Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8706755CCDF011EFACA42EAA762E951A.roa
File: 8706755CCDF011EFACA42EAA762E951A.roa (raw, json)
Hash identifier: I4U12a3x9O7imfd9KCibqWcZTJFyaHgwX+ZfQpR8VVY=
Subject key identifier: 12:6F:11:0C:03:E1:FF:29:C2:FA:52:AD:22:4F:CD:E5:FF:73:35:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8706755CCDF011EFACA42EAA762E951A.roa
Signing time: Wed 08 Jan 2025 18:44:01 +0000
ROA not before: Wed 08 Jan 2025 18:43:57 +0000
ROA not after: Mon 03 Jan 2028 18:43:57 +0000
asID: 17561
IP address blocks: 154.197.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79923 (0x13833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:43:57 2025 GMT
Not After : Jan 3 18:43:57 2028 GMT
Subject: CN=677ec771-f216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:de:2e:ac:90:b1:de:0f:43:45:e0:aa:7f:
34:91:f1:2a:ab:a7:08:de:64:98:e1:74:e3:12:2e:
49:13:37:da:03:a1:c1:ca:a2:15:d0:24:0c:35:78:
ba:4d:f2:d0:58:da:00:5e:db:a0:80:9c:4f:b1:59:
66:db:48:9a:72:27:04:a8:5d:28:71:bf:b6:97:81:
81:8f:8a:8b:02:3a:5a:9f:81:d5:4e:d1:15:88:b7:
08:93:ed:2a:1b:e7:bc:b7:6c:f4:b9:2a:dd:94:49:
cb:e3:33:a9:e4:0c:af:5a:df:1c:5c:c7:e2:3c:c5:
28:bd:c1:fa:9d:6e:81:3f:55:33:45:5b:e3:05:3f:
f6:8f:ce:fe:04:48:7f:4c:e9:8f:99:8c:2d:68:6b:
fa:23:24:06:35:06:f4:08:ae:e6:c2:c6:68:d4:0f:
33:ac:23:e4:b8:48:ce:04:9e:41:50:3d:10:ce:08:
39:f7:9d:78:36:6f:13:fb:ed:1f:a8:da:47:61:3f:
15:68:6b:d1:4f:6c:8e:30:3e:b8:8e:06:76:85:c4:
45:8c:06:a7:36:e6:b5:94:e3:ca:b5:45:33:aa:40:
39:c7:a8:29:f6:db:36:a7:a5:ba:6b:df:04:5c:6a:
87:74:41:9d:1c:73:fa:e9:0d:78:e7:67:07:51:10:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:11:0C:03:E1:FF:29:C2:FA:52:AD:22:4F:CD:E5:FF:73:35:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8706755CCDF011EFACA42EAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:8d:9a:66:e7:7e:03:71:75:c3:02:23:7f:ed:16:33:be:f0:
46:69:cf:b6:15:b3:92:6a:e0:05:88:e4:7d:03:e9:4e:36:8f:
93:d7:2a:76:08:d4:2a:ea:32:28:66:59:ca:73:f4:37:77:27:
63:d6:96:d3:33:ae:f6:8c:26:d1:24:29:2f:17:4e:e5:22:82:
b7:8f:fc:ae:d4:ba:6c:9d:7f:41:e0:8c:06:0e:ac:99:71:43:
ec:e2:df:6b:a6:f1:d5:05:a5:db:9b:d3:ef:e0:cc:1c:bf:01:
09:e2:ac:e5:ec:9f:d7:26:d7:c3:30:51:83:9c:66:31:58:fc:
7e:b1:42:fa:83:c8:df:98:91:f7:5e:ee:47:91:a4:1c:4b:f6:
02:9d:75:0d:b2:ac:1a:88:5e:e4:53:ae:e9:42:c1:ae:2e:7b:
1a:93:b2:a8:fe:d4:e6:65:1a:9d:84:bf:7f:e5:8b:0c:a7:b7:
46:9f:98:c6:2f:c1:41:9a:45:db:42:18:8b:70:09:54:42:55:
1d:86:58:24:c8:cf:fc:87:46:62:93:65:2b:8c:b0:90:da:8a:
4f:c9:f8:29:2c:9d:52:6e:d8:d8:10:36:f8:de:b3:73:3a:39:
c0:37:bc:7e:d1:e3:38:f0:20:22:29:7b:7b:d2:80:37:ef:a6:
3b:0b:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:10 2025 by rpki-client