Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4AECE6C60211EF84E1A8B7762E951A.roa
File: EB4AECE6C60211EF84E1A8B7762E951A.roa (raw, json)
Hash identifier: HF8dOFuCIyUwZciR6lSzWzKIfwYhAFSi5jnNDqqnfjE=
Subject key identifier: A2:AA:FC:15:84:EA:5C:08:BF:A5:D1:78:E5:8C:15:9D:C9:61:F5:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4AECE6C60211EF84E1A8B7762E951A.roa
Signing time: Sun 29 Dec 2024 16:35:31 +0000
ROA not before: Sun 29 Dec 2024 16:35:27 +0000
ROA not after: Sun 12 Dec 2027 16:35:27 +0000
asID: 17561
IP address blocks: 154.217.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77422 (0x12e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:35:27 2024 GMT
Not After : Dec 12 16:35:27 2027 GMT
Subject: CN=67717a53-95d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:1c:30:1c:5e:85:31:ec:94:34:b6:b0:5a:
91:62:a3:03:3f:00:ec:7e:71:69:19:ef:86:08:95:
b5:3c:d5:20:9c:ad:08:85:8a:04:9c:55:e8:32:83:
a2:8e:26:67:ee:f3:f5:ec:cb:cc:6b:cf:7f:15:4d:
da:db:25:b8:b8:9c:ba:30:a3:11:66:14:6b:d0:03:
0f:a4:98:09:0a:4f:cd:a3:e2:0d:5c:1f:f3:71:c2:
08:c7:db:84:99:63:b7:ba:c6:0a:4d:aa:8a:c6:da:
14:ac:6c:ce:1d:66:ed:4f:b7:8d:aa:04:fd:53:08:
2b:b3:19:18:d4:12:55:97:51:ac:92:d6:ca:c0:b5:
b0:38:8a:01:ee:52:24:97:ec:28:66:6e:57:3c:34:
72:ec:e5:e8:1e:82:5d:fa:7c:c6:8a:f5:e9:0f:a4:
61:3f:a9:31:d9:89:6a:30:ac:07:cc:a7:61:91:91:
2b:1d:5e:3a:fd:12:37:35:2d:de:35:36:9f:4e:0b:
12:2a:63:95:58:d5:5d:62:2c:b6:38:da:da:7d:34:
f6:2b:77:c8:d9:2e:91:90:c8:48:c3:d9:1d:bf:35:
86:b7:d1:5f:85:4b:9f:86:17:45:b4:4b:e0:cb:df:
96:64:6c:f7:f2:f5:e8:10:83:05:b0:f3:42:07:59:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:FC:15:84:EA:5C:08:BF:A5:D1:78:E5:8C:15:9D:C9:61:F5:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4AECE6C60211EF84E1A8B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.26.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e2:69:86:fe:fe:3f:60:24:ac:00:85:50:b4:fa:51:63:78:
9b:1b:6c:b5:55:63:13:7b:7e:75:50:ce:45:5f:0b:16:5e:95:
22:33:69:f7:fc:6c:ab:26:c6:2f:5d:3c:e7:9c:a3:6c:7d:0e:
91:8d:60:d6:d9:b1:92:34:ba:ad:44:7c:0e:77:48:49:83:3a:
8f:ed:d1:54:8b:6d:ed:fb:53:ab:55:bc:a7:31:7f:86:e8:7f:
b3:53:ea:34:77:2e:ee:46:3f:fd:21:79:26:bb:d3:f2:89:eb:
74:44:60:0f:ef:66:ba:53:ba:3b:e7:c0:b3:d2:dd:20:45:4d:
f0:81:ac:f8:1e:af:a5:84:a3:99:14:98:37:1c:80:5a:f6:ae:
a6:ff:8d:19:de:cf:00:59:59:d6:b3:39:4b:d9:08:f8:af:b3:
09:2c:e6:6e:66:7b:11:35:a0:d0:96:c8:c4:fc:4a:4b:78:db:
59:07:a6:3d:e6:4b:00:2a:e4:41:9c:e2:14:6f:ce:b1:45:1d:
78:62:22:d2:2e:c2:ec:4c:1e:0e:c9:6b:b2:43:b3:0a:b5:71:
6e:22:36:2a:24:84:d0:74:9f:63:48:22:81:45:3b:d1:5b:d1:
fe:bf:99:2c:6a:0d:3b:ca:87:e4:01:c6:e9:7f:96:16:79:52:
de:53:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:45:55 2025 by rpki-client