Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A64281AC5E211EF807EED6A762E951A.roa
File: 1A64281AC5E211EF807EED6A762E951A.roa (raw, json)
Hash identifier: kQzKuLvnL68Dxod/oY7dxkZtff/b24AETWulq4YEwaw=
Subject key identifier: 22:29:39:3D:CB:2A:2B:10:44:64:D9:A9:24:94:D0:0C:52:A3:B2:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A64281AC5E211EF807EED6A762E951A.roa
Signing time: Sun 29 Dec 2024 12:40:37 +0000
ROA not before: Sun 29 Dec 2024 12:40:33 +0000
ROA not after: Sun 12 Dec 2027 12:40:33 +0000
asID: 17561
IP address blocks: 154.210.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77144 (0x12d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:40:33 2024 GMT
Not After : Dec 12 12:40:33 2027 GMT
Subject: CN=67714345-1b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:e7:30:43:fe:d7:07:cb:9e:c4:09:da:a5:
7f:24:5f:5a:9f:f7:8b:5a:70:2d:11:e9:9b:2d:38:
71:5a:00:6e:1d:91:1d:f3:df:bd:68:c1:57:81:eb:
d1:e4:e7:4a:59:36:b9:0f:90:84:eb:68:a7:c3:bd:
3b:23:45:95:e8:1d:c4:e4:89:a7:3f:9a:c3:7a:81:
0c:f3:0b:25:78:cc:ab:13:03:09:7e:35:9a:b9:db:
63:5d:5e:cb:f2:37:b5:39:ae:fb:3c:c4:c7:e4:48:
cd:d1:34:e2:1b:42:b8:d7:34:d5:28:39:79:d1:c4:
22:54:cd:a2:24:ca:2e:1b:92:e1:bf:ee:37:04:96:
6d:06:32:20:95:36:2b:2a:dc:7d:9d:97:4c:29:24:
96:9a:04:eb:33:42:9f:81:90:eb:f7:39:af:f7:00:
ce:b5:36:8d:af:49:e2:12:a4:67:b6:50:f8:34:6b:
f7:da:78:ff:ce:fd:39:1a:eb:19:ce:e9:bd:bd:42:
ae:68:6c:bd:bd:8d:47:47:23:49:c3:70:30:c3:b0:
9f:0f:9c:c6:7c:36:ff:d8:28:5e:b5:44:c4:26:ba:
6d:c1:8a:11:ce:81:f2:86:f2:4b:49:81:f2:d3:9d:
51:b6:31:be:2d:cb:b9:fd:bf:91:a5:57:64:12:4f:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:39:3D:CB:2A:2B:10:44:64:D9:A9:24:94:D0:0C:52:A3:B2:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A64281AC5E211EF807EED6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.110.0/24
Signature Algorithm: sha256WithRSAEncryption
96:32:05:ce:3e:b9:3e:b1:e3:fe:52:fb:a8:59:9d:e1:6b:d3:
8a:0e:e6:17:09:96:92:c0:bb:f7:46:e9:d8:ae:0e:73:aa:20:
c6:6a:41:22:03:be:44:c8:6d:c7:dd:34:78:85:ad:a8:3f:f2:
d8:90:0e:07:ee:ca:41:91:ec:e9:10:0d:f7:5e:ac:df:f0:00:
cc:db:02:43:b6:99:65:9b:f3:65:9e:8c:7d:9d:b9:4e:b4:11:
ae:67:2c:2f:9f:d3:3b:82:bf:7e:c9:9f:79:a0:ac:ec:36:1e:
9e:0a:c3:58:99:b3:46:5a:1d:c8:c8:b7:6d:d3:5f:d5:d7:ec:
53:4d:12:c9:c9:6d:fb:54:25:45:51:41:c5:04:e0:e2:b1:c6:
25:3f:44:7e:b5:09:55:8d:4d:7d:fc:56:bc:5a:64:ba:e9:50:
4b:52:16:e3:82:50:f1:ef:94:44:9c:be:b4:99:b0:b4:f6:9c:
51:7e:76:78:8a:98:14:0d:aa:d7:56:7e:8c:0c:86:56:4a:31:
3b:f2:68:3e:a3:6e:66:01:c3:d1:8c:7d:b0:db:d6:5b:40:b2:
bb:c5:ee:04:57:f7:4c:c5:9d:9b:d7:81:a4:d0:3e:ce:ee:5b:
93:eb:67:dd:0b:1b:0e:61:6b:f5:60:11:a9:bc:5b:20:b0:e5:
65:83:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:01 2025 by rpki-client