Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB0DD998C42211EF9C7DEC5D762E951A.roa
File: CB0DD998C42211EF9C7DEC5D762E951A.roa (raw, json)
Hash identifier: gJXwaG7QRz2kxBl0BO6xN/dphoQlUVTM0Zu2FOFfJsE=
Subject key identifier: 7D:38:08:24:D2:BC:B8:13:F6:3D:E5:41:C5:61:22:58:F7:77:11:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB0DD998C42211EF9C7DEC5D762E951A.roa
Signing time: Fri 27 Dec 2024 07:18:39 +0000
ROA not before: Fri 27 Dec 2024 07:18:35 +0000
ROA not after: Sun 12 Dec 2027 07:18:35 +0000
asID: 17561
IP address blocks: 154.202.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76245 (0x129d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:18:35 2024 GMT
Not After : Dec 12 07:18:35 2027 GMT
Subject: CN=676e54cf-c562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:bf:2f:18:a1:c1:e8:05:99:f2:b9:b0:eb:
b5:00:6c:ec:14:93:4e:ef:b2:6d:74:09:50:a6:72:
22:4a:8f:88:54:ce:e7:c2:a6:c5:82:66:3a:68:13:
12:38:97:4d:82:36:1a:59:1f:01:76:af:5a:17:b8:
53:33:46:d4:28:49:98:ed:05:d3:ac:12:fa:d3:b2:
1c:f8:5f:77:c5:8c:34:1e:a3:22:00:04:9d:af:40:
a9:55:53:43:56:8b:81:15:ba:dd:9a:64:f6:31:3d:
77:50:1c:0c:43:9e:47:52:50:9d:ef:8a:79:c5:f9:
a0:33:a9:4c:ef:3a:58:9a:35:26:00:89:b9:bd:18:
42:59:6e:08:95:a3:a4:23:a5:bf:66:be:80:20:0e:
a4:49:40:98:9b:a0:48:c2:a2:12:a1:12:e6:8a:70:
ed:69:c5:50:df:2b:45:ef:dc:8f:2c:e6:bd:81:62:
58:b2:67:da:88:2f:49:d3:17:db:1c:11:d8:81:b7:
62:d5:82:ab:e5:b3:d8:c1:33:b5:50:71:00:df:6a:
c0:08:0c:3a:94:e8:a9:51:9e:d8:80:9e:78:88:0d:
63:ad:87:dc:54:16:0b:7c:59:19:9e:c3:06:a9:a0:
fb:73:dd:ef:c6:5b:cf:2a:32:99:6f:dc:03:08:a2:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:08:24:D2:BC:B8:13:F6:3D:E5:41:C5:61:22:58:F7:77:11:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB0DD998C42211EF9C7DEC5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ff:35:47:eb:fe:6f:ff:70:6d:e9:89:a5:f8:f5:8d:c0:ed:
d6:e7:46:4c:a0:81:59:1f:d5:d4:6b:f8:54:c2:e3:9f:d9:66:
64:16:d4:dd:a0:7c:7f:81:00:f4:00:82:12:91:27:9a:13:50:
63:9d:f4:b4:a0:c1:47:e4:39:c2:d2:c6:50:7c:f7:46:cf:3d:
81:ac:cf:8a:0d:51:ec:c2:7f:d2:fc:ac:e1:af:f1:1c:19:85:
e4:2b:d1:d5:06:fa:ba:b9:a2:82:09:16:ed:aa:ee:6b:7b:69:
7e:2a:03:c1:c7:7d:57:a0:ee:23:a5:a7:a9:2b:15:e8:d5:ec:
1a:c1:a1:32:4e:ba:7c:9e:a1:20:04:21:d4:6e:cc:df:f1:12:
6e:cf:4b:7b:d3:85:5b:0b:8b:78:1b:90:c0:b2:63:f8:4b:0e:
ec:f2:dc:de:4d:4e:b1:ac:6a:5c:84:f7:49:29:9f:4b:28:27:
66:5f:b9:32:88:5d:2c:97:bb:38:21:7a:31:9a:f7:fb:4b:30:
b8:04:a7:92:e8:2e:5d:64:05:04:c6:61:d8:f1:51:18:7d:8e:
79:7d:52:f2:bf:95:be:4d:7a:26:bb:0a:05:3e:f9:ba:66:54:
e4:17:c6:91:c7:ef:54:c7:4c:0a:ec:38:61:98:23:ae:7d:58:
a8:96:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:47:03 2025 by rpki-client