Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B595D2DCC5F811EFB9D9F476762E951A.roa
File: B595D2DCC5F811EFB9D9F476762E951A.roa (raw, json)
Hash identifier: ItK3nJP+h9OrCy+X53JsF5gfqDH0Neb7rfGJb1Ax78I=
Subject key identifier: A3:49:D2:84:0D:BA:23:18:83:45:32:DA:40:10:D0:73:31:E6:72:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B595D2DCC5F811EFB9D9F476762E951A.roa
Signing time: Sun 29 Dec 2024 15:22:26 +0000
ROA not before: Sun 29 Dec 2024 15:22:22 +0000
ROA not after: Sun 12 Dec 2027 15:22:22 +0000
asID: 17561
IP address blocks: 154.213.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77336 (0x12e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:22:22 2024 GMT
Not After : Dec 12 15:22:22 2027 GMT
Subject: CN=67716932-e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:75:63:ea:fc:dc:a7:da:74:7a:18:62:90:
9f:87:77:d5:f3:0f:37:05:3a:1d:46:db:2c:ed:e2:
9d:e1:78:1b:b5:07:cf:62:c8:fb:46:ca:df:d1:af:
d7:48:37:91:e3:ed:6d:b0:0c:4e:a0:3e:ca:5d:6f:
66:b1:2f:61:6c:10:77:56:0e:5f:22:e7:14:24:9a:
59:fc:a7:79:59:b2:8b:a5:c6:e7:c2:14:93:8e:2f:
65:6c:0f:36:e2:97:19:30:8a:78:df:e1:de:55:16:
fe:c3:c0:06:c7:3c:81:d9:d5:44:82:ee:24:45:ec:
2b:94:f5:2b:85:f9:17:70:4d:dc:61:0f:cd:5e:56:
32:3c:29:ac:7a:c9:d3:7e:44:57:8b:b8:28:78:2d:
a4:cc:75:eb:b0:14:61:cd:8f:81:5e:f4:cc:1d:62:
19:d7:88:28:ae:c3:cb:24:82:26:a0:f4:ad:36:19:
24:d6:b9:7a:2b:a6:b5:f1:3b:9e:08:00:25:29:ff:
44:79:4e:3d:ae:fe:72:65:d2:5e:34:37:87:e8:32:
01:de:3b:8b:46:7e:61:2c:1c:6b:d1:85:fa:ab:c3:
e7:9e:1f:55:9d:83:ea:67:c8:a1:ac:25:c7:dd:f7:
83:54:14:5f:bf:c6:dd:5b:18:ec:8a:9c:a5:ef:0e:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:D2:84:0D:BA:23:18:83:45:32:DA:40:10:D0:73:31:E6:72:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B595D2DCC5F811EFB9D9F476762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3c:0d:5a:65:3d:db:6d:76:1a:5f:f1:ed:cf:9a:77:1c:67:
53:df:2a:e5:d9:60:47:aa:1c:2d:fc:24:91:01:e8:c3:db:39:
91:7c:8b:e3:e8:87:51:5a:94:c6:61:65:cb:68:57:c1:35:fb:
12:09:6f:27:ca:dd:94:3c:37:f4:a4:4f:de:7f:bc:e0:f9:44:
8a:21:73:31:57:0f:e4:4f:71:b1:9b:66:57:a3:72:2d:24:d8:
d7:c7:1a:a0:a4:a1:f3:23:4d:eb:33:bc:31:a2:d3:f8:da:4a:
7f:ad:a3:7c:b7:80:aa:a4:c0:f9:cf:84:bf:e9:71:8b:b6:00:
f3:7a:84:d2:8a:60:f5:e7:43:ae:d6:f1:a3:ff:b5:41:bf:62:
e5:88:11:77:ac:1d:b8:b9:08:ef:57:9e:db:40:33:75:77:e8:
71:75:c9:08:2e:08:df:46:14:91:32:3a:7c:2f:33:a8:43:f4:
ff:17:c1:36:da:9b:19:6c:a6:d7:92:6a:55:88:9c:fa:de:d8:
d4:16:80:3a:60:e6:87:4c:ad:34:7a:44:cf:21:36:32:52:f9:
d1:e1:e3:ae:f3:3a:1c:3d:93:b1:a8:fc:e5:52:63:71:c9:4c:
db:f4:dd:07:44:38:84:0a:74:3e:91:86:4a:08:6d:71:32:ca:
7f:cc:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:25 2025 by rpki-client