Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83BBE6EC61911EF88C19D49762E951A.roa
File: F83BBE6EC61911EF88C19D49762E951A.roa (raw, json)
Hash identifier: nXjfWQ+fiAMt6zGsZkandNhXhS20IyjwMyFBDTKnunM=
Subject key identifier: 31:9C:FC:DA:FE:BC:E6:A6:BB:2E:07:75:1F:3D:12:D0:78:BB:9D:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83BBE6EC61911EF88C19D49762E951A.roa
Signing time: Sun 29 Dec 2024 19:20:31 +0000
ROA not before: Sun 29 Dec 2024 19:20:28 +0000
ROA not after: Sun 12 Dec 2027 19:20:28 +0000
asID: 17561
IP address blocks: 154.217.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77618 (0x12f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:20:28 2024 GMT
Not After : Dec 12 19:20:28 2027 GMT
Subject: CN=6771a0ff-abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:0b:59:40:5d:a4:1c:90:ee:24:3f:33:9c:
0c:35:d1:2f:ee:cb:76:57:62:7d:71:6b:59:d0:83:
68:6a:8b:bb:79:79:da:b8:b6:52:e6:41:4b:6e:65:
fc:a9:db:60:1b:85:29:45:29:85:4c:10:9d:25:6c:
cf:30:bf:54:7d:53:43:f8:a0:27:37:91:1b:ad:93:
41:9d:5c:a7:cf:25:60:24:b4:0a:2c:a8:b8:d9:44:
bc:32:5c:07:81:3c:fd:7c:4e:f5:45:5f:5f:98:d8:
b5:4c:e2:0b:d9:0e:99:ac:44:b5:82:67:ab:26:b7:
63:45:f2:ef:38:33:73:0f:94:4c:70:1f:1e:e9:4d:
2d:ea:a1:64:8c:8b:35:04:ea:a4:95:4c:05:ab:7d:
85:d8:ba:6b:51:67:62:6e:7e:9e:9e:39:a9:3a:70:
46:18:ef:4f:a9:97:63:f0:ac:20:1c:df:5b:c3:bd:
b2:c8:d9:36:4e:b1:f4:f9:49:7a:b9:1c:25:e7:e5:
f0:4c:e1:06:49:17:29:ef:fd:42:4b:25:5f:d2:6e:
13:de:c3:e1:04:66:db:cf:ab:8a:c2:a7:cc:d0:2a:
29:d1:a9:b6:0a:37:f9:0d:bc:eb:3f:bc:ec:0d:85:
41:74:73:26:07:af:4e:ef:b1:04:a9:e8:d1:d5:55:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:FC:DA:FE:BC:E6:A6:BB:2E:07:75:1F:3D:12:D0:78:BB:9D:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83BBE6EC61911EF88C19D49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0b:7c:91:26:93:20:79:23:7c:e3:e2:84:55:a2:4a:5a:10:
f8:25:e5:5d:2d:b2:d2:80:3c:38:d5:6b:ae:8f:a1:27:34:db:
03:19:96:82:40:c5:05:ed:34:b7:b8:76:f4:00:30:49:fd:c7:
0f:3b:a6:36:ce:6d:69:a3:ad:e1:b7:b0:27:be:80:99:14:40:
6d:c3:5c:b5:b1:5a:88:7e:f4:79:08:03:84:52:70:6f:d5:6a:
d1:f7:dd:02:a4:93:61:a8:b2:d7:8b:61:a1:5b:12:8f:95:d3:
97:20:76:0c:c5:c0:f4:2a:6b:77:e7:7f:73:8d:68:40:b4:c4:
cd:e7:e9:a9:bc:f4:05:fc:4e:57:95:41:b3:77:31:18:bb:31:
ac:c3:6b:8b:35:e6:b1:c3:88:f8:36:42:1c:f2:ca:da:36:f4:
ac:a7:24:d8:44:be:08:fd:86:ea:32:50:3c:fa:20:42:03:f9:
69:cb:49:12:c1:cc:44:77:2b:6b:ae:4b:56:8f:55:69:e8:ca:
91:66:64:71:59:9a:95:9c:73:8d:58:40:e1:88:06:b4:46:df:
2c:86:35:ee:45:f0:40:89:11:f1:a7:45:09:03:35:8f:40:ee:
43:4d:f2:33:84:69:a9:eb:03:e7:d6:73:0a:8a:76:fb:4c:57:
78:8d:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:00 2025 by rpki-client