Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB75C496C5EC11EFBBE733AE762E951A.roa
File: DB75C496C5EC11EFBBE733AE762E951A.roa (raw, json)
Hash identifier: nLmhoTHCAmLxXDl0NpB5DvX9uKJQw8kXFW4dcJ6h35U=
Subject key identifier: 97:E2:1A:B5:21:DA:25:88:CD:D8:7D:54:11:49:72:9D:52:C6:0B:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB75C496C5EC11EFBBE733AE762E951A.roa
Signing time: Sun 29 Dec 2024 13:57:36 +0000
ROA not before: Sun 29 Dec 2024 13:57:32 +0000
ROA not after: Sun 12 Dec 2027 13:57:32 +0000
asID: 17561
IP address blocks: 154.211.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77236 (0x12db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:57:32 2024 GMT
Not After : Dec 12 13:57:32 2027 GMT
Subject: CN=67715550-7b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:2d:d7:4f:c1:8d:cc:63:d6:0e:53:4d:08:
f4:6c:57:e4:11:2e:c6:8d:92:39:54:99:54:ab:54:
d1:cb:c6:ff:0a:c0:58:08:8d:a3:2f:be:41:e4:34:
3b:4e:f6:bc:5c:63:73:9e:c7:45:a5:04:9c:bc:fc:
4a:ea:f3:93:ba:4f:84:2f:f0:ec:75:a3:bb:fe:2d:
21:ef:00:88:94:1c:f9:1b:6f:6d:dd:fa:80:ff:6f:
b7:30:fb:0c:92:ef:68:f1:6f:fe:18:4a:67:7a:ad:
f4:50:31:59:9e:61:16:e7:67:93:78:79:46:d1:cd:
3b:23:d1:40:44:2f:49:34:04:11:4b:56:b0:b3:5a:
4f:69:cc:07:fa:54:80:6c:d1:fd:b5:5b:05:d3:cf:
70:3d:77:e6:3f:21:5f:d2:62:00:60:1d:60:ab:e4:
56:d5:58:fc:cb:7b:77:bc:14:c5:8c:dc:2e:60:7a:
37:6f:df:65:dc:c0:8f:a8:a2:0b:c1:46:43:ae:82:
b1:d7:b6:e8:d8:2e:74:d5:da:6b:13:ba:7c:89:50:
81:e6:f0:f1:9f:35:b1:52:8e:4f:90:36:3b:99:08:
34:35:d7:23:f2:28:09:2d:0b:d1:c4:88:aa:c3:88:
59:2c:ef:e8:78:98:0d:f0:34:78:6d:e1:6f:bf:ff:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E2:1A:B5:21:DA:25:88:CD:D8:7D:54:11:49:72:9D:52:C6:0B:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB75C496C5EC11EFBBE733AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:15:53:1b:3e:9c:89:5f:f1:dc:75:17:1f:78:63:73:47:9a:
ec:ae:1c:ce:94:30:af:48:65:f1:42:38:03:cb:ad:de:84:ab:
7e:6e:ba:22:cf:eb:ea:b0:27:45:6d:e1:b3:76:42:15:3f:56:
e5:1c:af:36:89:a3:e7:89:2c:03:dc:ae:58:ad:26:83:36:1b:
8f:cd:44:0d:ed:4f:c0:5c:a4:13:ec:8b:ec:9a:46:4c:8b:71:
3e:e8:02:a2:73:f8:98:bf:81:cf:8a:13:a1:d7:73:07:5a:94:
cb:c6:d7:15:5e:6a:47:1f:5b:5d:9c:ac:35:5a:58:96:db:44:
69:67:e9:6c:0c:c4:e5:42:29:68:60:5d:94:23:9a:5c:e5:e8:
7c:42:28:f2:44:5d:c7:d0:5b:3b:79:39:eb:e0:26:ce:8b:41:
7d:27:30:f1:70:17:72:f9:b6:d9:52:d7:02:5e:ab:7a:b7:30:
7b:2f:05:00:0e:0c:09:2f:47:0e:0e:8b:a1:0d:29:44:72:0f:
ec:a3:d4:7f:5a:d0:b4:6d:e9:a0:88:f5:16:f5:01:73:4b:08:
b6:e7:8e:86:b9:9b:1d:87:4b:11:14:e8:9f:28:33:e3:0a:cd:
ee:70:b5:23:85:e7:76:0b:23:77:2f:41:7e:e8:32:ea:00:4d:
a9:a2:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:20 2025 by rpki-client