Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2A1998C60111EF93B749B1762E951A.roa
File: FC2A1998C60111EF93B749B1762E951A.roa (raw, json)
Hash identifier: 8uUjevvuijCsD7vbmBCkh2vvLrCSyCDohKmuvMPkGE8=
Subject key identifier: 2A:87:E9:41:02:27:69:B8:D3:16:97:48:6A:5B:99:97:B7:19:1E:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2A1998C60111EF93B749B1762E951A.roa
Signing time: Sun 29 Dec 2024 16:28:50 +0000
ROA not before: Sun 29 Dec 2024 16:28:46 +0000
ROA not after: Sun 12 Dec 2027 16:28:46 +0000
asID: 17561
IP address blocks: 154.217.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77414 (0x12e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:28:46 2024 GMT
Not After : Dec 12 16:28:46 2027 GMT
Subject: CN=677178c2-616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:f1:73:15:f6:3a:28:36:63:56:e1:79:9e:
83:73:42:c2:38:e0:53:62:ec:97:50:78:06:53:0d:
e6:6b:27:97:05:f9:ec:2a:a3:f8:e4:e7:bf:64:f0:
73:e6:6b:d0:b6:a0:8e:18:94:11:74:8a:ba:01:46:
15:8d:5d:44:1b:42:74:8c:74:90:a6:4e:f2:5a:24:
a2:a0:bd:5b:4d:f9:a2:96:14:ef:24:ba:11:7a:29:
14:49:54:08:83:35:5e:a0:d2:4d:79:08:2a:94:7f:
bc:ce:a5:11:68:e9:26:4f:29:eb:7a:62:1d:b5:b2:
5a:a5:cd:80:62:78:a3:bf:91:20:b1:43:19:24:2f:
57:ce:51:64:27:61:87:a6:23:1f:e6:df:af:eb:2d:
0a:57:58:61:72:ff:57:39:e4:83:44:e0:ae:90:60:
86:35:09:54:eb:f8:39:b8:92:da:bf:e6:55:52:39:
51:93:dd:31:b5:00:8e:dc:68:00:e6:29:86:4b:70:
8d:4a:ab:9f:c0:27:41:a1:ab:f6:b4:e9:ae:9f:82:
f2:af:cd:bf:eb:34:56:c2:96:6a:ee:c5:62:66:fe:
37:af:ad:e2:be:89:4d:0a:ce:bb:2e:62:90:90:c3:
dc:8c:fc:9c:62:eb:3c:6e:6c:1e:3b:ed:6f:85:39:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:E9:41:02:27:69:B8:D3:16:97:48:6A:5B:99:97:B7:19:1E:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2A1998C60111EF93B749B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.22.0/24
Signature Algorithm: sha256WithRSAEncryption
84:46:62:d2:ab:06:bf:40:3c:6e:d8:3f:66:cf:a7:3c:7e:72:
16:85:03:ee:25:e6:f7:29:bd:81:a5:63:1b:bb:78:2c:35:4a:
9d:40:30:51:fd:ab:f3:10:ac:74:cc:ca:6a:fb:00:d7:30:ef:
b3:5a:9b:f9:01:80:a0:10:83:70:e7:5c:e6:b0:7b:73:5c:80:
5a:0e:8c:56:6d:61:55:c0:37:9f:9e:c0:c7:54:ef:86:9b:56:
51:8d:49:57:b1:ba:73:45:d7:32:81:3e:34:a2:2d:5b:76:89:
4d:b2:0d:96:29:a2:11:59:38:1e:5b:92:7f:89:26:16:6c:ff:
36:c4:38:f8:b8:33:05:fa:4a:45:9b:fb:df:fa:42:96:e7:9a:
57:79:d0:2c:b3:54:a2:68:b5:c1:1f:d7:26:b0:26:bd:c6:2c:
e1:12:82:74:69:38:59:51:ae:2e:db:3d:67:8b:20:57:89:ca:
d4:95:51:3e:11:14:d1:1b:78:fc:f7:b5:fd:e8:8e:8e:49:87:
9c:10:04:b7:34:d1:b8:0e:db:bd:70:48:18:02:14:f0:2b:32:
e7:db:fe:10:97:83:4b:c7:79:c2:2d:c8:d3:7f:2b:3c:7c:fa:
74:6a:44:3d:4a:e4:51:ca:48:1d:54:7b:3e:e6:3e:1b:dc:a7:
da:11:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:58 2025 by rpki-client