Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C666C420C3C511EFB161F97C762E951A.roa
File: C666C420C3C511EFB161F97C762E951A.roa (raw, json)
Hash identifier: MXyaHbBbTiF0VNszrFJgqWgwctyc+I9W0KVQV+qLXh0=
Subject key identifier: A9:A8:DF:3F:45:8D:6F:6E:3F:8C:9D:82:48:EE:58:96:37:CB:A6:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C666C420C3C511EFB161F97C762E951A.roa
Signing time: Thu 26 Dec 2024 20:12:48 +0000
ROA not before: Thu 26 Dec 2024 20:12:44 +0000
ROA not after: Sun 12 Dec 2027 20:12:44 +0000
asID: 17561
IP address blocks: 154.83.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75726 (0x127ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:12:44 2024 GMT
Not After : Dec 12 20:12:44 2027 GMT
Subject: CN=676db8c0-ab2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:8e:56:54:d7:33:b9:e8:be:88:24:2c:fc:
7a:53:0a:13:2f:cd:e9:63:b7:b4:27:78:c7:81:c4:
56:11:88:05:bb:e5:8c:8e:3b:02:79:58:1f:e3:6e:
db:93:35:8f:06:2c:2d:d8:cf:51:f4:f9:26:ca:63:
35:cc:66:81:ce:b8:c5:4c:ee:ab:fd:43:0f:13:4e:
c1:1b:42:68:96:ca:80:2b:68:fa:af:86:7f:10:6b:
8c:7f:c0:a3:50:b7:b4:63:dd:ae:34:19:45:09:e3:
f5:b7:3b:48:00:6c:bd:d6:a6:fc:35:76:3d:6f:fa:
15:15:dd:41:29:aa:29:45:f9:a3:0b:6d:72:43:3a:
0f:f5:8b:fb:ae:96:76:af:4c:aa:c8:80:60:0a:a0:
ed:ad:69:b9:6b:27:41:74:b3:23:0f:96:ef:c2:12:
d6:04:cd:ad:16:0d:c6:7c:2c:99:5c:b4:23:01:1f:
8a:04:41:3f:d5:1d:f6:21:78:be:f3:b0:59:27:c5:
2a:f5:51:a5:f0:6d:d4:d6:6c:e0:33:5b:c1:da:2c:
95:95:d2:1d:3e:1c:c7:4a:c7:30:a8:5d:87:48:ab:
fc:01:03:5b:2e:ac:72:a4:30:4d:c1:05:14:9c:66:
1b:af:63:84:ab:7b:eb:51:90:cf:34:d3:78:35:48:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A8:DF:3F:45:8D:6F:6E:3F:8C:9D:82:48:EE:58:96:37:CB:A6:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C666C420C3C511EFB161F97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.40.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d6:e7:e5:58:9b:d9:50:5d:0b:89:e7:79:39:08:cb:47:42:
1b:65:20:75:63:96:5c:7e:18:32:ea:ae:92:3e:20:a5:2d:39:
b5:9a:a6:54:1a:7a:04:96:97:cc:5f:79:f2:a4:11:10:b3:7b:
52:2e:4a:6f:98:96:ab:9a:32:19:81:91:22:05:89:ef:64:bf:
04:14:0c:81:18:b9:b3:50:2a:b9:60:83:d8:6e:44:f1:2d:bc:
75:d2:9f:86:6d:92:25:06:22:e1:9a:0e:eb:38:0b:70:38:7d:
97:9a:21:64:2f:f0:96:1b:e2:e0:2e:4f:59:b4:1e:c1:69:f4:
73:60:fd:e0:bf:9b:9f:47:ed:c8:f7:d6:e2:39:11:85:c0:6f:
c8:04:a5:92:e3:cc:c7:c0:f7:84:13:2e:8d:aa:76:fd:64:9a:
ea:b2:f5:d3:08:5f:ab:f5:0e:ee:ed:64:77:00:d0:1e:1a:35:
df:b2:b8:8b:cd:44:4b:78:b9:15:73:8b:3a:15:24:96:a4:d7:
c3:16:cd:9b:9b:4f:a6:74:88:66:4d:bf:7f:5f:78:33:09:61:
86:84:24:a6:b9:95:90:aa:4b:07:f8:16:35:cf:fd:b1:33:13:
df:26:ec:7a:65:94:5a:56:ea:6e:3e:df:91:a0:70:18:26:08:
64:e1:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:55:01 2025 by rpki-client