Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D61B97AE31911EFB4AAE58F762E951A.roa
File: 1D61B97AE31911EFB4AAE58F762E951A.roa (raw, json)
Hash identifier: VsW0rzDnm/q8XQZP5ONdxYkjPE3plqG3dbydoSYWpN8=
Subject key identifier: FD:D1:05:C3:97:35:33:B9:93:80:69:D4:C5:8A:6D:1F:89:A7:AC:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015139
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D61B97AE31911EFB4AAE58F762E951A.roa
Signing time: Tue 04 Feb 2025 16:57:28 +0000
ROA not before: Tue 04 Feb 2025 16:57:24 +0000
ROA not after: Wed 30 Apr 2025 16:57:24 +0000
asID: 18229
IP address blocks: 154.210.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86329 (0x15139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:57:24 2025 GMT
Not After : Apr 30 16:57:24 2025 GMT
Subject: CN=67a246f8-964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:f8:86:a8:82:a2:5e:e9:d1:b4:9b:a4:79:
60:24:b1:a5:e0:eb:c1:e3:ff:28:25:36:e6:40:54:
db:0a:c8:49:9d:47:34:37:32:eb:7d:ea:40:ab:3f:
04:b2:6a:5f:73:79:d6:0e:b9:11:73:91:54:a9:c7:
89:3a:e4:f6:aa:78:66:ff:6c:64:66:3a:8c:22:c1:
8b:05:d9:02:ca:f4:9e:9a:a4:93:65:6d:f6:89:f7:
28:22:d3:ef:8e:f6:4b:9d:cc:b9:64:6c:32:6f:9a:
d9:80:1f:db:e7:4e:cc:dc:25:bf:d0:79:d2:d5:09:
b7:04:d4:f3:07:fe:1e:ff:12:ea:fc:79:e2:a6:75:
bb:94:c6:e4:f0:ef:41:02:e5:9b:d0:33:10:e8:4b:
0f:c6:5d:43:a2:d4:68:c9:fa:65:0e:01:0e:08:3d:
c9:2d:d0:66:0c:e4:da:71:b7:df:b1:af:c8:eb:3b:
30:0c:7d:fb:00:91:ad:1e:d1:ab:02:b7:38:b6:f5:
30:ab:b2:c4:b0:84:e6:0f:f9:86:b4:9c:5e:08:cb:
d5:41:58:eb:77:24:db:3e:91:86:76:6c:ff:b4:9b:
c3:77:c3:70:0d:bf:2a:46:02:fe:c1:41:42:54:b2:
bd:7a:c2:31:1a:e9:e5:67:8d:60:76:35:56:e4:40:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D1:05:C3:97:35:33:B9:93:80:69:D4:C5:8A:6D:1F:89:A7:AC:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D61B97AE31911EFB4AAE58F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f0:32:ee:d0:c9:c9:5d:3c:f9:16:a1:4e:44:77:d8:75:5a:
24:a0:94:2e:0f:f5:85:19:9e:50:20:33:5a:82:85:49:db:41:
e6:df:22:a1:3c:88:d1:41:fb:d2:42:57:b9:64:cb:4c:a9:e9:
02:49:a4:99:56:ae:03:46:75:79:a1:5b:91:5f:81:1f:d0:fb:
c7:1d:e5:fb:d5:22:e6:4a:8d:7b:d5:33:21:27:7d:c2:51:52:
19:72:59:ac:63:e0:10:b1:32:6c:1d:45:59:d7:78:53:19:e7:
9a:be:f8:55:3d:62:bc:b2:4d:78:9a:dc:bb:a3:db:c9:3e:41:
bb:ea:9a:fa:96:4f:ef:53:c0:31:22:f8:65:13:a5:c5:00:99:
12:5b:31:40:31:cb:1b:d3:97:5c:e3:4a:41:a0:80:f8:70:e9:
4e:be:45:91:ff:37:64:f3:7a:24:08:58:bf:bf:57:ea:54:b3:
59:93:92:58:6b:06:10:b7:b5:a7:74:ef:74:04:61:21:71:7e:
6c:02:04:b3:ea:82:71:28:85:22:b1:e3:17:14:af:96:31:ec:
28:a2:bc:e8:7e:bf:b7:13:37:83:5d:28:ff:23:3b:04:26:2e:
9a:4e:ca:d4:30:f5:48:99:eb:46:13:72:65:85:10:85:82:1b:
47:31:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:44 2025 by rpki-client