Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA24D240C61111EF92C26893762E951A.roa
File: AA24D240C61111EF92C26893762E951A.roa (raw, json)
Hash identifier: onPRY3fjp/iKcvXs0opBFkSEoUBDxTvMieIfwgC8dW0=
Subject key identifier: B4:F8:6C:10:65:C2:BD:24:94:80:52:6A:CD:ED:1F:3D:83:32:EF:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA24D240C61111EF92C26893762E951A.roa
Signing time: Sun 29 Dec 2024 18:21:04 +0000
ROA not before: Sun 29 Dec 2024 18:21:01 +0000
ROA not after: Sun 12 Dec 2027 18:21:01 +0000
asID: 17561
IP address blocks: 154.217.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77548 (0x12eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:21:01 2024 GMT
Not After : Dec 12 18:21:01 2027 GMT
Subject: CN=67719310-6ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:d9:ea:50:76:55:dc:68:90:63:bb:3f:75:
83:b1:57:0d:b5:07:f6:f1:78:39:11:e0:ad:e0:61:
12:fe:a3:95:fc:4b:f2:f0:93:22:2c:f6:35:d9:ce:
87:21:54:4b:5d:4e:18:bc:86:c6:ce:23:b0:75:3b:
67:1a:2b:30:57:21:43:db:03:a5:e7:0d:cc:9f:7a:
50:34:c9:47:f4:04:93:40:5f:f1:3a:a5:5d:48:56:
0c:11:99:77:9e:4f:f5:ee:7b:7c:14:2d:86:64:fa:
20:fc:e4:a1:bd:1d:9d:92:a1:7e:c9:93:b0:c4:ca:
59:18:96:17:94:e5:99:59:5f:7b:1c:d2:1d:72:4a:
8c:2d:27:e3:dd:54:97:be:b7:3b:15:52:b6:6c:45:
07:55:d2:d2:b2:f5:48:ac:af:0d:0f:cb:1c:22:92:
dd:48:60:6d:93:73:5b:8b:78:df:db:4a:fa:90:e5:
f5:2a:80:02:c3:69:63:cb:98:c7:d0:d9:73:fa:22:
cf:f2:31:d5:6f:7f:aa:48:0c:88:af:3d:03:36:76:
c4:82:82:87:a8:bc:a0:d2:26:a3:4a:56:47:28:16:
90:2d:cf:93:d7:b1:73:95:08:c7:35:a8:74:54:bf:
df:c4:df:a0:c9:8c:c8:c4:89:ae:2a:7f:42:1f:49:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:6C:10:65:C2:BD:24:94:80:52:6A:CD:ED:1F:3D:83:32:EF:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA24D240C61111EF92C26893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.89.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ae:34:8a:f0:9c:de:55:53:ca:7b:69:3e:7a:b4:e4:f0:47:
8c:d4:29:8b:26:9a:8e:59:e3:0a:71:62:e9:bd:22:e6:de:0c:
fa:9f:8b:a7:10:bc:e2:5c:53:71:b4:ef:30:f0:f7:48:63:4a:
95:f5:58:57:64:62:f6:1e:ac:14:fc:4b:ef:e3:4d:d7:8c:2e:
5d:d4:c2:92:98:9f:be:2c:ab:a2:64:e8:15:ad:01:93:f2:17:
05:da:ae:b0:e7:a6:21:aa:c3:02:67:fd:d8:50:6e:7d:a7:97:
47:68:1e:3e:c3:f8:c3:1a:1e:be:5f:92:12:7f:71:0d:a9:2f:
49:e5:8d:91:b4:0a:6d:4c:78:d8:8e:e0:bb:0d:13:bd:26:82:
32:de:06:69:dd:34:47:cf:eb:31:18:68:f3:eb:2f:4b:54:e0:
52:d3:28:68:ba:6c:36:0c:d0:00:04:ea:ed:02:69:1f:5a:a6:
d5:4e:05:b3:bd:3a:8c:f3:c1:ed:59:e7:9b:d8:8d:27:09:e1:
93:6d:e8:5a:2a:3a:d9:42:7d:07:66:a6:74:7b:e2:c3:0b:97:
c9:c5:e4:43:b6:6d:4f:ac:87:4b:5a:50:82:99:35:ff:4f:b4:
a4:ac:f2:57:09:47:a1:8d:5a:47:e3:13:7d:46:45:57:d5:c9:
a0:6c:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:41 2025 by rpki-client