Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71AFAEC63411EFB42E376F762E951A.roa
File: 9E71AFAEC63411EFB42E376F762E951A.roa (raw, json)
Hash identifier: 8I2SEQwI0QPiSC0Yk21nVgyKlJjXDL2kFTtKuuSMrtw=
Subject key identifier: C4:C4:BF:0F:7B:D1:1E:07:B3:03:A6:1F:CA:1C:41:B0:F7:13:71:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013010
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71AFAEC63411EFB42E376F762E951A.roa
Signing time: Sun 29 Dec 2024 22:31:17 +0000
ROA not before: Sun 29 Dec 2024 22:31:13 +0000
ROA not after: Sun 12 Dec 2027 22:31:13 +0000
asID: 17561
IP address blocks: 154.217.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77840 (0x13010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:31:13 2024 GMT
Not After : Dec 12 22:31:13 2027 GMT
Subject: CN=6771cdb5-18c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:98:59:f2:24:ca:a7:c5:eb:b1:e8:9f:2c:
91:73:1e:06:5c:83:55:eb:aa:e0:fa:ac:c9:a5:c3:
e8:04:33:b2:ab:12:f4:69:a9:4b:ef:d3:5c:65:81:
15:eb:58:a1:f8:86:a9:cb:99:da:9c:3a:f9:1d:d0:
1b:4b:64:58:39:77:e4:5c:73:40:8f:a6:63:a7:ec:
86:c2:26:3e:3e:c6:07:a0:e9:3a:34:70:ae:41:8c:
29:98:0a:e4:5d:3b:a0:e1:94:5f:75:ff:20:a4:09:
91:0e:f2:9c:33:14:58:ba:f3:b0:55:9f:09:45:12:
b4:74:08:e5:df:2c:d8:d8:2f:bb:0f:60:ad:e7:93:
7b:07:52:c9:90:28:cb:5c:de:59:9e:b6:82:11:da:
b0:08:1d:33:8f:a7:3c:ce:fb:3f:5a:4d:b8:4b:c4:
05:ca:5e:b6:43:8d:91:02:42:ca:e2:3d:ef:8e:aa:
62:d1:7a:66:ad:79:82:ba:cf:4d:a5:15:ea:8d:8f:
ca:0e:2d:42:ec:49:05:67:f4:bd:98:f0:8c:3a:0e:
66:82:ea:cd:c7:a5:5c:14:a3:ce:5f:a2:dd:72:d9:
ab:42:11:5a:16:13:d4:85:73:52:15:cf:0d:a6:36:
31:21:b7:51:cf:5b:51:47:43:f4:8e:d5:3b:14:7f:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:BF:0F:7B:D1:1E:07:B3:03:A6:1F:CA:1C:41:B0:F7:13:71:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71AFAEC63411EFB42E376F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:40:84:7c:a2:c3:66:06:a2:ca:2b:ea:8e:73:e7:95:4d:7d:
f6:22:93:03:70:4a:fe:d0:e2:22:28:36:f5:d2:25:a7:52:88:
07:15:46:dc:41:80:0b:5d:47:f0:d8:6a:91:53:c7:2f:59:04:
02:7c:90:65:3c:64:29:f8:e4:bc:04:f3:81:ac:61:da:f8:65:
a2:f4:f0:c3:e8:8f:53:e2:9c:f4:ae:b1:13:d9:dd:fb:d5:22:
1a:43:4b:46:24:21:ca:77:71:e0:91:34:35:34:ba:fe:cf:1a:
fa:f2:15:7b:21:31:fa:23:d8:ce:c5:59:ae:cb:b5:02:4e:3e:
30:24:35:b7:6f:25:46:7c:d8:8c:61:5c:f0:cf:b9:aa:49:a4:
93:c6:8d:62:e1:51:da:d1:9e:ac:af:2d:97:b6:35:c7:88:2b:
30:6e:b1:f6:6d:b4:09:4c:b9:0f:16:47:51:63:d1:53:0b:29:
27:94:bd:a0:1d:0c:49:39:3e:b8:3b:c6:4e:c0:04:e2:8c:fc:
6e:42:ec:67:60:d6:03:a6:4e:20:f5:70:52:c6:32:d7:ed:4a:
e1:71:59:7b:e8:4a:0d:0e:4a:25:78:e8:d8:e4:84:0b:4a:13:
44:d3:a7:d8:8f:f9:f4:e1:e2:1a:09:a1:5d:5e:a9:39:89:09:
f5:f8:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:35 2025 by rpki-client