Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD762046C91C11EFBF695972762E951A.roa
File: DD762046C91C11EFBF695972762E951A.roa (raw, json)
Hash identifier: dBDYybUR7W22HUcFiZGg5SVyRn/ngjOCzyVoOqBAQ1Y=
Subject key identifier: B0:ED:BD:B2:98:44:C2:D5:5B:33:7B:E9:D3:18:30:13:2B:69:F6:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013309
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD762046C91C11EFBF695972762E951A.roa
Signing time: Thu 02 Jan 2025 15:18:48 +0000
ROA not before: Thu 02 Jan 2025 15:18:45 +0000
ROA not after: Mon 13 Dec 2027 15:18:45 +0000
asID: 17561
IP address blocks: 154.222.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78601 (0x13309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:18:45 2025 GMT
Not After : Dec 13 15:18:45 2027 GMT
Subject: CN=6776ae58-f919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:28:a7:b2:a6:61:23:53:fc:f5:45:7a:e7:
5d:30:1f:b9:3c:30:71:e6:e8:28:16:99:50:16:8f:
3a:81:27:c5:c1:4b:98:fd:b3:06:58:13:51:eb:ee:
4e:79:71:4b:41:32:47:02:82:1f:82:d9:9f:38:85:
57:2a:3b:a5:6e:8b:29:0e:79:0e:e2:9b:a2:95:c4:
e4:7b:9b:92:e8:0c:99:d6:63:95:2d:f1:87:71:3e:
45:94:e3:fb:f3:ea:87:de:85:f5:fa:26:72:86:0d:
3b:9d:c5:b9:ef:b7:d3:88:d6:e9:a2:88:47:ac:85:
90:46:5b:f0:4e:46:f8:6c:64:e2:58:32:17:38:3f:
b7:16:b1:3e:6c:b0:71:ba:e1:c3:0a:06:2a:17:73:
7c:06:d5:23:80:19:53:36:f2:be:29:08:5c:04:52:
0c:ea:d5:8c:d8:a9:ab:62:4b:bd:de:89:dc:d0:68:
ac:54:6c:05:55:34:a8:c2:8c:ed:94:b1:98:0b:42:
1d:69:da:ae:94:69:50:cd:a1:f5:60:11:ec:25:6e:
b0:b0:94:14:66:2f:67:12:09:c0:8a:ae:ae:0e:5a:
1b:c2:91:ff:39:52:c9:55:0b:7e:c4:24:ff:49:bc:
53:6e:21:0f:93:e5:6b:bf:be:1d:c2:00:99:3c:5b:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:BD:B2:98:44:C2:D5:5B:33:7B:E9:D3:18:30:13:2B:69:F6:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD762046C91C11EFBF695972762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2d:68:a2:a8:81:ce:d6:ea:77:0d:f6:f3:d3:a1:b5:bd:5c:
c6:af:13:e9:a6:7e:62:f1:3e:2c:01:24:e1:59:fe:60:95:99:
f9:25:96:71:9b:54:0d:e2:07:13:8d:a2:42:ba:74:13:ba:ec:
6b:ff:b1:4c:21:74:94:af:60:c6:4f:a5:5a:71:6e:13:90:21:
b9:67:d8:95:75:a1:df:ee:5f:29:c8:7c:97:e7:07:b8:30:6a:
05:5a:91:2d:5e:1f:f1:1b:02:18:6c:c0:6d:71:71:e0:6f:82:
7e:ea:33:af:33:ad:d7:6f:1c:97:3c:a5:e1:2f:90:bf:8f:cc:
07:bb:32:94:6f:06:68:06:8e:94:ff:a2:16:7c:17:e7:c1:4d:
2f:ec:78:97:38:f2:35:d8:bb:f8:8a:71:fa:15:80:c5:3e:1d:
82:d8:11:03:fc:a5:0c:b6:95:68:b3:28:23:4e:4d:6b:83:eb:
fe:7a:8e:21:de:7d:ae:04:fa:c9:cc:87:55:85:e4:58:44:7e:
9c:17:d1:6f:1f:0e:ac:78:33:31:3c:dc:5f:25:76:48:2c:79:
d9:32:1b:37:a5:b7:44:2c:2e:b1:a3:bb:3d:16:16:26:88:e7:
62:71:12:48:e5:ad:24:5e:53:fd:14:48:71:75:2a:b2:0c:50:
6a:f4:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:45 2025 by rpki-client