Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B849BCAC61211EFB557CC99762E951A.roa
File: 9B849BCAC61211EFB557CC99762E951A.roa (raw, json)
Hash identifier: UCJsjTlXBHpHfVsATLOaW/yi+oVMESN3TMwzlO1tYtg=
Subject key identifier: 7F:DD:A6:CF:28:9A:64:AB:45:AF:90:7C:88:CD:0D:B0:00:B6:9B:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B849BCAC61211EFB557CC99762E951A.roa
Signing time: Sun 29 Dec 2024 18:27:49 +0000
ROA not before: Sun 29 Dec 2024 18:27:45 +0000
ROA not after: Sun 12 Dec 2027 18:27:45 +0000
asID: 17561
IP address blocks: 154.217.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77556 (0x12ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:27:45 2024 GMT
Not After : Dec 12 18:27:45 2027 GMT
Subject: CN=677194a5-7f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:d1:59:6a:3d:2a:b8:ca:1c:25:0b:db:92:
88:bd:42:59:d3:06:96:98:11:b8:5a:1f:d6:3d:f6:
2f:42:1b:69:a8:80:42:1f:e7:9f:51:21:79:dd:17:
7f:23:60:c5:85:5e:5c:6e:d4:52:8d:69:43:ac:a3:
02:a2:c0:3b:06:bc:e3:67:60:5c:f8:ba:b7:5c:97:
f4:8e:9a:c7:1e:ae:ed:0a:73:49:ff:15:10:8d:92:
67:ee:db:bc:d7:26:13:6a:1f:70:42:26:1c:2a:33:
1a:17:9b:14:89:fe:3e:fa:87:ec:30:42:9e:91:6c:
f4:25:75:c1:25:24:17:51:13:ae:01:cc:80:7d:ac:
52:0c:df:51:18:0f:5c:69:a4:25:55:9c:fc:f9:ca:
cd:1e:5f:51:31:e5:bf:fa:18:0f:aa:3d:96:37:3e:
7c:6f:81:a9:65:27:91:a7:8a:01:4f:76:2b:cc:7e:
d5:ff:f7:0e:12:54:5f:44:75:fd:87:f6:66:37:a4:
7e:a9:84:a9:3a:91:fb:2e:ee:75:3c:7e:9d:75:95:
c0:94:c7:ca:48:78:39:ce:e9:8e:98:39:b7:31:69:
d4:af:eb:ac:a9:e5:73:a4:b8:19:fb:c3:5b:04:65:
10:5f:15:5d:c2:88:bb:31:2a:05:9a:d7:9b:fb:d4:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:A6:CF:28:9A:64:AB:45:AF:90:7C:88:CD:0D:B0:00:B6:9B:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B849BCAC61211EFB557CC99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:75:7a:df:ac:72:96:da:92:69:ba:bd:dd:a7:ad:8d:02:46:
f4:ba:f5:26:d1:df:e1:15:11:90:c7:2e:aa:01:51:b7:ad:33:
57:26:4c:98:16:ee:47:43:29:95:ed:2c:1d:2d:6c:ec:9d:b9:
b9:6f:fa:58:eb:19:35:e7:91:2f:97:06:5f:17:3e:79:c0:b7:
f7:be:aa:d3:29:a7:f2:e4:61:9a:93:15:2a:61:ba:15:f4:86:
68:20:c3:13:75:19:f2:c0:fa:2a:cc:4a:f5:60:f8:ca:1b:a5:
79:30:71:80:85:d0:91:9b:07:e9:de:07:6c:db:06:27:9f:bd:
b0:8e:80:f8:41:f0:b4:22:f6:71:e2:77:a6:f1:26:35:7a:c1:
8e:29:8c:10:fb:95:2e:63:e9:ba:4b:b3:18:2f:3b:90:3c:1e:
8b:d7:3c:02:79:b8:97:eb:c4:f0:47:d5:17:12:4b:7a:d5:71:
8b:0f:db:f7:ad:67:78:e1:c5:fa:d2:85:ea:7a:09:19:3f:ff:
36:24:62:1d:c1:d1:33:d7:57:49:4e:99:12:5e:9c:21:07:6d:
41:4a:8d:d4:20:1b:b0:70:39:bc:cb:2a:60:1e:8c:34:83:5e:
31:1f:61:f2:29:d1:20:6c:88:da:f2:a0:49:81:b3:80:37:be:
da:2b:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:25 2025 by rpki-client