Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A1FD02C60011EFA882C1A8762E951A.roa
File: 97A1FD02C60011EFA882C1A8762E951A.roa (raw, json)
Hash identifier: bsuGhzGKe80woqhuje69hTzpnZWDygnXGKHQgdptKQM=
Subject key identifier: 9A:2E:63:78:95:47:86:D7:4D:E8:9B:B1:7B:E7:F4:C2:6A:A8:A6:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A1FD02C60011EFA882C1A8762E951A.roa
Signing time: Sun 29 Dec 2024 16:18:52 +0000
ROA not before: Sun 29 Dec 2024 16:18:48 +0000
ROA not after: Sun 12 Dec 2027 16:18:48 +0000
asID: 17561
IP address blocks: 154.217.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77402 (0x12e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:18:48 2024 GMT
Not After : Dec 12 16:18:48 2027 GMT
Subject: CN=6771766c-d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:e3:16:ee:72:e4:f8:20:4e:16:19:9e:cd:
f0:b2:53:33:74:10:93:51:32:8d:e0:d6:3e:ab:63:
02:89:70:72:e7:0e:fb:65:2c:bb:ca:e2:0d:a3:df:
10:a1:72:ba:29:f6:d1:3e:49:77:96:28:a5:80:5e:
fe:6d:3e:07:49:49:5b:f1:9a:30:78:34:cf:38:f1:
54:29:04:aa:f3:a6:02:9a:45:92:fd:24:91:8c:ff:
bf:71:d7:2f:5b:06:09:8f:f4:d4:d4:e5:3c:97:c2:
60:9f:7f:19:08:a6:4d:09:f3:b9:7f:57:81:26:c3:
c0:30:69:3d:d1:a0:1e:7f:11:ca:58:4d:bb:1a:f9:
bf:3f:60:9a:41:ce:08:56:14:b8:b0:04:18:7a:63:
08:e3:21:38:ba:57:da:23:5c:bb:f8:50:f8:69:a1:
83:38:55:f1:91:c3:77:7d:d4:08:1f:94:d1:c4:09:
2c:1d:5e:04:3e:f8:70:0c:3f:32:60:2a:15:46:8b:
30:d4:13:f5:c3:a8:15:e3:52:ff:6c:fb:fd:d1:2b:
3c:49:a7:3a:5e:52:fe:9a:ac:4f:04:63:75:79:39:
ad:0d:1a:b5:b4:a3:16:54:19:90:e4:ef:6c:04:1a:
f3:f0:e1:bf:f2:37:72:a4:f6:cc:b4:75:9c:0a:a4:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:63:78:95:47:86:D7:4D:E8:9B:B1:7B:E7:F4:C2:6A:A8:A6:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A1FD02C60011EFA882C1A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c8:73:58:74:aa:4b:e9:55:0b:65:1c:41:53:e8:06:a1:54:
b8:10:5d:25:ad:e3:7b:ec:a4:f1:b3:09:bf:e8:52:c5:a8:20:
eb:ae:12:e3:96:8d:b5:3a:99:7f:62:ed:ed:df:5c:1a:23:91:
0e:56:13:d8:d4:0f:fa:5b:7a:80:c5:74:b6:4d:56:46:20:4e:
a2:19:3c:cb:4d:6b:3d:94:52:67:df:66:d7:11:9d:e9:c9:60:
56:fd:9f:7f:4f:57:bf:12:db:e1:24:52:e7:f2:5e:c0:e6:cc:
25:ac:70:bf:05:8f:b8:d3:af:53:da:1f:fc:27:78:01:d6:80:
94:c3:16:56:cc:20:97:0d:a5:d4:0e:b1:c7:0b:8e:10:22:f6:
64:96:71:b8:1b:bf:ac:1a:a9:80:c5:e5:b0:8f:01:20:af:31:
64:2b:f1:c5:4f:98:72:82:59:f2:2d:74:b1:98:87:ab:69:8f:
45:a8:b9:a6:d5:a2:11:c4:c9:2c:33:10:36:85:2f:ce:4e:5e:
06:5e:6c:8c:33:ad:c4:d3:71:ec:1c:e0:1b:6a:4c:91:6a:af:
0d:e4:3b:d0:2a:32:97:70:07:7d:f9:64:e1:08:73:c1:d2:cb:
67:c7:80:26:cf:6b:e6:b0:a0:3b:6c:a8:cc:9e:3f:3b:6b:8c:
f6:a8:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:22 2025 by rpki-client