Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4607DEC62511EF90E45492762E951A.roa
File: CE4607DEC62511EF90E45492762E951A.roa (raw, json)
Hash identifier: rZlenxmXmJcYQ22dznfDK5TroOiBkVvHAeRaQRnz4Xc=
Subject key identifier: 7B:EE:46:0D:02:73:F3:2E:E2:4C:A1:43:7A:9D:A7:F7:2C:2B:9C:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4607DEC62511EF90E45492762E951A.roa
Signing time: Sun 29 Dec 2024 20:45:15 +0000
ROA not before: Sun 29 Dec 2024 20:45:11 +0000
ROA not after: Sun 12 Dec 2027 20:45:11 +0000
asID: 17561
IP address blocks: 154.217.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77716 (0x12f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:45:11 2024 GMT
Not After : Dec 12 20:45:11 2027 GMT
Subject: CN=6771b4db-22e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:6d:c9:d2:43:bb:42:5b:14:4b:c2:b0:9c:
65:07:3a:e6:71:fc:33:df:b1:f5:91:30:c9:5f:38:
f8:e0:39:5a:9d:64:03:2c:ce:96:d7:ab:92:79:86:
70:93:cd:75:49:5a:f6:ea:37:42:39:1b:56:1e:4e:
55:da:18:8e:ba:e2:4c:c3:53:14:2b:b4:29:f1:30:
1e:85:12:22:ea:3c:7c:91:bd:6f:c5:1c:90:be:7c:
61:90:0f:d3:2e:3a:f7:b6:0b:e9:87:f0:14:5f:75:
57:5d:5b:24:de:fd:92:b1:0f:d5:2b:34:49:44:d9:
8a:6c:ee:5d:7d:64:0c:4e:e9:25:84:cf:38:a8:15:
7e:18:24:b4:fb:f9:25:ed:3c:fb:b0:9d:77:67:e1:
b3:63:04:e6:78:8d:4a:85:d0:d5:54:f8:f9:e4:08:
3e:bb:47:51:fd:0f:a3:13:aa:ff:16:bc:79:ef:6f:
7c:39:03:28:f4:2c:16:2d:0d:9e:2e:90:f2:d0:30:
93:86:5c:76:e6:a8:8e:bd:87:8d:76:0f:0d:cb:cc:
44:09:d1:9c:79:f1:db:cf:82:a5:7f:44:21:5c:79:
4c:04:d7:8f:d3:b8:5b:13:55:f7:17:db:b7:96:ba:
68:a3:ec:6b:1a:a1:82:7f:b2:40:29:41:f9:95:07:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:46:0D:02:73:F3:2E:E2:4C:A1:43:7A:9D:A7:F7:2C:2B:9C:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4607DEC62511EF90E45492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.173.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9d:ce:2c:3c:74:b8:87:c2:b5:0d:e1:fc:26:b0:8c:97:45:
77:0b:a0:c2:c7:5e:8d:c7:d0:fd:13:a4:4b:ec:98:98:8e:38:
fb:48:be:3f:2a:ba:d1:a8:60:6e:7d:ee:cd:67:ab:15:59:58:
d5:8f:fc:e3:8f:dc:dc:78:20:76:e4:13:e8:b2:40:8c:89:d8:
13:52:80:2f:00:83:d5:be:d4:88:d1:82:31:05:e4:54:cb:bd:
4c:c6:f4:94:38:1a:73:87:2c:0c:79:15:02:61:0d:ff:95:3d:
4f:ae:b4:57:d2:c2:ad:c0:47:33:f1:ff:b6:c2:58:3f:fe:96:
5a:ff:1c:39:40:8f:28:2d:5c:f3:a1:2d:1a:c2:cf:42:cf:13:
dd:d7:9f:f9:9e:e6:ff:bf:5b:6a:65:c4:08:19:b1:91:5f:c3:
9a:4b:8d:ca:f5:88:1e:9b:da:b4:59:40:3f:f9:46:d1:ca:d0:
d0:57:45:0b:7b:9b:71:dc:5c:09:97:e0:bd:13:0e:91:28:71:
e6:6f:5a:3a:c3:42:bd:23:f3:80:8d:63:2e:1e:51:cb:bd:e9:
b4:0e:8f:a8:7a:3f:f1:df:9e:18:d8:fb:19:ea:b8:bd:f8:b5:
0e:07:98:e1:bc:f0:ce:7b:fd:77:ee:f2:11:20:be:4e:18:b8:
1e:33:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:54 2025 by rpki-client