Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45BEE98C3CE11EF8F6383B7762E951A.roa
File: E45BEE98C3CE11EF8F6383B7762E951A.roa (raw, json)
Hash identifier: eHyneAKDbI5cbfl3B4HyfEqU6wX346GyZpWEj6AgG+c=
Subject key identifier: 56:37:4C:DF:50:B8:33:4A:28:CA:C3:4F:89:A4:6E:00:A6:7F:15:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01282A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45BEE98C3CE11EF8F6383B7762E951A.roa
Signing time: Thu 26 Dec 2024 21:18:03 +0000
ROA not before: Thu 26 Dec 2024 21:18:00 +0000
ROA not after: Sun 12 Dec 2027 21:18:00 +0000
asID: 17561
IP address blocks: 154.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75818 (0x1282a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:18:00 2024 GMT
Not After : Dec 12 21:18:00 2027 GMT
Subject: CN=676dc80b-fc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:31:dd:34:36:72:18:d8:9f:71:78:8c:72:
00:8b:8a:ac:d5:87:f9:6e:d5:36:f5:64:1f:9b:22:
ba:e8:b1:b9:8b:7d:3e:fe:28:72:78:12:d3:8b:12:
eb:17:d4:7f:c1:0a:38:bf:77:b2:0d:6c:01:b5:f0:
13:a0:12:7b:29:72:47:1e:c9:4d:5c:de:56:a3:d5:
21:e3:55:64:03:86:b3:32:35:3f:8e:47:70:6a:71:
44:95:3f:52:8e:00:84:98:72:f7:f4:3b:4d:ec:22:
aa:03:b5:00:90:6b:9d:23:c0:13:a7:32:f3:5c:e3:
ae:ec:98:e9:5d:86:80:63:05:57:11:6b:53:c0:91:
68:59:de:fa:c8:56:2e:39:8e:34:60:a6:99:9e:d8:
d1:98:90:43:eb:29:87:8a:f0:ab:09:40:58:9f:97:
2e:3f:6d:ad:33:f1:b2:c5:7f:c0:7b:41:4a:b0:ff:
2c:47:17:51:9e:e4:20:9d:ee:d5:62:d0:e6:8a:a2:
35:fc:03:4e:e4:73:f2:2c:60:68:c4:3e:63:fa:57:
40:80:65:8d:07:1e:70:62:38:2b:1a:45:d4:d0:ba:
58:ac:53:7e:1b:9c:0d:d6:07:40:fc:3c:c6:92:0a:
e6:aa:f9:0b:69:66:9a:10:c6:ce:84:83:ed:98:19:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:4C:DF:50:B8:33:4A:28:CA:C3:4F:89:A4:6E:00:A6:7F:15:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45BEE98C3CE11EF8F6383B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e2:d5:57:d6:69:8d:8c:4d:ea:e0:29:13:a0:59:6d:2c:1a:
bf:31:08:1b:1a:d5:36:80:ef:7c:7f:dc:d7:95:30:17:66:e6:
4d:12:f7:ba:ab:35:3b:a7:b3:fd:1f:50:25:91:a1:7b:98:5b:
a2:75:c5:c4:f3:06:b5:13:a8:1a:4f:6b:4c:7a:42:40:f3:f8:
e8:df:18:82:f6:74:70:ce:39:7d:0b:e9:88:4e:e2:d8:ba:c8:
bc:78:2c:79:ad:de:cb:de:19:17:01:6c:88:d1:f6:1d:28:14:
77:79:b4:80:9b:be:d8:20:f3:48:f2:8e:ad:15:ab:e8:a9:ee:
d5:2b:a7:ba:e1:99:ea:4f:1b:f0:89:6b:53:ca:82:cb:94:f7:
ae:d9:c0:41:52:6f:8c:34:23:ec:6b:77:2c:75:b9:66:e6:2f:
2e:f6:82:a5:94:6a:eb:1c:5d:a8:b1:2b:0d:60:ca:00:a9:1e:
7f:3a:f1:28:99:67:87:b4:5f:b5:e2:2c:2f:34:97:7e:86:e8:
2b:96:fe:0a:da:fe:00:5e:55:27:78:24:e8:bb:37:db:6a:86:
19:19:30:21:3f:6b:47:01:13:af:10:71:1c:05:c3:12:9e:8c:
05:bb:54:cf:a7:76:d7:01:8b:b3:57:0e:75:6c:bc:58:05:fc:
66:06:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:01:39 2025 by rpki-client