Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBA5D24C5FA11EFB51A9183762E951A.roa
File: ADBA5D24C5FA11EFB51A9183762E951A.roa (raw, json)
Hash identifier: KKD2iYPSjOTL+HKE5U/Gn6X4ct+hwauzfnAoIN6Hnlc=
Subject key identifier: E2:4E:C4:41:96:1E:0B:ED:7A:FB:E1:27:D6:18:85:A6:32:19:93:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBA5D24C5FA11EFB51A9183762E951A.roa
Signing time: Sun 29 Dec 2024 15:36:32 +0000
ROA not before: Sun 29 Dec 2024 15:36:28 +0000
ROA not after: Sun 12 Dec 2027 15:36:28 +0000
asID: 17561
IP address blocks: 154.216.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77352 (0x12e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:36:28 2024 GMT
Not After : Dec 12 15:36:28 2027 GMT
Subject: CN=67716c80-70e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:f0:6f:ca:08:a8:c7:69:0a:e8:ba:85:cd:
e9:94:49:95:e8:c3:30:41:25:3d:df:83:a3:80:c4:
22:28:1a:5a:28:c5:72:36:9e:70:a5:a3:51:fd:e5:
db:8c:5c:28:4f:19:cc:48:d9:d1:13:24:36:06:06:
29:4d:3d:e8:df:78:ef:2c:57:aa:89:56:3a:82:67:
f5:86:cf:76:c3:f8:1e:b4:81:42:fa:f8:55:0b:8a:
fd:54:d5:d0:aa:c5:5a:9d:bc:fe:87:c2:dc:69:67:
76:a0:c8:78:46:5e:71:13:45:b0:81:18:f3:2e:af:
8e:3d:8d:ee:dc:3d:65:be:67:a9:e6:c5:b9:26:5e:
dc:d5:22:04:63:03:74:18:10:b0:64:81:07:7c:e3:
d3:d9:6f:43:83:6e:cf:5f:8f:3e:5e:35:a8:7a:3e:
07:af:b8:f2:e9:48:b2:22:6e:b3:52:9f:b1:3d:36:
ea:fe:be:3d:13:cf:e2:65:c6:d0:9a:54:19:54:b6:
1a:c1:17:8a:ef:c0:c4:b4:50:93:01:b8:ec:71:74:
2e:3b:a6:1e:eb:32:98:b3:cf:52:6e:6e:40:4e:ca:
84:03:ae:15:dc:fe:e8:8d:21:a9:6e:a6:2e:42:d8:
8a:60:bd:e9:48:3d:a1:19:68:c1:45:88:18:7c:6d:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:C4:41:96:1E:0B:ED:7A:FB:E1:27:D6:18:85:A6:32:19:93:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBA5D24C5FA11EFB51A9183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:69:66:1c:38:02:84:da:45:e2:21:f8:5c:40:cd:7e:54:be:
cf:20:0e:df:7f:33:92:6a:ec:30:ec:88:c7:26:51:f7:6a:27:
43:21:ee:95:2d:1d:6c:eb:ca:61:fa:f8:27:29:b4:7a:80:51:
c7:52:1e:22:a1:b8:7d:bf:02:8b:b8:fd:7f:31:b8:58:0c:8c:
70:d9:a8:3a:49:e4:38:57:48:10:9d:22:69:8b:93:80:db:e0:
56:34:fc:e9:65:e3:db:c1:a9:f9:c4:b8:14:bd:f4:5d:d4:b4:
8f:41:f9:c9:63:62:1f:50:6b:10:04:1d:89:d8:c7:70:2a:78:
83:94:01:b1:68:e4:37:95:93:b1:c9:63:73:ec:99:f6:f2:79:
ea:62:03:0e:eb:ff:2d:9d:a2:32:92:4e:ec:4c:9b:35:40:03:
24:75:2e:0a:48:65:42:19:a5:1d:4b:a3:35:95:b7:ce:09:cb:
66:43:7c:3a:49:64:c8:75:1a:e1:1a:61:a5:40:82:c4:d6:89:
0a:04:c9:fc:d3:10:b5:86:ac:a6:b8:71:9b:ab:53:8e:ee:9c:
dc:2a:2c:1b:96:ba:fb:95:e5:9a:70:84:8c:33:9e:dc:9d:f3:
83:1d:3f:aa:37:0f:47:97:14:44:98:9c:4c:80:5d:5c:dd:5d:
db:c8:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:36 2025 by rpki-client