Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29F11E4C62911EFBF9BE5AA762E951A.roa
File: A29F11E4C62911EFBF9BE5AA762E951A.roa (raw, json)
Hash identifier: 9u9rK5cIajK67grOGB1999W892KeWjqkBvac73K9WPI=
Subject key identifier: 3D:2C:CE:C9:54:87:0A:A2:91:8A:CF:CF:60:20:1E:81:27:72:C4:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29F11E4C62911EFBF9BE5AA762E951A.roa
Signing time: Sun 29 Dec 2024 21:12:40 +0000
ROA not before: Sun 29 Dec 2024 21:12:35 +0000
ROA not after: Sun 12 Dec 2027 21:12:35 +0000
asID: 17561
IP address blocks: 154.217.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77748 (0x12fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:12:35 2024 GMT
Not After : Dec 12 21:12:35 2027 GMT
Subject: CN=6771bb47-ec26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:bf:e6:91:0d:65:9a:a6:73:4c:41:b2:31:
f1:d9:4a:be:4f:ee:14:56:09:8f:d9:cf:a5:03:16:
9f:72:4f:fc:6f:1f:2c:aa:85:bf:85:5f:30:03:f6:
5b:f4:29:36:19:7c:86:b8:2f:77:a2:c5:f8:9d:fa:
05:53:be:38:8d:23:07:78:a8:0c:e7:7b:f5:7e:09:
3d:80:db:c6:f8:3b:8d:94:59:80:4e:eb:21:13:13:
d4:04:85:a1:84:a5:fd:92:0a:4f:bb:1e:08:49:c7:
c3:12:2f:ed:97:1e:b4:d3:42:64:b4:9f:88:30:12:
1c:42:d8:e8:41:ff:20:0c:91:b8:61:4f:b8:b4:93:
d0:b1:8e:19:5a:c8:a1:05:8a:e8:84:82:2a:fb:32:
43:32:52:32:3f:ff:39:e8:26:81:fb:03:b5:02:91:
44:db:75:de:80:bb:90:ac:03:a4:db:d6:60:bb:8f:
00:b6:4b:11:60:27:28:5c:7f:6d:03:4e:33:8d:5d:
05:88:45:91:ef:30:dd:97:c6:24:6a:61:27:d8:82:
c7:a2:64:a0:db:83:2f:7f:72:b9:82:b1:2d:ec:a9:
e1:df:94:67:eb:bc:dd:1d:54:93:b6:1e:64:13:f7:
c3:43:10:2e:9e:6a:87:7f:b4:fa:bd:9e:ee:ad:56:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:CE:C9:54:87:0A:A2:91:8A:CF:CF:60:20:1E:81:27:72:C4:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29F11E4C62911EFBF9BE5AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.189.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c4:0c:91:ce:77:a6:ef:d7:b2:af:7e:b0:fc:dc:ab:4f:17:
ce:74:45:88:1f:6d:7d:18:e3:d2:ca:13:90:a3:3c:aa:6c:59:
a2:ff:d0:15:11:80:b4:55:9e:e4:84:b9:d2:51:72:97:db:3c:
f6:f8:8d:23:54:54:8d:f7:44:16:48:21:ac:33:a7:58:f3:35:
e5:49:8a:af:77:a0:a3:55:05:15:3c:a3:d7:b1:a6:8a:00:57:
47:f6:8d:cd:b8:04:7d:30:14:e2:05:40:f0:9f:5e:2b:52:97:
c0:2f:3b:5b:0c:d8:ef:b2:9f:e8:38:26:61:df:e5:5b:7f:54:
62:01:c5:f6:50:a7:d5:2a:2c:58:ec:90:de:c5:67:91:5a:53:
72:17:0f:32:69:d2:92:ec:3c:d2:e7:17:be:a3:e2:e0:06:92:
45:40:be:79:17:86:3f:fc:1c:6b:d0:8e:64:20:62:7a:56:e7:
38:aa:3d:09:53:c0:31:52:6f:99:8a:85:71:42:e0:c9:05:d1:
07:fa:78:c2:9a:ed:2b:ad:59:ee:5b:70:b4:00:9a:43:f3:e7:
7d:74:3d:12:44:55:61:c3:c1:08:9e:03:f1:ff:b4:71:67:74:
e1:11:c2:e7:69:1d:6b:71:94:b8:3e:3c:7d:9b:b7:0d:a0:b7:
7e:24:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:43 2025 by rpki-client