Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A74829EE31711EFB8615182762E951A.roa
File: 1A74829EE31711EFB8615182762E951A.roa (raw, json)
Hash identifier: oAJ5Wlmn0m4IFw9OIIC9092VwjYt4+f558let8XrsEo=
Subject key identifier: 24:C4:88:41:5E:50:48:17:E7:DD:EC:8C:64:5F:30:C1:1B:CF:B6:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01512D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A74829EE31711EFB8615182762E951A.roa
Signing time: Tue 04 Feb 2025 16:43:04 +0000
ROA not before: Tue 04 Feb 2025 16:43:00 +0000
ROA not after: Wed 30 Apr 2025 16:43:00 +0000
asID: 18229
IP address blocks: 154.210.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86317 (0x1512d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:43:00 2025 GMT
Not After : Apr 30 16:43:00 2025 GMT
Subject: CN=67a24398-c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:e6:e2:d1:3c:06:fd:72:65:71:09:89:c5:
51:2c:98:dc:57:e3:3c:cb:e2:70:a6:ac:16:13:d1:
82:f8:a3:f4:6b:51:75:cf:74:50:eb:7e:13:e3:5d:
72:7f:76:22:32:dd:c5:27:76:40:26:a6:23:55:8c:
13:dd:98:c8:46:85:13:1d:18:2e:31:96:87:70:33:
7e:ef:bb:1a:8a:d1:83:9e:c7:a6:e2:6e:16:e1:16:
96:34:56:7e:0d:50:b9:64:c3:4c:63:cf:48:1d:cc:
2b:d4:73:12:01:9a:18:38:1c:ce:bf:60:e2:3c:d3:
ea:22:8f:d8:fa:55:4f:a4:6f:07:5c:eb:1f:5b:03:
e6:26:a5:b5:b2:b7:81:b0:64:75:62:82:3f:39:9b:
e9:ab:b8:5a:7e:26:7e:36:59:b0:c6:54:65:fb:77:
f8:72:fa:07:0f:fd:4d:c9:2c:ab:07:d2:e1:fb:7b:
91:22:72:f8:25:a9:f2:f4:94:9a:5b:71:bf:1c:81:
db:85:a7:be:3c:25:75:cb:f0:40:71:bb:b9:99:74:
38:be:67:aa:8a:ce:50:34:79:8b:64:ee:00:11:62:
3b:57:73:02:db:21:9f:e3:8e:9c:f0:c6:69:97:52:
ba:f7:93:0b:aa:4e:b2:59:b6:9b:cc:97:ec:a6:f1:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:88:41:5E:50:48:17:E7:DD:EC:8C:64:5F:30:C1:1B:CF:B6:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A74829EE31711EFB8615182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.140.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:75:cb:91:76:7e:e7:24:03:a5:9e:14:c3:8c:58:40:71:98:
d0:92:6a:be:f4:21:78:04:e0:31:39:98:32:15:73:1e:59:ef:
13:1a:5f:5a:a8:4a:c2:68:65:bd:f6:29:c7:a2:f1:22:bb:fd:
71:d3:3a:fe:59:c9:99:7f:78:8f:94:68:b6:55:7a:47:f5:28:
c4:82:d2:f2:aa:77:80:d0:86:f3:4a:90:5b:8d:cd:ba:2c:ae:
c9:0c:71:05:67:ce:30:32:86:8c:be:65:30:83:b1:1c:a6:e1:
8f:aa:6f:5d:a7:5d:9f:de:5e:66:e5:7f:d9:00:44:52:5e:9d:
7b:f6:ac:9c:62:14:4f:9d:ce:8d:44:02:77:fd:a6:6b:b7:f5:
fa:d8:bb:c6:12:d0:5f:fb:33:94:0a:ec:a7:73:a7:ea:20:70:
b8:39:d3:5e:2a:a4:3f:9b:b5:37:c2:e0:c0:dc:e9:0c:6b:6c:
d3:07:14:fd:cd:5f:8d:e0:6e:59:0b:31:f8:db:ac:cc:d1:fb:
2b:9e:4b:3e:91:17:ac:9b:92:e7:95:2f:c6:34:ab:71:d1:e6:
94:85:b7:ed:75:91:11:25:63:56:d7:60:75:1f:c7:de:0b:f0:
de:f6:ae:4b:e0:ee:8c:d0:c1:11:d9:90:63:56:6b:61:e8:67:
6b:c7:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:30 2025 by rpki-client