Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7F9594C5EF11EFBF7F4DBF762E951A.roa
File: AF7F9594C5EF11EFBF7F4DBF762E951A.roa (raw, json)
Hash identifier: b+FjjQ2IfmzIgu3XCSHsCkIJpKu/aClwrWbb8U5aXk4=
Subject key identifier: 35:02:48:7A:53:C6:0E:B4:98:56:AB:8A:41:C4:9E:40:9E:0F:D9:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7F9594C5EF11EFBF7F4DBF762E951A.roa
Signing time: Sun 29 Dec 2024 14:17:50 +0000
ROA not before: Sun 29 Dec 2024 14:17:47 +0000
ROA not after: Sun 12 Dec 2027 14:17:47 +0000
asID: 17561
IP address blocks: 154.211.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77260 (0x12dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:17:47 2024 GMT
Not After : Dec 12 14:17:47 2027 GMT
Subject: CN=67715a0e-9c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:3a:09:63:f4:72:2b:29:9d:6b:e1:30:03:
ce:cf:f2:9c:88:4f:0b:23:76:9e:35:91:4a:3a:64:
25:89:c1:0c:38:f9:6c:39:17:df:d1:05:4a:f8:fc:
6e:a1:9a:cf:00:6e:11:89:9f:2d:9b:94:4c:75:9e:
1f:a5:f4:74:14:74:44:30:a2:e4:fa:a3:93:a6:45:
83:6d:f5:60:a3:7d:d0:59:91:5e:57:61:44:dd:65:
e0:58:05:b1:f2:c4:4a:73:52:90:ef:80:4a:25:80:
cd:8d:63:4b:19:e9:e4:25:4e:6f:e8:9a:45:f3:37:
cb:32:fb:54:03:b6:a1:dc:bf:b1:c7:5d:6a:96:ff:
f6:44:24:aa:f1:27:bd:d5:d0:8a:34:37:78:3f:c9:
77:07:86:67:63:fd:c4:71:7b:38:41:cb:39:59:48:
77:05:38:07:39:cc:20:1d:4a:5f:6d:40:6a:fb:c4:
b7:98:15:b9:89:40:2f:de:5e:ab:aa:ed:4c:cf:2a:
2a:38:18:5f:64:47:32:ad:76:99:59:ab:4d:07:dc:
cd:c3:b2:e9:b5:90:cf:a5:3b:7c:c4:3f:0e:96:62:
db:ae:4e:f6:c4:26:cc:4b:4f:05:3a:b9:a7:30:b7:
0e:5c:3c:9e:1d:28:1b:c7:42:17:fb:95:6c:d0:74:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:48:7A:53:C6:0E:B4:98:56:AB:8A:41:C4:9E:40:9E:0F:D9:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7F9594C5EF11EFBF7F4DBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:93:c0:09:b7:02:56:6b:23:e8:75:c8:a9:eb:e6:17:48:64:
c1:9a:a1:0b:6e:27:90:81:39:30:28:6a:77:26:9d:6e:93:76:
69:a6:68:fc:d9:d7:29:ea:28:b2:9d:d6:71:02:11:ca:16:ca:
56:9e:bb:4c:c1:b6:c5:a2:b3:af:de:99:72:3f:06:9d:33:61:
41:d4:99:d5:40:71:fa:24:70:34:8e:13:ff:a5:ea:7a:01:f4:
df:a3:0a:84:41:17:cb:2f:d2:92:56:97:f1:30:26:25:4e:a1:
04:7d:8a:df:98:b7:a0:76:48:d8:24:2f:23:45:d7:67:58:c0:
ff:70:46:d4:cd:19:8a:c5:5e:fc:f0:46:fa:91:f1:5b:b3:93:
71:01:45:4f:8a:84:f7:68:c4:57:eb:b6:05:ca:bc:b5:e6:74:
04:76:d8:d1:37:2a:9f:cd:33:ab:9d:47:7d:85:95:fe:ef:aa:
e0:59:0d:44:50:3d:61:72:12:63:66:cd:20:07:b1:e4:1f:b7:
d5:3f:32:bd:f0:37:82:8c:a0:c0:2d:37:02:d3:50:c3:4e:83:
0f:20:ed:b2:eb:ef:02:ce:79:09:53:03:8c:4d:58:c3:e1:cc:
76:8b:dd:d3:0e:f1:c0:91:1a:6f:e9:47:1a:7d:49:34:1e:c7:
6a:e3:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:59 2025 by rpki-client