Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE4EC1EC60711EFA8FE7B57762E951A.roa
File: CEE4EC1EC60711EFA8FE7B57762E951A.roa (raw, json)
Hash identifier: RxV6e/tD6NiurXWt0HYiTGmkjLC1tlW+MPQGID3bHc0=
Subject key identifier: F5:9B:CC:07:5A:C8:C2:84:90:B0:90:58:11:5E:B7:04:43:C7:BE:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE4EC1EC60711EFA8FE7B57762E951A.roa
Signing time: Sun 29 Dec 2024 17:10:31 +0000
ROA not before: Sun 29 Dec 2024 17:10:27 +0000
ROA not after: Sun 12 Dec 2027 17:10:27 +0000
asID: 17561
IP address blocks: 154.217.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77464 (0x12e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:10:27 2024 GMT
Not After : Dec 12 17:10:27 2027 GMT
Subject: CN=67718287-daa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:da:2a:dc:26:8a:eb:b4:eb:82:0c:92:f7:
4b:5d:67:0a:0f:44:ab:f1:37:33:1e:fb:6b:48:93:
b7:c5:4b:22:60:e8:b6:f5:13:f5:ac:6d:4b:07:e9:
68:f9:a0:23:fa:e8:e7:4c:87:bc:1d:14:e8:d5:c2:
be:28:ec:4f:73:da:22:ac:f1:1d:7a:49:bf:25:7c:
13:fc:a2:c0:7d:1f:99:e7:3c:f8:5a:13:1e:bb:70:
10:82:bf:5c:ec:3a:56:54:10:a8:5c:61:eb:66:2e:
39:23:08:26:1f:37:ac:4b:01:e9:c7:52:8b:43:ea:
ef:42:50:07:6b:bc:47:3e:5c:a7:b6:89:f3:d5:92:
d7:32:36:39:60:fd:20:e6:ef:d9:ea:6e:d3:d7:12:
93:e2:90:44:88:16:bf:9f:04:5d:8d:2c:ec:b4:29:
fe:32:f8:51:32:46:cf:de:7b:ba:30:77:88:21:ad:
f2:99:af:d3:e7:de:48:f3:39:13:cc:f1:0f:c8:35:
fe:72:ba:98:74:56:73:c1:36:a3:4d:cb:a0:61:cf:
d5:3f:05:94:13:17:7f:6f:05:4d:6f:48:2c:0b:81:
49:8a:51:7d:87:d1:33:a1:fa:af:a4:f9:47:3f:4e:
88:65:eb:51:68:24:84:1f:d6:f6:1f:d9:0e:8b:6b:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:CC:07:5A:C8:C2:84:90:B0:90:58:11:5E:B7:04:43:C7:BE:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE4EC1EC60711EFA8FE7B57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6e:3e:35:f3:18:da:13:f5:86:b9:14:8f:48:6e:b9:dd:55:
ee:51:94:8a:a9:69:5f:bf:c8:90:a2:2a:1e:c7:92:da:db:f9:
59:bb:8a:ec:db:6f:c1:18:dd:9b:29:8c:12:3a:ae:86:76:b9:
1f:e9:ae:a8:d4:dd:61:7c:cc:73:e5:e0:06:e1:83:ad:b1:5b:
1b:55:70:88:69:02:74:b0:79:8c:bc:e2:2b:f8:12:9d:d2:e1:
4c:6c:f1:a8:91:9a:1e:3d:13:77:59:36:a9:b0:50:12:ea:fd:
3f:8f:9d:cf:f5:84:10:e0:c2:6d:a4:c5:b9:7d:01:06:3c:52:
a1:d8:6e:dc:50:c3:33:ad:1d:ee:78:a6:5e:e3:44:f3:7b:6d:
a3:f9:b9:6e:27:b6:ac:0d:e4:ec:44:02:21:b9:5e:27:83:6b:
70:c7:35:97:e2:55:75:d1:1c:6c:26:28:d4:2a:6d:b5:04:6f:
b1:44:8f:7e:2e:03:a8:e5:e0:a1:f7:02:42:16:04:e8:5e:8e:
37:df:8e:cb:0b:e6:f1:bf:88:b7:99:dd:3d:49:30:50:d4:91:
03:dc:f7:f3:df:04:91:53:a2:ce:80:b9:7b:7b:90:ff:8f:0b:
65:f4:53:61:ab:d8:ee:71:fc:c3:88:6b:ff:59:06:0d:6d:b6:
8f:93:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:52 2025 by rpki-client