Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26407512DA5F11EF9542AFB8762E951A.roa
File: 26407512DA5F11EF9542AFB8762E951A.roa (raw, json)
Hash identifier: Sv1o4THx3nLXuj4xhly3nNho3XsciEFI+Mh6PNBU/VE=
Subject key identifier: 5F:94:05:D9:16:81:66:90:CD:80:40:50:AA:22:3A:D3:4B:A7:3D:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014823
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26407512DA5F11EF9542AFB8762E951A.roa
Signing time: Fri 24 Jan 2025 14:26:07 +0000
ROA not before: Fri 24 Jan 2025 14:26:03 +0000
ROA not after: Wed 26 Feb 2025 14:26:03 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84003 (0x14823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:26:03 2025 GMT
Not After : Feb 26 14:26:03 2025 GMT
Subject: CN=6793a2ff-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:ec:7c:c9:f5:ca:2e:77:df:46:77:26:3e:
fd:c4:05:57:3b:ec:77:a8:7b:71:2d:98:d9:10:20:
df:c3:42:da:c8:30:66:c7:d2:f2:24:d3:07:b7:5c:
cd:15:db:bd:96:f3:58:a6:1e:1c:ae:44:fe:f5:74:
ae:77:70:2c:07:77:16:0a:dd:ee:d7:e0:3f:28:a6:
5e:26:21:ee:8b:62:5b:98:8c:3a:d0:39:9c:e2:b3:
0a:8c:2a:51:29:79:1e:5a:e8:d9:45:f9:e3:0b:c4:
58:cd:09:e9:22:db:dd:2b:8e:2d:f4:79:b5:52:fc:
c3:9e:34:e6:f7:25:75:a1:13:0e:9f:90:80:37:11:
23:96:02:09:48:73:7a:5e:10:44:80:1d:61:c2:6d:
ac:01:21:55:71:00:b1:44:30:d4:ec:d2:0f:be:d1:
a2:8f:ad:a9:c5:e3:5f:47:28:0e:cf:1f:74:3f:96:
a4:64:e3:13:a8:c0:c8:44:b7:f0:60:6d:4a:71:34:
67:61:37:98:7f:66:03:5e:3c:86:34:06:e7:dc:90:
d3:1b:6c:e2:15:ed:44:2d:97:8c:61:68:0d:33:e4:
34:23:61:02:7c:cc:2b:97:51:08:f3:43:4d:fc:77:
98:1b:da:d7:c8:b5:b6:4b:73:d2:cf:d6:1f:b8:6c:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:05:D9:16:81:66:90:CD:80:40:50:AA:22:3A:D3:4B:A7:3D:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26407512DA5F11EF9542AFB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f0:32:8f:a7:24:fb:59:ef:ba:88:2e:69:b0:3a:87:3f:7f:
c2:93:65:03:1c:45:08:71:6d:e6:66:73:2a:3c:fb:41:19:ce:
db:b3:e7:e1:b0:1e:66:d8:0a:9a:5c:e8:44:0e:d9:74:46:56:
3f:4c:6b:d4:86:e2:56:25:a4:b4:94:68:fb:8c:f8:de:fb:5f:
b8:46:13:6d:8c:1d:19:99:b5:80:cb:1c:73:49:02:bc:40:0d:
9b:97:4e:b1:6a:4c:34:23:f4:29:48:3c:a9:af:c1:83:19:69:
21:e1:76:e7:e1:12:b3:ce:c5:df:11:9b:d3:c3:46:a4:65:bc:
85:6c:0e:06:59:06:d5:35:89:85:74:79:3b:81:36:8d:9c:e5:
9d:9f:95:50:fe:29:d5:c2:b1:36:0f:1f:a6:6d:e9:7a:7f:b6:
ee:bf:80:ff:dc:fb:33:cb:b4:03:91:69:dd:5f:96:f9:7f:04:
c1:e2:bf:97:8c:22:e8:9d:5a:89:3f:64:44:a0:37:8e:23:60:
30:0d:32:be:af:02:d8:3e:ae:e1:36:0c:68:fd:4f:79:b5:70:
8a:57:40:f8:60:a8:36:c1:df:09:0f:77:44:64:14:59:0a:80:
59:eb:21:39:1f:28:ce:29:24:22:76:24:4a:9d:12:8a:f8:a8:
0b:7d:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:04 2025 by rpki-client