Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC63D96C0D111EFAE0F7AB3762E951A.roa
File: BEC63D96C0D111EFAE0F7AB3762E951A.roa (raw, json)
Hash identifier: 6J7+SVsiHcsEYZB4h7QvpncDQArR8Eter9CVC+LTJiE=
Subject key identifier: B1:D2:85:38:6E:5D:25:D9:15:24:8A:2F:4C:27:AA:89:71:F6:6F:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC63D96C0D111EFAE0F7AB3762E951A.roa
Signing time: Mon 23 Dec 2024 02:00:55 +0000
ROA not before: Mon 23 Dec 2024 02:00:51 +0000
ROA not after: Fri 10 Dec 2027 02:00:51 +0000
asID: 17561
IP address blocks: 154.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73278 (0x11e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:00:51 2024 GMT
Not After : Dec 10 02:00:51 2027 GMT
Subject: CN=6768c457-a0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:de:cd:7f:ca:eb:1d:cc:94:dc:92:6e:95:
42:05:6b:50:73:d9:f8:84:60:59:8f:23:36:8c:f9:
7e:07:00:f5:d1:ed:0b:5b:1f:74:69:f5:d4:7d:f1:
1c:81:a5:89:af:53:dc:a8:84:7e:83:0f:be:e8:d2:
25:46:b7:ef:95:6a:6e:71:66:b5:74:e5:88:b7:44:
43:31:5f:ff:55:fa:46:57:31:b0:b6:f5:6e:15:4a:
2a:53:a0:b7:f1:3e:11:82:b3:fb:fe:29:fc:33:9a:
9f:86:05:fb:63:3a:6e:00:55:86:a7:b9:d7:50:37:
95:5d:89:29:30:42:b8:41:31:1b:6f:64:05:9c:d6:
2e:88:b2:b9:ef:48:3f:59:20:db:f1:b7:01:9e:bc:
78:74:af:6f:d5:f7:26:c7:37:85:67:03:fb:76:62:
19:f0:a6:54:59:ad:bc:8c:a7:91:01:b8:d1:75:a6:
49:35:8d:3f:8f:f7:68:0d:de:55:f1:1f:ec:2a:07:
db:d5:53:f0:75:fa:41:a8:ee:7e:74:ca:9f:9b:94:
91:52:d7:74:40:04:6a:ac:a1:ce:6c:53:1b:06:c6:
40:c8:30:58:34:03:67:67:f9:3c:d1:65:6e:d7:6e:
b8:b0:c2:15:5c:79:46:26:e6:08:eb:d8:0b:24:e3:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:85:38:6E:5D:25:D9:15:24:8A:2F:4C:27:AA:89:71:F6:6F:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC63D96C0D111EFAE0F7AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fa:a9:39:71:d6:11:36:bd:1e:b6:8c:f0:5d:4c:32:c9:9d:
99:fe:1e:3c:0c:05:f9:7f:41:81:69:94:fd:29:eb:af:e2:4f:
46:79:c5:e8:b4:74:80:a2:ba:1c:1d:20:e6:cc:eb:0e:a1:85:
28:69:88:5d:6e:09:c9:7e:01:2a:95:1c:5c:f7:c5:27:5f:9a:
0c:b4:fd:9e:c1:1a:da:af:ce:c7:ac:2d:de:03:17:3e:fb:ff:
21:2c:e6:a0:c6:5f:54:3b:20:31:8b:7c:41:2e:82:82:93:b4:
f5:f7:fb:8d:2a:a5:bd:be:81:0f:09:9e:f1:aa:ef:35:94:4f:
45:25:a0:11:da:43:a2:df:c4:ed:3b:db:fd:65:03:0c:3e:96:
81:9e:71:49:82:91:14:40:9c:ef:bd:46:41:42:4d:d6:56:89:
fc:7a:ed:1d:30:c0:d2:a5:30:70:26:a6:dd:d4:ec:4d:21:ad:
b2:44:e5:89:a4:14:ff:c4:91:c2:56:2c:fc:d9:4a:90:25:0b:
28:7f:be:c9:59:d5:ef:03:0d:7d:c1:09:8c:b4:f7:5f:9c:77:
04:b8:15:8c:07:39:3b:aa:8c:42:f5:e9:15:4a:99:21:da:84:
c3:9f:12:cf:67:f6:7e:94:e8:22:62:d4:41:db:bb:bc:ef:ab:
26:7f:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client