Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755D3B2C52211EF92BFCAAA762E951A.roa
File: 8755D3B2C52211EF92BFCAAA762E951A.roa (raw, json)
Hash identifier: ALGE4NUjLxNiZtZIQo/jj1yYBQmGnoJccN420UVwCqc=
Subject key identifier: 22:4D:61:07:E8:3E:D9:C1:9F:53:D1:F5:EB:DB:6E:B7:5B:87:C4:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755D3B2C52211EF92BFCAAA762E951A.roa
Signing time: Sat 28 Dec 2024 13:49:16 +0000
ROA not before: Sat 28 Dec 2024 13:49:13 +0000
ROA not after: Sun 12 Dec 2027 13:49:13 +0000
asID: 17561
IP address blocks: 154.203.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76645 (0x12b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:49:13 2024 GMT
Not After : Dec 12 13:49:13 2027 GMT
Subject: CN=677001dc-920c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:b6:4a:c4:80:5d:76:14:3c:b3:73:d0:11:
16:c0:c1:77:56:6e:4c:b0:1f:71:b4:fb:13:81:e6:
38:18:74:cc:3d:ba:a4:df:9d:9e:a7:b6:09:b7:c0:
e3:1d:de:ea:4e:b0:ea:65:39:22:54:64:59:15:2e:
fb:3e:38:4c:b8:41:f0:d5:9c:8e:44:2f:ae:e0:fb:
e1:1c:9b:11:b3:f9:e8:c4:2a:56:1a:82:ad:48:f1:
bf:45:27:27:e0:1b:d2:cf:3f:e2:2f:45:37:49:06:
a1:0d:8e:e5:7e:d9:d1:1d:23:87:03:31:5d:82:b5:
3a:f0:be:e6:fc:0d:ac:40:c0:25:06:be:17:0d:2f:
03:11:e6:2c:a2:ce:ac:67:d9:f7:ad:c5:2a:51:d9:
50:22:66:c0:aa:2d:73:f9:3b:6e:81:0f:73:a1:be:
db:3e:03:6c:2c:2c:74:5a:6b:e8:60:a2:d6:00:f8:
d8:10:a4:4a:d1:ed:34:ba:73:49:18:c5:a9:e8:4f:
f1:29:35:1f:63:24:c9:04:7e:5f:0c:35:9e:f5:ab:
29:11:06:fb:d0:8a:13:bb:05:36:f9:95:f0:3e:ba:
58:f0:0d:a0:59:de:7d:14:26:19:25:70:10:e7:5f:
3b:50:a5:d0:e7:6a:31:aa:35:93:7c:16:67:46:82:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:61:07:E8:3E:D9:C1:9F:53:D1:F5:EB:DB:6E:B7:5B:87:C4:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755D3B2C52211EF92BFCAAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9b:2f:53:e1:2c:c1:09:1b:b3:0f:89:6a:fb:35:4b:6e:1e:
f4:f0:ba:5d:de:a4:ac:8b:37:4c:a7:ca:5d:0c:eb:4a:58:c4:
85:b1:50:fc:c7:f9:65:47:19:b2:50:40:a1:88:76:01:01:c1:
ea:90:0a:02:7c:77:77:04:bc:82:84:56:f3:74:3e:a3:87:9a:
9d:f1:60:fe:4a:68:21:03:21:de:8b:27:ae:c1:ce:95:39:8e:
33:64:b7:94:1e:c2:23:3c:76:7f:0f:f8:1f:7d:51:8d:8a:81:
bb:41:df:a1:40:6f:8c:ad:bf:29:88:4a:8b:28:c7:b9:c8:67:
2f:d8:dd:e9:95:fa:ab:c1:c9:3f:04:77:48:25:33:83:d0:73:
9a:85:4a:42:48:9d:84:bd:54:26:83:18:f3:f1:ff:95:e9:89:
a6:e1:5b:ba:ea:f5:85:78:c6:cb:81:d8:a6:c1:d3:86:84:22:
1e:f0:48:cf:c1:44:87:44:28:38:12:4d:c0:d6:ae:55:ef:64:
96:f6:da:69:c7:35:13:fc:44:17:ea:fd:45:10:4c:86:44:4c:
b9:2c:1f:ef:32:89:85:df:f5:3a:36:30:ec:83:9e:36:7b:78:
35:33:e6:91:63:82:a9:1d:8e:67:f1:29:53:a0:bb:9d:48:e7:
da:c7:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client