Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501613AC41D11EFBA12EBBB762E951A.roa
File: 9501613AC41D11EFBA12EBBB762E951A.roa (raw, json)
Hash identifier: Trgc8/NG2/ODezKUyEvenepIjzSU+vvhu+QQ4rvbDEg=
Subject key identifier: B7:FB:0F:67:78:9D:9F:FF:CC:63:BC:9A:AD:EB:13:0B:51:15:D7:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01299D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501613AC41D11EFBA12EBBB762E951A.roa
Signing time: Fri 27 Dec 2024 06:41:21 +0000
ROA not before: Fri 27 Dec 2024 06:41:17 +0000
ROA not after: Sun 12 Dec 2027 06:41:17 +0000
asID: 17561
IP address blocks: 154.201.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76189 (0x1299d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:41:17 2024 GMT
Not After : Dec 12 06:41:17 2027 GMT
Subject: CN=676e4c10-9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:50:bc:43:b7:c8:61:84:5d:0f:c4:8f:75:
15:89:65:54:0b:11:57:f3:a1:fa:9a:8d:5a:81:86:
38:2a:21:51:db:e8:8c:d9:13:39:d9:73:e7:a8:a5:
10:a0:93:e5:17:a0:05:8f:63:49:61:64:2d:25:e5:
11:9c:0d:58:83:bf:36:c2:03:1e:e5:50:cd:89:82:
3b:9a:b8:68:9e:76:99:70:7d:74:41:f8:b2:e6:cf:
c5:37:d6:1b:42:fe:f5:21:22:1e:d1:30:01:92:bc:
75:f2:78:bb:5b:cb:d7:83:7d:be:5a:53:d5:b5:6d:
9c:67:72:e1:57:37:03:ac:24:b6:90:5b:59:e9:4e:
f3:c4:f9:14:f3:b9:3b:4d:59:6f:54:24:57:5e:33:
75:ec:3b:83:3c:b9:61:a3:7c:90:6f:57:de:b0:06:
47:fc:b9:10:c7:18:8f:59:20:03:1c:c7:1b:2b:e0:
be:a7:a2:9d:70:a6:ae:35:6e:4f:c8:c1:28:26:d1:
d7:db:db:3f:b9:7e:8d:cb:9c:40:21:ea:01:af:8d:
0c:67:a8:08:7e:5e:63:27:ed:a3:8e:8d:24:45:58:
aa:cb:63:e0:56:4a:5a:1d:8b:89:78:20:49:92:ef:
6d:71:41:90:0c:61:7a:b5:09:38:aa:9a:79:98:b8:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FB:0F:67:78:9D:9F:FF:CC:63:BC:9A:AD:EB:13:0B:51:15:D7:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501613AC41D11EFBA12EBBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0a:8d:11:08:5c:b0:0f:52:0d:4a:19:e5:66:38:ce:f5:9b:
1f:56:ab:86:6b:6f:91:22:54:b4:2c:ea:63:00:d4:21:cc:a9:
57:9d:7c:95:cf:12:14:b4:ee:c6:48:e0:39:a8:ab:e7:cb:80:
a7:b5:e5:73:62:3a:ef:9f:4a:07:61:20:b8:dc:2a:32:2f:53:
47:39:ba:1a:4c:90:20:63:49:fe:34:2d:b1:dc:cb:fa:61:06:
70:a0:ff:bb:3f:c4:ac:15:19:d5:dc:38:9c:f0:6d:f6:97:a8:
b0:67:2a:c4:9e:be:a4:13:f3:da:73:0e:0e:da:ce:ce:77:ad:
2e:14:19:85:95:b6:b9:dc:51:a4:a1:47:31:3f:1e:22:6b:fd:
d8:42:f7:50:3e:54:a3:7d:4f:a0:53:de:08:f2:fe:7c:8f:e5:
e2:bb:44:30:93:54:14:35:57:d8:3f:63:5f:13:5d:87:7a:78:
9d:f7:34:4a:42:20:69:9d:37:64:9a:ab:b3:88:6f:87:ec:d8:
c0:a7:30:0b:0c:11:72:8c:d0:9d:e5:3e:92:8a:68:49:6c:76:
af:99:77:73:9a:87:4b:bb:ae:19:8f:0e:06:44:a9:01:6a:a7:
c7:52:14:cb:2b:26:e6:67:1f:cd:f2:e2:54:2c:73:48:b6:8e:
a9:b7:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:06 2025 by rpki-client