Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77FFB3EBEDD11EFB948E16C762E951A.roa
File: C77FFB3EBEDD11EFB948E16C762E951A.roa (raw, json)
Hash identifier: vBhztvBxXUxhoUfkowea1uJvB8Cldp4EeIPAOe0mV8w=
Subject key identifier: C3:78:86:36:B8:EB:55:FA:2A:B6:3B:A8:67:D6:31:15:CE:74:F0:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77FFB3EBEDD11EFB948E16C762E951A.roa
Signing time: Fri 20 Dec 2024 14:22:02 +0000
ROA not before: Fri 20 Dec 2024 14:21:58 +0000
ROA not after: Wed 25 Jun 2025 14:21:58 +0000
asID: 395886
IP address blocks: 154.84.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73024 (0x11d40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:21:58 2024 GMT
Not After : Jun 25 14:21:58 2025 GMT
Subject: CN=67657d89-c37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:93:17:f4:c9:c2:2e:f6:f6:32:a8:ff:5d:
89:77:b9:89:76:d1:49:48:d5:ba:aa:95:ae:8f:eb:
5f:6b:2e:98:e5:4e:61:f3:0f:f1:9a:8e:5a:bf:cd:
d8:13:87:a4:9e:af:ec:19:47:c2:fc:e3:92:08:1b:
3c:38:89:09:8e:2a:c9:35:c4:85:86:b7:0f:ff:57:
ec:51:ec:c7:82:06:0c:18:7c:98:a9:22:ea:a0:42:
8a:bf:4e:02:40:ee:ea:d5:25:ba:4f:36:f1:d3:05:
9b:1f:cf:08:8b:08:52:29:06:19:59:3d:b0:0c:45:
85:67:e5:08:4f:bc:37:46:f8:37:08:a6:45:4f:01:
39:db:37:ff:c2:95:ee:66:04:56:df:45:27:9a:7a:
ee:03:84:fc:ca:07:d3:d7:47:f4:0b:03:ec:b1:8b:
38:71:4d:a8:cc:67:c3:98:64:0e:0a:55:8a:34:a9:
4a:63:24:95:5c:07:0a:a6:24:78:be:4a:3d:6b:05:
f4:c1:de:24:79:91:31:69:ca:67:fa:6e:56:76:c1:
e1:5d:b9:1f:b4:73:ae:bc:f1:36:de:3c:43:20:82:
eb:dd:03:e6:6b:2d:b8:9c:8b:c7:f9:11:a7:1f:90:
d5:33:6d:16:1f:ef:f6:9c:d5:dc:04:50:42:2c:72:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:86:36:B8:EB:55:FA:2A:B6:3B:A8:67:D6:31:15:CE:74:F0:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C77FFB3EBEDD11EFB948E16C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.40.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:31:72:98:98:da:0e:a1:01:37:8e:e7:fb:ab:58:50:8f:2e:
ea:44:63:0f:63:fd:09:a7:2d:81:5d:e4:94:4d:01:74:73:5b:
98:f2:7d:fb:db:e2:df:9c:24:41:95:e9:4a:95:d2:eb:22:de:
67:e6:44:a1:10:31:3c:de:99:60:4e:19:98:12:8b:2b:0f:9c:
db:d4:7a:55:95:2c:00:02:54:2f:14:7f:61:28:6a:04:76:2e:
db:1d:74:11:22:5f:2e:38:91:8e:d9:5a:59:6b:fb:89:94:d1:
57:cb:b5:25:6f:ce:dc:8b:c7:4d:6e:1e:d1:94:10:96:32:0a:
3c:76:a1:7b:0b:a4:75:11:8f:16:20:c5:6e:63:5d:2b:f8:19:
2c:93:e9:5d:c7:51:35:3d:e7:83:53:57:27:a9:95:75:04:04:
0f:18:15:61:42:ed:bc:eb:17:6f:d2:5a:9f:0d:6e:34:b2:4b:
f8:bc:85:09:e6:46:6c:fe:22:c2:5e:f8:d3:43:fd:51:f6:05:
66:8d:77:a3:4e:09:1c:c2:1c:80:6c:5d:5f:f4:cb:e7:39:0e:
81:48:86:e9:28:a7:9f:f7:f3:5a:e1:63:f8:c4:53:65:68:86:
27:5c:4c:ac:63:84:7c:2c:65:b4:7a:45:09:ca:b2:5e:76:1b:
de:88:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:23 2025 by rpki-client