Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1E7C64C5E211EFA36A176D762E951A.roa
File: 8F1E7C64C5E211EFA36A176D762E951A.roa (raw, json)
Hash identifier: +Fgf/eeY4bK6K6q1zs3ECeKkqzcpYv6ucKNk3LMqXRY=
Subject key identifier: FB:21:51:63:64:9E:B8:1E:B8:27:75:A3:CF:87:52:78:96:DC:B9:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1E7C64C5E211EFA36A176D762E951A.roa
Signing time: Sun 29 Dec 2024 12:43:53 +0000
ROA not before: Sun 29 Dec 2024 12:43:49 +0000
ROA not after: Sun 12 Dec 2027 12:43:49 +0000
asID: 17561
IP address blocks: 154.210.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77148 (0x12d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:43:49 2024 GMT
Not After : Dec 12 12:43:49 2027 GMT
Subject: CN=67714408-987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:f5:4c:b3:d3:73:99:6c:da:29:bc:d6:e9:
90:80:34:38:44:7c:37:ff:13:1a:80:e7:15:ac:af:
fb:2e:78:a5:3b:2d:18:77:9e:ed:8e:44:45:7a:cb:
10:6b:82:b5:e3:4f:ab:40:26:42:66:df:88:7f:f6:
7a:15:22:8f:f9:28:29:11:03:c7:e6:55:0d:af:ea:
4d:5c:f9:f5:81:c7:44:98:c9:1e:7d:bd:77:29:24:
ab:39:4e:5f:c6:13:a0:89:df:0d:90:82:02:3f:cc:
1e:fe:06:32:75:c9:23:c1:c6:1b:d8:50:8f:79:27:
aa:09:d5:ea:9b:21:b8:64:1e:5a:e9:2e:6b:0f:13:
75:72:af:35:0e:40:2c:2b:26:4e:9d:d8:d9:7d:12:
ed:a6:20:70:b6:83:ef:9a:87:70:5a:e8:e3:bf:8e:
0e:6a:5b:03:3a:cf:d9:f4:b9:71:fe:ae:7b:d6:b7:
9d:88:0f:0c:5e:3a:4a:69:20:9c:22:70:f9:4a:79:
52:f2:2e:8a:74:97:07:da:3d:30:9d:06:f8:02:26:
5c:a3:ac:8a:f2:07:0b:50:c1:9d:02:63:2b:0b:05:
5a:7e:7a:a6:29:4b:dd:73:b3:c1:c2:b0:ac:73:b4:
10:8a:ff:0f:ef:d2:e9:62:dd:e6:fc:30:ab:a7:ca:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:21:51:63:64:9E:B8:1E:B8:27:75:A3:CF:87:52:78:96:DC:B9:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F1E7C64C5E211EFA36A176D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:d8:90:d9:d2:a9:1e:08:36:e3:6d:60:c1:d8:bc:7b:2b:04:
7f:d0:47:d2:cf:90:4f:19:36:4f:22:70:7a:40:b6:26:d2:7f:
be:b7:79:02:a5:76:38:73:9e:30:ed:c5:83:57:aa:4a:1f:67:
77:29:70:5a:eb:23:5a:8d:bb:77:5b:fb:d8:7c:8f:53:79:2b:
10:37:50:af:99:35:92:36:0f:f4:54:93:dc:c2:7a:dc:97:87:
09:2d:5e:13:40:b2:74:84:33:c3:35:9d:2d:da:75:ad:61:61:
35:6b:ea:27:5e:e2:55:c6:b4:8c:05:02:5c:30:fe:46:cd:9d:
a1:4f:f8:0c:51:3e:2d:2d:92:d2:e5:8d:f7:40:d5:db:77:a1:
3b:be:fe:24:de:d9:c4:7a:0f:8b:8a:58:7a:4f:4f:81:42:86:
71:87:32:f4:a3:e0:26:26:91:bd:de:7a:3b:92:e2:d1:88:6e:
fd:f5:12:1a:5c:8f:90:98:6f:ac:3c:35:03:04:94:d4:f7:fc:
6f:cf:ea:b3:5d:ef:de:8c:c3:86:62:cb:cd:a0:a2:57:39:66:
77:fd:1e:5f:78:15:5a:c7:a2:9b:0f:6f:bb:57:92:77:10:a8:
1f:8e:0d:ad:8b:4f:41:78:96:27:f8:a6:6e:66:94:2b:72:6f:
47:f9:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:08 2025 by rpki-client