f5:4a:65:14:fe:e1:
3e:64:57:4b:04:23:08:d9:e6:78:ef:32:9a:71:ed:
44:bc:2a:05:3d:e4:ff:ae:9e:9d:13:35:63:d0:af:
18:58:8c:9b:a5:03:bd:eb:71:a6:91:be:28:4f:45:
cb:28:09:41:83:5b:9e:6d:cb:43:3d:53:8b:e7:73:
d3:7f:a0:22:17:5b:80:8a:ab:ab:e2:6a:b5:36:df:
5b:9f:d6:b0:b1:33:c5:39:6a:2d:75:3f:80:58:84:
8a:40:01:f7:2b:37:ec:08:81:57:34:33:59:d4:92:
50:90:52:12:c4:0e:29:df:64:b6:c0:86:f9:2c:69:
1f:c9:1a:69:9a:0d:ea:5e:cd:b9:c6:48:4a:2e:55:
e5:9b:f4:26:16:70:b0:48:c8:20:09:b0:6a:88:9f:
ca:bc:24:11:03:79:17:b7:50:d4:6e:95:0f:00:87:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:33:E1:43:F2:03:52:E3:F3:32:1E:DD:54:7D:2C:CC:3F:0E:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BCDA18C60811EFAFF5BE5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:92:4a:72:6e:dc:e3:d3:eb:8d:6c:bb:a3:30:fc:a1:9d:
32:bd:f3:69:e3:a5:9e:0f:be:bc:39:b6:f5:3c:fa:13:2e:da:
02:04:da:31:8a:67:bf:ba:36:50:50:eb:95:b3:4e:be:c8:56:
1a:0b:99:87:0e:38:7a:8b:61:ce:28:6a:0c:4d:07:67:e2:42:
19:58:a7:ee:82:1f:ab:d9:ca:53:28:48:fb:8c:70:9f:63:2f:
21:40:28:89:61:81:99:48:be:4c:8a:be:a9:e5:cb:57:f5:bf:
d6:64:c5:35:9c:5d:09:e0:4c:71:d9:7b:0f:8c:16:0a:6a:de:
b2:8b:56:fc:10:f0:06:3d:76:0f:93:e9:80:2d:fe:03:83:a0:
69:62:ad:40:13:7b:1b:70:3b:6c:1e:af:4a:f8:87:0c:c6:3d:
22:c6:61:bc:d0:cb:14:72:f5:9e:4f:b6:10:bf:d9:c2:32:9c:
8a:59:85:9e:7b:b5:f9:69:f7:ee:8a:ed:61:4c:43:55:de:7f:
04:a0:a0:33:98:2c:9b:f0:00:0a:f6:a1:43:0f:05:aa:24:ef:
b3:e9:a9:c7:17:83:3c:6f:84:16:de:20:9c:32:24:4e:f8:ec:
68:3b:38:e7:64:13:b1:53:f8:f1:86:b3:35:43:91:2b:01:b4:
d5:0c:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:41 2025 by rpki-client