Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D721C8C41B11EF83FAE8B2762E951A.roa
File: F9D721C8C41B11EF83FAE8B2762E951A.roa (raw, json)
Hash identifier: t4W5d2MJNjNRBB0fDaMGJhcpT8tyHjoTVyretDW1wYo=
Subject key identifier: 9F:10:C6:22:E2:C7:A0:95:9E:A1:4D:B2:31:DE:B0:BE:CA:04:18:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01298D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D721C8C41B11EF83FAE8B2762E951A.roa
Signing time: Fri 27 Dec 2024 06:29:51 +0000
ROA not before: Fri 27 Dec 2024 06:29:47 +0000
ROA not after: Sun 12 Dec 2027 06:29:47 +0000
asID: 17561
IP address blocks: 154.201.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76173 (0x1298d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:29:47 2024 GMT
Not After : Dec 12 06:29:47 2027 GMT
Subject: CN=676e495f-d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:7a:f7:a1:c6:08:72:ab:32:43:82:39:73:
0a:1d:59:35:30:43:a0:ff:db:0e:91:4a:7f:8c:00:
7f:fc:62:a0:81:1c:12:38:9b:29:74:87:d3:06:35:
75:7f:32:0e:83:f1:ee:c3:f7:d7:ca:72:ca:c5:94:
4d:5e:b3:21:d3:f0:db:28:ba:62:6f:8a:83:2d:7a:
2a:24:cd:8f:c8:e7:d5:5a:9d:49:3d:33:60:df:36:
6e:08:81:2c:80:96:e4:c0:73:4a:00:36:55:5d:4c:
6a:0f:cf:e1:80:6d:eb:4a:57:d0:50:56:bf:8e:ea:
73:42:23:96:e7:d6:61:97:80:77:fc:c4:ea:73:e2:
07:cd:05:09:b2:92:f6:d0:46:d0:d3:b0:80:d3:fb:
c6:12:0d:f3:bc:f8:0d:76:2d:35:a2:75:e6:33:95:
e8:3c:3f:fa:b3:7e:ad:da:ed:db:c1:52:8b:8e:bb:
7a:be:2a:6a:a5:ad:4b:73:25:84:03:83:0c:fe:47:
45:ea:d0:21:f9:43:15:d2:d2:73:83:a9:44:94:6e:
65:e0:1d:7b:e3:5e:ed:65:f8:52:38:7c:ec:65:12:
27:e6:19:4e:9b:d7:03:65:ec:91:f2:2b:70:c3:35:
5b:eb:f0:90:8b:01:ee:4b:f8:2f:4a:81:af:2b:3f:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:C6:22:E2:C7:A0:95:9E:A1:4D:B2:31:DE:B0:BE:CA:04:18:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D721C8C41B11EF83FAE8B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.21.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ea:31:48:bc:14:e0:b5:41:f6:b5:4e:f1:88:44:8e:92:1c:
6b:eb:2d:db:8b:3f:dc:e3:4b:34:a1:64:ab:51:b7:b9:5c:07:
f4:44:79:b4:6e:01:a8:0d:a1:bc:61:16:ad:80:ad:5c:94:5e:
41:79:e4:6d:d0:21:64:37:0e:e5:23:0c:9d:25:65:f8:11:5d:
04:b5:c1:00:d5:3f:06:61:12:61:9d:85:42:e0:fb:f1:c0:8f:
ff:cb:59:d7:1c:bf:05:d5:a6:b5:b5:33:00:01:c2:5a:49:6b:
c2:c6:cc:35:4d:83:b7:f9:6c:99:d9:75:df:ab:a9:cc:39:a7:
f7:1d:17:81:18:f4:d7:20:62:69:1b:de:ad:cd:1a:6b:71:0b:
1c:e3:0c:2c:35:c6:22:5e:4f:87:67:fd:9d:33:21:ab:7f:d3:
14:bb:60:3e:16:be:0e:49:1a:0b:02:d5:6c:e5:85:32:33:f9:
63:44:be:8c:92:3c:6c:68:5b:c9:b4:42:a4:20:3a:11:b4:7b:
91:af:57:45:6d:4a:c3:d3:3d:aa:81:a0:8f:c2:ee:66:13:2b:
d3:04:58:58:b4:f0:d8:78:87:c9:17:20:22:dd:92:99:49:1a:
36:08:28:dc:c6:83:3b:3f:e3:fa:0e:05:dc:16:a7:97:65:b9:
bb:37:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client