Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1452729CD99211EFBB77AA51762E951A.roa
File: 1452729CD99211EFBB77AA51762E951A.roa (raw, json)
Hash identifier: s2NBongTk0PQCqKDfV1B80uiQEIpif/7Skzp7ZVrnMo=
Subject key identifier: 97:59:A5:91:FF:40:9F:1D:5C:AF:E1:96:D9:C0:16:4C:B2:80:86:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014296
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1452729CD99211EFBB77AA51762E951A.roa
Signing time: Thu 23 Jan 2025 13:58:10 +0000
ROA not before: Thu 23 Jan 2025 13:58:06 +0000
ROA not after: Tue 13 May 2025 13:58:06 +0000
asID: 138915
IP address blocks: 154.205.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82582 (0x14296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:58:06 2025 GMT
Not After : May 13 13:58:06 2025 GMT
Subject: CN=67924af2-952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:10:af:91:25:9b:dc:06:04:82:e0:ac:de:
cd:cc:0d:21:b0:f4:0d:13:bc:0b:25:0f:16:57:74:
78:ee:92:21:43:bc:95:50:d9:44:66:9a:ad:7c:03:
0c:4b:f9:a1:d1:f3:f8:cc:6d:5e:aa:f7:c7:c6:49:
ca:94:f5:88:b5:fd:fd:44:cf:07:41:f5:8e:a2:dc:
a8:14:91:f7:0b:8d:df:c7:cc:83:fb:5d:5f:e2:9b:
97:0d:b3:a8:7a:5f:b8:d2:86:8f:64:1e:50:1d:35:
72:13:ba:c3:8c:b2:09:18:f2:98:82:19:00:9a:74:
91:87:ae:43:bd:8b:e7:f0:85:78:e4:b0:d1:be:cb:
a2:19:60:97:6e:2d:63:b2:3b:11:74:70:83:dd:0a:
ca:0f:25:85:8c:4d:0c:e6:1d:39:9b:5d:bc:39:83:
3b:bf:88:d8:b0:e5:1f:97:ed:50:3a:0e:25:03:37:
30:8d:17:74:8b:fa:c5:8e:ef:00:51:ef:4b:22:47:
0c:a8:b7:08:7e:2d:32:ad:bf:6b:36:40:bd:16:dd:
f7:38:d6:4f:e6:fb:3a:99:39:d8:74:33:85:4f:40:
2c:15:55:0a:90:90:b7:a4:28:98:d1:3b:02:90:b7:
b3:0e:61:c6:c6:97:c1:2f:e5:21:2b:3a:d7:d3:53:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:A5:91:FF:40:9F:1D:5C:AF:E1:96:D9:C0:16:4C:B2:80:86:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1452729CD99211EFBB77AA51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b1:c6:59:26:6c:05:1c:13:af:a0:ba:b5:2c:9c:ab:66:b9:
40:c3:0b:56:fa:34:2c:b6:b0:e0:89:b8:c5:0b:66:b6:a9:01:
34:97:6b:94:83:bb:d6:76:61:a2:34:83:8d:97:65:63:8d:d4:
16:d3:cd:e3:34:37:3b:84:77:da:a6:1c:df:d4:69:24:14:f3:
00:7a:38:45:1c:bb:5a:11:4e:7b:67:a8:ce:24:c0:db:e7:dd:
35:d9:fd:91:ac:f4:7e:9c:29:17:ca:27:f6:8f:9e:11:f4:85:
69:83:bb:ef:d7:fb:20:00:fb:1c:fe:6b:ce:09:18:36:f9:20:
c9:a2:b8:ef:e3:c1:bc:9f:b6:30:72:c7:ec:c6:1d:32:3c:42:
4a:b9:bd:16:08:4a:f3:6d:1b:4d:da:d5:08:db:e9:6a:c4:a7:
c8:e1:45:0f:9d:a1:21:2b:9a:04:61:ec:74:a0:e7:13:6a:2e:
9e:a3:04:f4:10:88:2a:0a:e6:e1:36:74:d7:53:a5:f7:3d:cb:
d1:b6:a2:9d:00:a0:02:12:c5:05:2e:4e:85:58:5d:a1:a6:0b:
7a:29:27:92:c0:ca:55:8f:43:b2:2e:3e:3d:f6:0b:5c:64:b8:
d1:74:64:96:19:c5:1d:95:e2:64:64:97:c4:8b:80:62:36:48:
41:b4:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:01 2025 by rpki-client