Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9572FAC62011EF89F73D72762E951A.roa
File: 8E9572FAC62011EF89F73D72762E951A.roa (raw, json)
Hash identifier: R3lWFIPlTVn9fvqzpuEPDuCjlIftyGpaBpjWMqRXbIQ=
Subject key identifier: DD:4D:B7:0A:16:1F:C1:D9:B4:37:65:C2:48:A7:A9:45:61:7C:67:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9572FAC62011EF89F73D72762E951A.roa
Signing time: Sun 29 Dec 2024 20:07:40 +0000
ROA not before: Sun 29 Dec 2024 20:07:37 +0000
ROA not after: Sun 12 Dec 2027 20:07:37 +0000
asID: 17561
IP address blocks: 154.217.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77672 (0x12f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:07:37 2024 GMT
Not After : Dec 12 20:07:37 2027 GMT
Subject: CN=6771ac0c-6136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:7e:bc:bb:a0:ef:f5:8f:79:5d:82:fe:83:
d3:b1:f2:92:38:f5:10:23:3f:19:6f:d7:e7:ed:76:
4c:20:23:df:1e:b5:01:10:a2:f3:ff:d0:32:1c:45:
58:94:0a:81:ec:c3:34:c1:54:de:f9:38:2b:46:ba:
88:82:94:35:63:47:58:23:c4:44:71:6c:9e:bf:7e:
66:a8:ec:80:30:c4:6f:6d:55:2c:42:1b:bd:2a:fe:
a4:65:a1:90:2f:1d:9e:dc:8b:f8:d6:cd:06:85:fe:
05:f7:f0:36:7a:3f:f9:dc:10:f6:8a:ba:dc:d7:3f:
a9:cc:a9:57:c4:db:be:c0:0e:03:5e:7d:08:c2:73:
11:8d:12:2f:bf:36:00:6e:80:22:d3:7f:2d:da:99:
d1:54:c2:c7:41:c2:f8:1a:cd:56:31:a6:37:ef:ff:
b0:88:ca:5b:53:20:7b:d1:45:66:5f:00:9e:8b:cc:
e2:2d:60:7a:a4:e9:9b:48:48:49:dc:8b:3b:87:17:
c0:a3:67:df:df:3b:a4:97:0c:7d:16:2f:55:19:9c:
e5:93:b0:e3:59:53:dc:09:37:52:28:54:1a:ed:ac:
7a:20:ac:53:36:2e:d2:b6:0b:be:fe:d0:72:71:5b:
8a:29:1f:50:0a:0e:ff:03:a9:75:7d:95:ef:f6:cd:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:B7:0A:16:1F:C1:D9:B4:37:65:C2:48:A7:A9:45:61:7C:67:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9572FAC62011EF89F73D72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:60:ab:a3:48:2b:8e:fd:a6:db:2a:16:14:86:73:3a:be:23:
80:de:d9:6f:94:75:9a:41:87:cf:0b:1c:40:ca:3d:a4:b8:1d:
2b:86:8c:59:6a:e9:77:ab:d2:17:4a:ea:6c:5b:07:cf:3a:f1:
0a:53:85:44:52:c3:0e:80:08:fc:ed:fc:77:f0:ff:c5:d1:86:
93:6d:3c:3c:f3:fd:28:c8:1d:53:46:56:f4:17:60:07:39:3c:
ea:64:41:1b:73:27:a5:44:96:27:ee:61:5a:c1:cf:84:65:97:
8e:07:65:de:ac:da:69:1e:bd:89:5a:8a:70:1c:1e:c4:9d:23:
7b:e0:70:0e:aa:df:f3:14:ae:44:14:07:bb:29:0b:2b:12:0e:
6f:c4:db:81:48:10:e2:90:14:27:80:16:44:4a:96:a4:64:66:
5b:a2:46:83:23:8a:e7:e6:84:34:88:18:0e:62:71:f7:46:4e:
5c:8c:82:94:6c:5f:4d:2c:2f:e4:d8:f3:5d:24:68:16:b3:ae:
a5:7e:0c:70:39:a2:fd:f3:23:8c:a2:4a:f6:1c:08:03:bc:e2:
86:96:62:99:45:9a:d7:f8:3a:15:e3:3d:c4:29:88:85:15:e3:
34:1b:13:ee:eb:85:bb:76:66:15:ae:25:37:ee:b0:51:b3:37:
35:db:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:36 2025 by rpki-client