Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB2D5EAC60211EF9F0F8EB5762E951A.roa
File: AFB2D5EAC60211EF9F0F8EB5762E951A.roa (raw, json)
Hash identifier: ApONC1SeDxRfFEj8Rr7TI51VPAQw7qvKKMD1cuVysXc=
Subject key identifier: 30:36:C6:99:DE:77:39:0E:2F:E9:8F:07:C9:1F:7D:CA:E7:28:20:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB2D5EAC60211EF9F0F8EB5762E951A.roa
Signing time: Sun 29 Dec 2024 16:33:51 +0000
ROA not before: Sun 29 Dec 2024 16:33:48 +0000
ROA not after: Sun 12 Dec 2027 16:33:48 +0000
asID: 17561
IP address blocks: 154.217.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 08:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77420 (0x12e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:33:48 2024 GMT
Not After : Dec 12 16:33:48 2027 GMT
Subject: CN=677179ef-c640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:3e:08:84:a0:58:ab:4f:2d:71:2a:77:65:
7e:b7:c1:06:1d:89:49:fb:21:f6:11:1b:d1:d6:b0:
5d:70:21:60:3d:be:cc:16:ea:e3:f3:94:12:11:28:
4e:8f:b8:31:31:12:3d:c0:b5:7d:99:51:02:58:20:
03:d4:50:3a:10:b7:83:58:a8:a9:98:73:31:24:e0:
d1:96:c6:d0:a3:ca:aa:34:7b:8d:aa:70:85:d1:eb:
8f:75:08:77:8c:5e:ac:44:aa:2b:f2:da:4f:eb:24:
94:37:b3:ae:14:b9:a1:3d:11:2e:2f:42:3f:e6:e9:
2c:0e:00:c5:b5:58:43:e5:cd:63:81:0c:c9:a8:ac:
b4:89:2d:a3:2d:a8:b2:13:0c:84:1b:a6:fb:5b:b0:
a9:ec:f4:0b:62:2c:a1:39:f9:14:ac:0b:ae:eb:68:
99:4b:8c:1b:5a:bc:0a:bb:cf:66:df:5a:6a:24:d4:
ce:fe:ca:eb:38:3e:98:d1:70:a7:81:1a:fe:ce:e6:
fd:92:5c:22:69:5c:df:cf:01:4d:5c:5f:f6:e5:52:
a4:2e:80:8a:c0:58:cc:44:81:dd:a6:f2:25:75:62:
80:f1:3c:7c:d2:71:c5:fb:da:d9:d2:df:40:47:78:
ff:97:b1:7d:c0:73:c5:34:86:37:09:7d:ab:22:97:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:C6:99:DE:77:39:0E:2F:E9:8F:07:C9:1F:7D:CA:E7:28:20:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB2D5EAC60211EF9F0F8EB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.25.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ed:be:97:fa:15:25:b6:34:87:c8:75:18:7e:ff:15:c9:18:
f0:9c:2c:bd:a2:b5:db:43:1c:4e:37:db:8e:bf:9d:f0:74:a1:
2e:f8:4d:19:bb:b1:54:54:49:80:d2:18:e2:c8:0e:7f:63:f3:
db:34:a3:1e:e2:be:a2:1a:aa:60:02:ca:04:86:1d:19:f9:e2:
03:f8:a0:8f:62:a5:94:34:7c:6c:0f:8e:45:40:cd:ae:f8:ec:
c1:77:46:8e:99:07:77:73:a2:d5:8c:0f:b5:e5:80:8b:c0:33:
94:d9:fd:c4:ce:d2:43:89:d3:69:32:ba:e1:fd:3e:ec:f4:ca:
8e:49:89:dd:b2:7a:e2:e2:d6:8d:91:6b:da:03:fc:6f:e9:65:
c1:8f:dd:24:74:95:65:97:d7:a4:48:5c:fd:a5:b1:16:01:26:
36:82:0e:16:d0:42:b3:3c:55:87:04:12:ce:80:d5:c6:55:58:
29:1c:97:95:9f:dc:c6:6f:4d:8e:92:e2:77:b2:86:1f:87:ef:
82:15:30:bd:dc:91:35:f2:65:6e:4d:59:ff:19:ea:3e:2f:dd:
37:b6:31:fa:78:94:2e:ad:ea:4d:10:d9:3a:92:5f:8c:ba:09:
4d:32:69:77:71:0a:24:b8:01:18:df:a3:67:47:97:04:de:bf:
54:4f:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:34:06 2025 by rpki-client