Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE91994C34E11EF9BDE4392762E951A.roa
File: DDE91994C34E11EF9BDE4392762E951A.roa (raw, json)
Hash identifier: q1ckpnfbmizCKoFkWjsPaPuUzJZbyaJfMn2Y0CfKnCM=
Subject key identifier: E2:A0:83:29:6B:C2:3D:FC:D3:00:5A:3B:F5:16:E7:44:01:7B:53:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012591
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE91994C34E11EF9BDE4392762E951A.roa
Signing time: Thu 26 Dec 2024 06:01:37 +0000
ROA not before: Thu 26 Dec 2024 06:01:33 +0000
ROA not after: Sun 12 Dec 2027 06:01:33 +0000
asID: 17561
IP address blocks: 154.95.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75153 (0x12591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:01:33 2024 GMT
Not After : Dec 12 06:01:33 2027 GMT
Subject: CN=676cf141-e56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:d5:75:70:75:cd:21:46:53:82:08:7a:1a:
6a:7e:ef:1f:a1:bf:5a:a9:f6:d0:c9:9c:8b:ef:98:
8e:66:8e:15:bd:7e:df:20:b1:e4:15:b9:bd:5b:cb:
74:78:7d:e5:ba:4c:73:1f:04:7f:5b:50:22:f7:ec:
5c:ec:48:5a:4f:e5:05:97:70:2d:37:57:b6:89:80:
7e:8a:16:dc:33:f5:d0:a1:c4:00:0c:be:8b:22:aa:
58:d6:bd:9f:38:5f:95:b3:2a:ea:5d:25:54:c4:79:
6a:1c:83:55:22:ef:da:66:b9:81:7a:e3:93:74:50:
bc:13:ef:94:e4:02:ec:09:5d:fb:a8:a8:a7:9c:07:
a4:c9:d3:0a:85:d1:4c:25:c3:69:35:c9:55:54:35:
b5:32:ef:b3:2d:89:f8:25:d4:25:10:e6:04:9b:38:
2b:0f:31:4a:d7:97:21:93:cc:c6:16:08:41:0a:01:
0d:0b:52:21:e2:aa:fd:63:2c:0c:8f:76:3d:44:37:
17:4e:cc:be:56:ce:ac:75:ac:09:6a:7a:1a:53:8d:
c0:f9:44:38:3d:66:c4:39:01:23:80:fb:a8:c9:80:
6f:50:09:a4:3e:a4:84:32:24:c7:6a:6a:86:5c:e8:
c5:a9:60:58:b1:ed:9b:8f:27:4c:93:55:3f:8e:81:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:83:29:6B:C2:3D:FC:D3:00:5A:3B:F5:16:E7:44:01:7B:53:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDE91994C34E11EF9BDE4392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:87:10:00:dd:cb:76:a4:af:16:e0:91:ba:55:93:d9:6a:13:
f8:4f:63:7c:d6:94:5d:37:13:f5:fc:db:d4:87:ef:17:11:58:
8d:38:4b:cd:e5:16:ce:b3:c2:20:44:17:67:4a:ea:cf:c5:28:
cd:cc:c9:9b:68:59:f2:ec:ff:80:4e:0c:74:c1:fc:d3:d3:e9:
87:3b:be:c1:69:d2:37:ca:af:22:2a:fc:31:c8:89:6d:35:cb:
81:fd:50:ca:3b:21:a2:02:57:b0:2d:27:52:0d:18:9d:61:82:
ac:6f:f8:ef:5b:39:3d:bd:ba:7f:39:af:d3:91:9d:46:d1:bb:
55:c2:b0:e0:48:e4:1c:7e:46:e4:95:e7:a6:ad:d3:16:ca:c2:
ab:a5:36:26:3b:40:25:a2:28:5c:1a:9c:b2:ff:6a:e5:32:c7:
15:63:0c:f4:23:23:b3:45:2d:2b:41:68:01:0f:c3:d0:d9:c1:
1e:5f:fd:23:f9:2d:62:7b:a3:32:14:58:f9:1e:6d:31:92:f5:
c6:61:3b:80:e3:de:5f:fc:c8:d9:db:c3:66:bd:53:e2:a3:9e:
33:0e:b3:d9:7b:e6:d2:d6:fb:ed:3c:91:d1:81:68:b7:e3:a3:
20:5c:e2:c5:d6:38:ab:5e:33:74:d5:1e:00:7f:ee:25:b9:0e:
1d:7f:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:15 2025 by rpki-client