Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B24D96CAC5F111EFB0F5274C762E951A.roa
File: B24D96CAC5F111EFB0F5274C762E951A.roa (raw, json)
Hash identifier: jdIYl6aTFX7taKXa7hV92y7Gb3W7ajBWLQD6IflGNts=
Subject key identifier: B2:76:F7:CB:8F:27:E9:C5:F7:00:8B:E5:B6:FA:95:FA:B8:AF:FB:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B24D96CAC5F111EFB0F5274C762E951A.roa
Signing time: Sun 29 Dec 2024 14:32:14 +0000
ROA not before: Sun 29 Dec 2024 14:31:58 +0000
ROA not after: Sun 12 Dec 2027 14:31:58 +0000
asID: 17561
IP address blocks: 154.211.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77276 (0x12ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:31:58 2024 GMT
Not After : Dec 12 14:31:58 2027 GMT
Subject: CN=67715d6e-93a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:db:1a:94:5c:cf:77:86:51:3e:03:2d:37:
60:ab:c1:75:c3:aa:f7:e6:32:e1:e5:5c:28:4e:36:
e7:cb:59:f9:9a:04:13:54:24:99:57:c7:16:8c:dd:
bc:b3:08:5a:3d:1c:06:09:82:cf:d0:1c:82:86:c3:
ce:40:8c:06:94:cd:40:65:49:3a:8d:d7:8a:e8:8b:
1c:c7:7e:58:4c:85:90:f1:c8:16:30:25:a4:08:c8:
d4:c1:a3:df:25:97:cb:5b:a9:e6:ba:67:32:7a:9f:
bf:48:fb:17:62:b7:84:55:58:68:bc:50:84:d1:c5:
77:94:9b:12:2a:ae:51:e3:fc:c1:e6:76:f6:5c:0d:
52:99:29:26:46:aa:26:2e:59:6a:16:ff:d6:8c:eb:
45:25:cc:e8:f8:6a:0d:ae:3c:f2:f0:b8:e7:05:7c:
1a:7b:ba:51:ab:0b:b3:4b:bf:1d:ab:39:10:52:c3:
31:61:76:f9:c0:b2:fe:49:29:f0:15:99:ac:fd:40:
15:83:da:e0:4f:f7:28:20:1a:dd:c9:46:a3:7b:d6:
58:76:8f:15:98:8b:7d:ab:ed:66:24:41:0c:77:f9:
53:39:fa:c8:8b:f3:a8:41:0d:59:e6:30:a4:18:f4:
aa:65:a0:ca:ac:ee:25:32:91:bf:a0:86:a2:6f:a8:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:F7:CB:8F:27:E9:C5:F7:00:8B:E5:B6:FA:95:FA:B8:AF:FB:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B24D96CAC5F111EFB0F5274C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.56.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4d:e3:b9:f6:45:dc:5d:22:80:12:32:9c:42:c6:b9:4e:be:
52:fa:3d:ce:98:c4:95:4f:08:9d:28:57:44:c2:fa:28:2b:9d:
33:1e:04:72:e0:e7:94:77:23:75:1d:85:29:14:27:03:54:71:
26:e4:23:c8:81:cc:67:18:46:fa:15:f8:4c:db:9e:2d:5f:73:
75:11:de:1b:59:ac:e2:63:ff:54:2b:66:68:41:1a:59:32:e7:
1c:8d:ed:de:f2:4c:e3:fb:92:e0:bc:dc:2b:0b:85:40:59:ae:
4c:60:93:8a:27:58:af:36:14:be:2f:62:d5:ae:85:0b:f4:9c:
32:77:b6:de:8c:c9:f5:a8:56:72:9e:10:b1:db:81:b0:19:db:
74:0b:06:80:26:f6:d3:3d:1e:c4:74:87:74:63:5e:d6:06:73:
91:96:c0:bf:7b:42:ce:f1:64:95:2a:15:b7:fe:e0:fd:19:b6:
f5:60:e0:a4:73:63:95:45:f3:ff:7d:7b:37:86:c6:37:02:d3:
84:80:b1:62:da:20:58:64:6a:b9:8f:97:b3:ee:ac:fc:22:72:
8d:fc:5f:46:7d:ef:14:78:f8:23:b1:94:76:83:5e:f5:eb:45:
2c:e2:52:f3:96:1b:9e:f7:40:d5:a0:9e:f2:0a:5d:70:9d:d4:
3c:7c:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:45 2025 by rpki-client