Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55ACDA2C62711EF9C64039D762E951A.roa
File: B55ACDA2C62711EF9C64039D762E951A.roa (raw, json)
Hash identifier: 9vt4z4YgkQH7AoVgo5YG/MV3BBnkZcozM0891LqTvM8=
Subject key identifier: 83:E5:2F:11:32:38:F2:20:17:93:78:95:57:22:8D:20:DF:0C:84:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55ACDA2C62711EF9C64039D762E951A.roa
Signing time: Sun 29 Dec 2024 20:58:52 +0000
ROA not before: Sun 29 Dec 2024 20:58:48 +0000
ROA not after: Sun 12 Dec 2027 20:58:48 +0000
asID: 17561
IP address blocks: 154.217.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77732 (0x12fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:58:48 2024 GMT
Not After : Dec 12 20:58:48 2027 GMT
Subject: CN=6771b80c-c19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:d4:4e:ef:4a:4b:0d:37:68:6e:d1:2c:a9:
56:9d:92:38:64:48:40:23:ad:e1:b7:75:54:37:77:
77:98:89:4f:ce:6e:05:57:1e:69:f7:a3:ad:46:fc:
8a:65:a4:ed:e2:4f:df:c0:b5:16:42:5c:89:ac:d4:
ef:5f:ab:e6:47:97:f9:0f:f5:06:a6:3e:4c:25:fd:
a8:53:1d:0e:61:08:40:8c:b6:78:e0:36:cd:d2:37:
54:76:ba:e0:b8:18:88:9c:0c:70:26:8c:25:b8:a5:
95:2b:aa:53:92:da:35:60:a3:b7:fd:e2:d2:b8:6d:
0f:1d:76:f9:0b:03:6a:bb:d0:a2:7a:5c:7a:5a:56:
91:63:b0:36:69:77:e7:e1:27:ca:73:be:78:3d:c5:
5f:c5:5e:db:dd:71:41:69:34:3c:3e:ce:ad:39:e6:
e8:5f:11:b5:28:c3:57:e6:1c:2d:1b:13:f5:8d:38:
72:e9:ca:c5:42:3a:c2:24:87:90:eb:b0:e3:9d:56:
f6:ae:59:0e:de:df:6d:d9:05:58:30:b4:9d:fd:a5:
84:5e:ba:80:ac:dc:db:fa:43:77:ab:a2:3b:68:55:
1d:86:4d:a6:04:c9:38:b8:3c:27:45:16:e4:3e:84:
56:b4:c1:05:57:bf:04:ed:30:26:94:0c:f8:6b:7d:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:2F:11:32:38:F2:20:17:93:78:95:57:22:8D:20:DF:0C:84:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B55ACDA2C62711EF9C64039D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.181.0/24
Signature Algorithm: sha256WithRSAEncryption
65:35:ff:98:0e:29:04:e1:4d:99:32:01:0d:f6:d5:85:c6:32:
bd:99:94:38:20:f9:c2:31:d1:25:51:a8:7c:af:a1:df:67:ee:
6b:2b:b1:53:b1:6a:b3:ed:1e:53:e9:ee:a1:b8:6c:dd:9d:e8:
e0:c1:5e:3d:df:9b:89:b5:62:14:35:64:7a:99:b4:24:6b:21:
42:82:f4:a8:a1:d2:4c:cb:2f:c4:5c:8e:b3:f9:ea:53:f2:3e:
ac:39:bd:82:d1:ef:0a:72:00:99:e0:ae:82:0b:c2:16:85:f1:
aa:8f:5a:60:d9:be:04:86:28:ee:6c:71:3a:33:55:54:7e:18:
60:4a:d5:d8:06:50:d6:a2:a7:07:73:c9:a3:4e:20:56:27:11:
2c:6d:64:89:fe:b0:d6:c7:b5:7f:a5:06:a7:0e:ba:0d:65:0e:
26:78:8e:23:a0:37:cd:79:55:9e:a7:99:cd:d1:d3:b1:db:f3:
e6:44:48:26:e1:81:a8:c8:3f:7d:93:ce:43:6e:51:82:00:c4:
03:83:b2:f8:78:fd:53:1c:21:50:34:f8:16:66:d0:40:ca:7c:
84:e8:6d:f6:d3:6c:50:d4:c2:1d:09:45:f2:5e:14:4b:3f:d3:
9b:83:f1:fc:ba:63:af:7b:42:16:d3:ec:c2:ae:a1:8a:cd:b5:
e6:f6:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:41 2025 by rpki-client