Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1CE464C5FF11EF859BABA2762E951A.roa
File: AC1CE464C5FF11EF859BABA2762E951A.roa (raw, json)
Hash identifier: B6CSZ+La3+9y+1whJydZHY+ZhQGyZsFLihhIcbNeFPs=
Subject key identifier: D3:51:E5:F4:4F:11:72:9C:7A:6C:32:A3:C4:37:FF:0B:7B:EB:3E:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1CE464C5FF11EF859BABA2762E951A.roa
Signing time: Sun 29 Dec 2024 16:12:17 +0000
ROA not before: Sun 29 Dec 2024 16:12:13 +0000
ROA not after: Sun 12 Dec 2027 16:12:13 +0000
asID: 17561
IP address blocks: 154.217.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77394 (0x12e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:12:13 2024 GMT
Not After : Dec 12 16:12:13 2027 GMT
Subject: CN=677174e1-5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:3f:3f:bf:f4:27:bb:5d:e6:13:d5:62:02:
5f:a8:24:4b:e2:93:31:f9:0f:8a:53:81:04:f7:64:
3a:a0:cc:3a:c0:27:49:a7:20:c4:a8:b3:cd:73:83:
f9:f3:e3:81:0e:ef:f8:bd:ee:c3:19:67:e9:83:60:
cd:68:d7:a1:0c:20:9c:3e:39:3a:db:f6:8b:e8:b6:
d0:95:fb:4c:78:46:a2:5d:00:f0:36:7c:d0:25:3c:
aa:fd:31:f6:f6:bf:49:56:f7:8a:2e:19:43:dc:2e:
98:89:23:94:51:c9:2f:be:21:f0:f8:99:c3:50:4d:
61:a7:22:f8:39:39:59:59:fb:56:99:bb:e4:ed:ea:
fb:de:d5:35:4f:6b:10:bb:8e:dd:cd:5c:e6:5c:75:
f7:d0:5d:e5:96:31:57:05:be:0f:c2:fd:60:6b:29:
2f:26:80:49:69:9c:3f:3e:43:66:47:1d:9b:ff:10:
53:c7:68:b5:e2:6a:75:19:bb:22:33:0d:ee:2f:f3:
63:92:c2:fb:6e:20:55:21:f3:08:fe:88:1e:77:b5:
51:d4:44:73:e7:87:80:8f:c4:46:ec:5e:fc:95:6a:
f9:0e:d7:46:3e:68:f2:31:a7:5e:66:19:8f:42:2a:
f6:3c:a9:16:f3:ba:10:d5:5a:f7:81:e9:d7:44:a3:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:E5:F4:4F:11:72:9C:7A:6C:32:A3:C4:37:FF:0B:7B:EB:3E:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1CE464C5FF11EF859BABA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:e2:3f:d7:da:59:54:e4:b7:35:d7:61:9d:ee:51:b5:67:
5f:5b:4f:b2:5f:00:77:1a:04:d3:98:a0:aa:28:4d:f8:30:71:
40:8d:55:d3:7f:32:0e:df:6a:45:ef:35:23:a6:8d:c3:c4:d9:
af:08:f2:90:14:6c:3a:95:2c:15:6d:15:7e:1f:51:50:1a:b8:
af:2b:1a:f2:f0:b4:8b:6e:b3:73:4b:1c:1c:14:b5:bc:75:d4:
04:81:59:9e:e6:cd:2f:6f:18:01:3e:5e:2a:25:e8:9f:9f:04:
4f:f5:ba:6a:5a:c9:5b:e8:7a:bb:1d:b4:0a:6f:eb:aa:5c:f5:
d8:26:38:a5:cf:6d:6d:57:4e:a1:d6:65:a5:0a:10:7c:69:59:
d6:fe:68:e0:c1:82:db:11:02:50:e5:0d:50:7d:3b:69:81:7f:
ba:bd:cf:cb:8c:98:d4:72:f1:d6:0d:0b:a6:9c:d1:cb:86:55:
e7:07:39:0b:26:38:06:a8:c3:cc:08:c0:d3:ec:3c:f6:5c:01:
a9:c7:fc:f6:43:f7:6a:ff:1d:94:42:bd:3e:9e:38:37:a4:a7:
c6:17:ab:45:52:0b:d3:ad:1b:46:4e:12:ed:7f:f1:a9:14:1a:
e9:3e:53:ef:ee:ac:33:a7:d5:c3:fb:57:f1:b6:00:2e:fe:19:
64:cb:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:03 2025 by rpki-client