Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E5D310BCF2A411EF9A7E2652762E951A.roa
File: E5D310BCF2A411EF9A7E2652762E951A.roa (raw, json)
Hash identifier: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=
Subject key identifier: 40:81:FB:80:D7:AA:CF:B3:9A:F6:21:B9:3D:22:8E:80:1A:23:3A:E4
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0DE1
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E5D310BCF2A411EF9A7E2652762E951A.roa
Signing time: Mon 24 Feb 2025 11:45:52 +0000
ROA not before: Mon 24 Feb 2025 11:45:41 +0000
ROA not after: Sun 24 Feb 2030 11:45:41 +0000
asID: 37199
IP address blocks: 197.155.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3553 (0xde1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF
Validity
Not Before: Feb 24 11:45:41 2025 GMT
Not After : Feb 24 11:45:41 2030 GMT
Subject: CN=67bc5bf0-4aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:e3:60:4f:f9:ea:ff:aa:00:b4:a4:44:2f:
c9:45:eb:5e:cc:20:31:18:ff:f7:17:80:3c:28:0e:
23:f1:d7:68:a0:32:a6:95:00:70:eb:84:89:ff:2e:
16:05:c5:b1:88:3a:0d:2f:ed:71:26:7b:44:ea:09:
db:da:c2:5a:5e:2c:36:34:13:51:eb:a0:2c:ab:52:
e9:a5:12:4c:fb:00:aa:83:9f:67:61:40:8e:f4:cb:
95:12:de:3f:a1:d1:6a:93:fd:1c:28:6a:01:3e:7d:
e0:7c:9a:d4:29:63:e5:56:b8:7e:5c:5b:dc:1b:71:
68:1c:8a:09:86:98:ff:ff:1f:72:e8:3b:2d:0d:2a:
a0:8f:0e:80:ff:44:7d:87:30:95:d7:67:69:1b:51:
ec:e4:27:ef:53:94:a2:29:0a:29:0c:e8:0e:e9:16:
af:c9:fb:61:67:bb:09:da:8a:fb:27:54:a5:a8:7b:
6f:cb:7a:e1:ac:e0:e4:d4:aa:56:25:c1:f5:7f:d3:
88:84:ce:04:4e:75:88:3d:ac:c8:fe:43:ca:42:06:
d2:36:8d:37:cb:c9:89:bd:17:36:a2:74:a6:7c:61:
db:26:4d:b0:d2:a8:f7:99:b5:d3:b4:eb:f5:4b:c3:
b2:96:15:56:79:07:2a:4f:b9:23:03:7d:cd:f2:d9:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:FB:80:D7:AA:CF:B3:9A:F6:21:B9:3D:22:8E:80:1A:23:3A:E4
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E5D310BCF2A411EF9A7E2652762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:1f:fa:83:e2:41:3c:15:bf:33:29:8d:2d:03:3f:94:c5:9a:
e1:2d:d4:21:e1:ad:f3:c3:a5:81:e3:13:f1:90:b5:f4:3e:01:
e0:96:1b:71:b2:19:f8:d1:69:97:72:08:1a:ab:52:aa:e6:ab:
fa:fa:05:9c:a9:f2:cc:c8:76:af:22:0a:d8:17:16:9a:76:28:
c2:60:fc:89:91:89:76:8e:5f:d9:82:91:2d:b6:0c:4d:11:b1:
ea:3a:df:55:37:db:84:28:99:94:d7:24:e6:fb:ed:6b:9d:eb:
ee:fa:d8:ec:2e:71:da:e7:eb:04:db:6e:ba:70:20:14:33:9f:
22:60:91:91:18:d9:fd:34:c0:a8:d7:3b:9e:36:34:d7:4b:a8:
e2:8a:d8:34:ea:8c:e8:d1:ba:4f:4d:af:a9:21:5d:0d:6b:d5:
11:3a:8a:e2:48:19:4f:72:6d:d9:d7:7a:58:54:ff:d3:d6:78:
93:96:ba:8e:5a:e8:39:ca:70:b1:b1:88:fc:7c:8c:c8:1b:a0:
79:68:3b:c8:e9:ed:07:cb:3f:fc:65:e2:31:5b:02:b4:8a:04:
eb:30:c6:39:b9:5d:2a:6e:d6:22:fb:64:a8:68:2b:68:6b:24:
fb:7f:81:cd:17:c8:d4:c7:9c:9e:34:63:b8:c0:55:1e:2f:44:
2d:2f:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:00 2025 by rpki-client