Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB589AAE24211EF83972D68762E951A.roa
File: 0AB589AAE24211EF83972D68762E951A.roa (raw, json)
Hash identifier: IeyCAuf7B37zkSDnH6tcMa8UqQRYP5jOy/iw750n3cE=
Subject key identifier: 7D:2F:35:5D:98:83:8B:95:78:5A:99:BA:24:AC:9D:56:E0:B4:02:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB589AAE24211EF83972D68762E951A.roa
Signing time: Mon 03 Feb 2025 15:17:55 +0000
ROA not before: Mon 03 Feb 2025 15:17:51 +0000
ROA not after: Wed 30 Apr 2025 15:17:51 +0000
asID: 150008
IP address blocks: 154.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86069 (0x15035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:17:51 2025 GMT
Not After : Apr 30 15:17:51 2025 GMT
Subject: CN=67a0de23-1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:8a:f6:af:35:cd:c7:af:1d:2d:84:b0:95:
8b:65:40:d8:6a:2c:39:b1:10:82:3b:c1:9e:19:a2:
92:fe:94:41:f7:cd:a9:2f:50:0b:bd:f7:a7:77:7a:
ca:84:95:18:02:d1:77:bf:3b:69:c5:46:e0:b8:b2:
64:80:9d:5e:20:6c:33:17:dc:df:83:19:29:51:6c:
f5:ac:f9:54:cc:13:18:b0:05:3a:75:4f:68:37:ca:
c2:0b:1e:49:63:7e:7c:cf:1c:be:43:dc:6c:e3:22:
62:a9:8d:97:e0:26:67:6f:bb:1e:5d:26:e4:18:fb:
81:26:5c:3c:2f:ea:f7:80:b7:21:4c:93:70:f2:f1:
92:a8:56:31:10:bb:f7:7f:36:1c:f8:a8:9b:76:62:
0e:f9:eb:83:11:8d:83:72:29:8a:b9:95:66:c1:6c:
b6:16:69:76:ef:54:04:ea:1a:7a:3c:29:0e:0d:cb:
5f:99:7d:63:8c:5c:9f:c2:0b:94:39:aa:7e:a0:79:
b5:95:48:7e:77:17:cf:c4:42:e7:94:51:9f:86:d8:
b1:a0:a1:bb:e2:22:1b:bd:e0:3d:18:2a:c4:32:81:
08:31:d1:e8:58:7f:fc:c3:d3:69:14:2d:90:7a:f3:
fb:2f:a3:d5:05:6e:f1:af:88:2d:36:dc:1c:b6:74:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:35:5D:98:83:8B:95:78:5A:99:BA:24:AC:9D:56:E0:B4:02:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AB589AAE24211EF83972D68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.227.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:37:b0:b5:7b:74:2d:29:71:ad:65:92:93:99:57:f0:64:aa:
eb:95:c6:ee:7d:e4:bb:de:17:29:4a:bb:71:ed:d0:21:45:81:
c8:b4:5c:55:96:cd:48:9c:b2:3f:eb:40:c7:8b:ea:a4:cb:ba:
33:64:cf:f6:7b:bc:d2:7e:55:bb:9b:a4:30:ca:7a:2f:d8:11:
5a:8d:8e:6b:23:68:e4:9e:89:80:f9:b9:e4:dd:3c:f0:15:b2:
30:20:b9:aa:1b:4e:be:1e:50:87:42:70:57:48:c4:10:8d:52:
16:a8:b5:9f:41:ef:d4:95:4b:35:f3:fb:b3:bf:6a:8b:4c:87:
d5:97:ed:ee:f8:14:4a:27:fc:1e:32:59:71:7f:a1:ea:7b:06:
2d:9a:86:ee:61:8a:7d:2b:9b:27:5a:be:77:2f:17:3e:0b:45:
04:93:fd:cb:b4:31:b0:c1:fd:f4:1f:b3:60:64:cd:91:bb:f9:
9f:be:6d:ca:20:fb:ef:bc:1c:14:b7:e4:d5:44:c8:ad:e8:a2:
a3:a6:ab:b7:c6:10:69:49:34:fc:dc:87:6f:69:c9:89:1d:29:
91:cb:bd:f9:79:b2:28:9c:7c:6f:14:3b:34:43:e3:24:22:f8:
09:40:19:30:cc:8f:f7:ef:1a:4f:a6:93:a5:32:9f:54:fe:a4:
83:9e:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:38 2025 by rpki-client