Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB44F144C37B11EFB6C1CCAD762E951A.roa
File: EB44F144C37B11EFB6C1CCAD762E951A.roa (raw, json)
Hash identifier: ybYfOfrMqhQ+8+2lIgNm9LgB9um/AiMuXudpRSGwYyU=
Subject key identifier: C5:98:5F:7E:45:A1:63:0E:B7:6D:E6:70:5D:57:A0:D4:E1:F8:44:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01272A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB44F144C37B11EFB6C1CCAD762E951A.roa
Signing time: Thu 26 Dec 2024 11:24:07 +0000
ROA not before: Thu 26 Dec 2024 11:24:03 +0000
ROA not after: Sun 12 Dec 2027 11:24:03 +0000
asID: 17561
IP address blocks: 154.94.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75562 (0x1272a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:24:03 2024 GMT
Not After : Dec 12 11:24:03 2027 GMT
Subject: CN=676d3cd7-5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:58:14:91:f8:46:04:48:41:be:9f:b7:f6:
fe:c1:39:24:16:e2:0d:d6:4c:83:de:06:17:b5:2b:
10:44:45:79:1c:10:9c:2a:b5:a3:ad:13:19:7b:b9:
33:9f:e5:a5:09:1e:3d:f7:bd:f9:be:39:9d:a5:76:
cd:68:a0:d6:4b:a3:a7:e2:12:2a:7b:b2:aa:66:74:
87:2a:9d:b4:66:3c:e3:2e:98:38:f8:56:35:d6:91:
fd:82:17:e1:68:ac:13:bb:60:66:72:a0:0b:7c:09:
06:5f:06:5f:ea:61:98:3a:06:da:1c:a2:57:3a:c2:
ed:e9:e5:8b:a6:dc:2e:fc:ee:f0:74:64:ff:42:88:
8b:b3:35:aa:c9:82:5b:74:e2:c1:59:30:03:e7:88:
4e:78:b7:91:49:6c:43:e6:81:68:3e:80:4b:6f:19:
3a:73:e3:4f:24:ad:db:4b:b6:4e:4f:1b:0b:54:13:
c5:5d:b7:9b:6f:d0:dc:f8:4b:2f:fb:f8:68:d5:4e:
de:93:c0:e7:6b:45:bb:18:49:be:5b:63:9f:ad:4a:
9a:15:ca:f8:2f:34:f9:b5:3e:b6:b3:dd:62:7b:ec:
b5:7a:75:de:ae:ce:f5:e5:c8:ba:d6:e1:03:b3:36:
be:4d:74:af:bf:c7:65:b7:f0:2b:0f:fc:a4:f5:99:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:5F:7E:45:A1:63:0E:B7:6D:E6:70:5D:57:A0:D4:E1:F8:44:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB44F144C37B11EFB6C1CCAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:36:52:c8:c6:2e:c3:fa:c4:a0:99:48:7d:57:22:10:8d:cb:
58:7c:b8:e9:5e:a3:a2:ae:ae:17:a4:2e:1d:4b:4b:f3:6f:ba:
25:0d:f6:0f:79:31:3a:41:b9:09:32:1f:48:a5:77:93:96:99:
c7:9f:14:4e:15:a8:3b:3b:c2:ad:ef:b3:1d:97:f8:61:48:c0:
6c:38:1f:d0:e9:dd:de:62:08:33:fc:0a:7b:ec:2f:03:01:3e:
53:98:08:63:93:45:1d:00:b5:d1:ed:37:1f:36:8a:2a:55:ce:
42:d3:86:b2:64:4f:c6:c1:f0:bc:7d:b5:9f:dc:08:ef:2e:00:
04:94:03:29:8c:e0:2c:a6:30:dc:6d:6f:e8:5f:39:97:ab:d2:
2c:ab:7a:20:db:01:2f:f4:f9:1e:ea:39:4b:4a:e5:0f:4c:da:
2e:59:3c:e5:73:c7:96:1b:d0:41:10:a2:53:da:71:15:9f:72:
cb:4d:68:bc:71:dd:7b:9d:31:cb:fa:c1:49:f1:3b:0a:20:2c:
06:03:e6:d5:88:c5:e9:a1:9f:61:80:d7:5a:f5:b2:b8:4a:33:
04:6e:01:59:b7:6a:dd:20:80:80:dd:94:64:16:4d:72:2d:49:
32:02:ff:79:42:9a:36:d5:ef:a8:16:09:fe:e6:30:43:19:86:
bb:9c:70:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:12 2025 by rpki-client