Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B32056C63211EFA3636764762E951A.roa
File: B4B32056C63211EFA3636764762E951A.roa (raw, json)
Hash identifier: Q7Tdu3uk0I15HzOw5TSEw7c90gfpV5nCm7Vo73sNl3U=
Subject key identifier: C7:B4:75:A6:A7:3D:9E:72:3B:A2:99:DC:76:AE:51:47:74:2C:EB:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013000
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B32056C63211EFA3636764762E951A.roa
Signing time: Sun 29 Dec 2024 22:17:35 +0000
ROA not before: Sun 29 Dec 2024 22:17:32 +0000
ROA not after: Sun 12 Dec 2027 22:17:32 +0000
asID: 17561
IP address blocks: 154.217.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77824 (0x13000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:17:32 2024 GMT
Not After : Dec 12 22:17:32 2027 GMT
Subject: CN=6771ca7f-1c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:d5:d2:80:45:29:db:6f:59:5b:31:3e:6b:
34:c5:b3:21:50:f0:c7:dd:8b:ae:eb:dd:a0:aa:65:
89:29:59:1e:6e:d5:29:ce:33:ec:d0:61:7c:1f:3c:
8b:21:79:f6:d5:a4:e6:f9:a0:ce:da:6b:35:26:e1:
d7:3f:36:71:2b:8b:79:ee:d1:9c:26:17:4b:51:8c:
a7:85:10:f4:cd:7b:ae:15:7c:f3:6f:61:64:dc:1d:
c7:93:b3:10:a5:8d:65:ef:f7:b7:2e:5e:67:0c:14:
d4:a8:b0:f2:e3:7d:07:38:46:67:cf:b9:ae:21:9c:
f2:75:2e:db:c3:12:4d:66:54:f2:6e:a2:5b:7f:1e:
98:3c:c0:18:c8:6a:0c:02:48:c0:cd:b0:0e:ec:fc:
ca:c1:36:72:0d:22:58:50:e1:dc:f3:0a:45:3b:32:
fd:0d:c7:bb:ab:9c:3f:1d:da:cf:ff:3e:b7:7a:45:
82:cc:52:aa:ac:fb:cd:d0:f8:f5:7b:c6:4d:fd:be:
10:42:88:86:d9:55:04:74:25:58:01:20:ff:eb:87:
bd:6a:52:47:98:94:fb:97:e2:e1:18:aa:de:f9:8e:
b9:ee:4f:58:f3:36:f2:9c:98:a4:ac:4c:37:61:08:
6b:c2:0b:85:ec:a4:e8:f2:7a:b5:28:5f:32:41:46:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:75:A6:A7:3D:9E:72:3B:A2:99:DC:76:AE:51:47:74:2C:EB:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B32056C63211EFA3636764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:81:02:fa:b0:89:56:d6:1d:7e:4a:23:ce:db:dc:b4:80:62:
28:b9:37:bb:7e:3a:91:48:2f:2f:c7:30:27:bf:4d:b7:08:cc:
0a:ca:98:38:40:f0:81:21:50:6a:55:f9:cf:34:06:9f:57:9c:
e5:0c:29:e8:38:13:4e:3e:b6:c0:21:39:54:d5:5a:74:cf:16:
e7:e7:66:7b:22:14:09:6f:d7:f7:92:ee:16:a4:ab:35:2d:e7:
d4:38:16:ca:17:c9:a9:32:4d:cf:84:85:3c:81:14:84:04:f8:
c1:1b:30:8e:47:9b:29:d7:9b:0b:3f:29:2d:79:e9:6e:ff:70:
a2:00:5f:3a:4b:37:03:c4:49:d5:cb:07:3e:f2:6a:c6:5f:04:
aa:0b:fb:f6:3e:0b:b1:59:61:01:be:e2:4c:d6:37:a7:b1:5e:
e6:c2:17:63:49:26:4e:84:1e:6c:49:27:1d:fc:c7:5d:09:44:
cf:4d:a6:1b:7f:71:e9:c3:97:da:2f:a3:19:3e:b9:b9:85:ac:
45:88:1e:6b:9d:f1:e0:1f:01:c5:7a:d5:7a:d6:59:e7:e5:da:
29:1b:b1:4e:7f:d2:e1:1b:d3:d8:cf:e3:10:05:d6:a7:3d:17:
a1:dc:18:31:03:e7:bc:83:ff:69:ba:b7:78:08:1c:24:f2:0c:
bb:0a:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:02 2025 by rpki-client