Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB033978C60E11EF80E22182762E951A.roa
File: CB033978C60E11EF80E22182762E951A.roa (raw, json)
Hash identifier: abeTQDF3wQqvdryGl0eMmdX0W6CteEB9di3OhbHI3hU=
Subject key identifier: A2:79:1C:7F:CF:B1:54:F6:F9:8E:E1:FE:A2:8B:00:14:6B:5B:E8:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012ED4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB033978C60E11EF80E22182762E951A.roa
Signing time: Sun 29 Dec 2024 18:00:31 +0000
ROA not before: Sun 29 Dec 2024 18:00:27 +0000
ROA not after: Sun 12 Dec 2027 18:00:27 +0000
asID: 17561
IP address blocks: 154.217.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77524 (0x12ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:00:27 2024 GMT
Not After : Dec 12 18:00:27 2027 GMT
Subject: CN=67718e3f-9a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:58:fc:49:7f:70:e3:b1:6a:61:89:2f:f3:
76:55:22:2e:00:47:89:c0:6a:7e:51:b2:b9:b5:06:
df:c8:44:13:9a:b4:a3:59:5b:72:55:d6:a0:bc:6c:
21:02:c4:89:3d:6c:fe:85:ad:80:96:89:c7:2e:56:
8d:87:fb:9a:9b:33:df:51:23:1e:3e:7c:d4:ee:ce:
38:83:c1:1c:d1:eb:a3:bb:47:44:86:2f:dd:61:3c:
30:77:7d:5d:1d:dd:b7:f4:a9:4d:b4:c4:b8:72:0c:
22:cd:2f:42:1f:4b:b3:e8:72:11:16:67:28:00:9e:
c9:ba:7b:12:41:4b:2a:be:80:8c:73:34:84:f8:c4:
bd:b1:e4:c5:d9:48:64:d2:a8:5f:94:2a:cc:69:f3:
8f:a4:df:9d:1d:2e:7e:be:51:4b:46:d8:53:f6:53:
d5:d2:1b:fe:04:f7:5b:58:4f:8c:46:70:e0:0c:f4:
6b:90:30:c0:f7:34:5a:39:77:ae:4e:dc:46:39:0c:
86:a2:70:51:93:eb:df:5d:10:c1:f2:4b:21:e6:fb:
38:48:ef:af:0e:cd:72:57:35:15:f3:99:a3:14:2e:
98:ad:31:5d:9d:ab:1d:2b:d3:06:47:d4:57:9c:ff:
03:2f:44:09:8b:1d:a3:d9:10:33:d5:b0:8f:02:c3:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:1C:7F:CF:B1:54:F6:F9:8E:E1:FE:A2:8B:00:14:6B:5B:E8:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB033978C60E11EF80E22182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6c:55:eb:67:b8:21:fc:31:d3:e7:b8:33:d2:00:56:0e:11:
4d:33:75:a5:bc:42:33:f2:d1:32:c3:1c:34:d8:51:18:7e:b6:
f1:80:59:a1:b0:4b:d8:88:c8:a1:2f:3b:91:3a:fe:c4:b2:b4:
c8:49:80:c7:33:74:fb:66:8c:fa:0b:91:a0:48:8a:f9:8f:f8:
34:0d:28:37:d8:53:8c:55:f7:7c:82:57:0a:3f:c8:11:29:7d:
9f:90:50:01:b5:61:17:af:1b:25:3b:9e:2f:97:c2:40:c3:b6:
5d:7f:0d:3c:43:f3:80:3c:18:1c:e7:cb:41:e1:cd:80:f9:b0:
32:3c:5a:d2:13:91:73:34:fa:f1:4b:f1:ed:f1:d2:27:82:44:
4a:58:fb:5b:46:7e:8e:60:22:a7:dc:c8:9a:68:f3:2b:48:b8:
2d:7f:80:b8:9b:73:c9:4c:5d:c2:62:d1:4d:34:d5:3b:9a:5e:
c6:70:c3:3a:49:22:41:92:0e:9b:42:8d:ae:42:c6:a2:e0:a0:
1c:c2:95:b3:1d:db:6e:57:c6:25:22:33:c3:14:75:af:36:00:
d8:44:40:2f:42:6b:7c:7a:91:1d:7b:d4:00:b5:db:b6:93:ae:
db:ac:85:23:27:77:b1:fe:8a:04:fc:39:ea:87:3c:4b:25:d9:
03:a4:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client