Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCB9FE64C3D411EF9A37C05D762E951A.roa
File: CCB9FE64C3D411EF9A37C05D762E951A.roa (raw, json)
Hash identifier: 0aqyTOyIYgTuleIsEBKF7aAeRzLi3AkY+aoR/r0Cqu8=
Subject key identifier: C2:28:FD:02:05:F9:28:7D:85:19:C5:57:E5:F1:AC:33:66:23:14:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012866
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCB9FE64C3D411EF9A37C05D762E951A.roa
Signing time: Thu 26 Dec 2024 22:00:21 +0000
ROA not before: Thu 26 Dec 2024 22:00:17 +0000
ROA not after: Sun 12 Dec 2027 22:00:17 +0000
asID: 17561
IP address blocks: 154.83.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75878 (0x12866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:00:17 2024 GMT
Not After : Dec 12 22:00:17 2027 GMT
Subject: CN=676dd1f5-e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:89:f4:7c:d8:26:2a:14:ce:39:ee:e3:b9:
a2:cb:b9:89:15:dd:a6:b7:35:83:90:72:b6:8f:2c:
31:73:0e:d8:9e:81:9c:ac:a8:b4:59:73:3f:50:47:
26:4f:02:b3:f6:63:b4:ec:c6:6d:44:43:46:aa:0b:
12:cc:7a:56:a5:61:a5:5c:ae:c1:40:bb:93:84:e7:
b3:2f:5e:84:65:e4:c8:8a:b6:97:38:66:06:8e:a1:
1a:8e:88:14:ae:dc:50:f5:fc:98:97:0b:37:d9:24:
35:11:33:b0:32:a6:44:8a:28:9f:c1:dd:18:fd:50:
da:04:99:db:ca:12:ae:69:9b:fa:c0:b3:a9:5d:5d:
5f:bc:89:d4:40:dc:1d:ce:d1:5e:1e:33:37:bb:29:
69:f5:62:90:54:c9:c6:e9:69:13:d7:14:99:dd:ab:
fa:f3:da:ea:5e:9e:48:e0:88:f9:65:a9:f3:96:42:
c3:7a:66:1d:9e:f0:b5:10:d1:3a:4e:1f:af:9a:71:
38:d7:1a:6d:19:a8:0f:7a:c1:22:2b:ff:f3:50:a9:
a6:3b:24:ad:bc:3c:76:87:e0:3c:85:0f:a8:44:8e:
92:a0:d8:fa:3c:58:59:5c:c1:d4:61:09:ef:d2:c1:
f1:7a:95:46:0f:c0:ad:89:cd:cf:a1:c7:80:6f:27:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:FD:02:05:F9:28:7D:85:19:C5:57:E5:F1:AC:33:66:23:14:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCB9FE64C3D411EF9A37C05D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c4:bd:36:6a:67:bd:7f:85:8f:23:45:e2:3d:67:bb:6f:b6:
8b:47:57:cb:73:87:bc:f1:76:4d:70:a4:2b:05:6c:d9:c3:6b:
b8:80:fd:0f:57:dc:3a:cb:fb:45:86:ed:f3:c0:3b:92:a2:77:
7e:6c:5b:be:e3:c1:21:1a:03:26:0c:cd:99:53:d4:88:66:38:
cd:3f:78:58:a7:91:69:eb:54:fa:48:e9:a2:80:fc:60:c1:f8:
b2:f3:02:1e:28:18:2e:24:f3:39:be:40:f0:a7:53:73:92:64:
74:7d:09:8f:b3:c6:ce:f2:37:c1:d1:18:0b:f8:5e:85:0d:a4:
f1:47:25:0c:49:d9:8f:8b:2c:7b:e6:f3:22:8c:74:95:f7:2b:
b4:27:46:08:97:29:9f:b2:4c:5d:98:82:d0:52:c8:5b:7d:3b:
d8:c3:c3:c9:f1:80:c3:46:9b:e9:a7:2a:bb:26:3d:9c:b2:67:
68:61:ed:aa:ee:9d:0e:a9:e0:15:44:57:33:8a:ec:1a:44:d1:
71:03:d9:5a:09:8d:cb:1f:4b:f6:fe:7c:f0:1a:55:07:a2:dd:
ea:49:00:ab:65:d1:4a:10:7c:b7:34:9d:fc:60:52:83:44:6b:
44:9e:84:b0:e7:78:eb:7c:68:9d:5a:c8:b7:f3:8c:9a:bd:65:
55:37:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client