Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2930DDCAF46811EFA2715B5D762E951A.roa
File: 2930DDCAF46811EFA2715B5D762E951A.roa (raw, json)
Hash identifier: udqgoE1iJ2kkVlf/BAxLVt//1ZDBZOH5yjysXwqEEm4=
Subject key identifier: 5D:BB:66:0B:8F:B2:70:CF:22:1E:A0:A6:29:60:90:4B:84:CE:67:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2930DDCAF46811EFA2715B5D762E951A.roa
Signing time: Wed 26 Feb 2025 17:36:08 +0000
ROA not before: Wed 26 Feb 2025 17:36:04 +0000
ROA not after: Sat 19 Feb 2028 17:36:04 +0000
asID: 17561
IP address blocks: 154.197.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91472 (0x16550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:36:04 2025 GMT
Not After : Feb 19 17:36:04 2028 GMT
Subject: CN=67bf5108-3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:19:8d:4e:d0:4a:d6:ad:1b:d7:4a:b9:a7:
77:f3:29:ca:bc:6f:39:10:63:75:e3:a4:86:1c:38:
f5:95:27:6c:af:ac:5f:0f:5c:b0:26:b6:54:df:d6:
f3:19:d4:6c:93:c7:a8:69:6b:01:aa:bc:9f:df:5a:
90:c8:1f:fa:43:7f:9d:eb:0b:55:73:58:3d:d6:36:
cc:70:87:57:c8:6a:54:97:d2:a4:a9:d2:d5:a7:1f:
82:2b:0a:42:6c:10:69:b8:75:72:53:54:02:a8:0e:
da:36:04:28:42:6f:8c:9a:8f:12:e0:21:d6:f9:ce:
40:ca:75:5b:8a:68:f8:68:78:18:c3:de:2b:d4:ed:
6f:53:7a:81:ce:88:7f:39:42:03:8a:f3:22:b3:89:
af:66:a4:97:6b:cd:f7:cd:a0:5f:91:50:69:df:0e:
32:44:68:90:e3:b0:09:c3:03:ba:1a:8c:b8:20:2a:
c1:e0:11:17:1f:55:a9:6e:1d:20:fd:02:ba:ea:e3:
b0:24:d0:8f:dc:88:db:61:de:52:8f:40:61:42:3a:
f8:20:a3:21:ee:c7:82:aa:e3:b3:66:e7:29:3b:27:
67:32:9d:33:04:98:23:6a:7d:40:7e:00:ab:40:2c:
e8:82:f2:4b:0c:17:cc:a5:64:25:27:f7:6b:b6:35:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:66:0B:8F:B2:70:CF:22:1E:A0:A6:29:60:90:4B:84:CE:67:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2930DDCAF46811EFA2715B5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.118.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ea:87:17:b1:86:d0:9b:b0:8e:ad:be:6b:f6:9f:39:b3:80:
63:e8:2d:4d:c0:40:c6:21:24:12:86:90:bc:bb:95:5e:c7:cf:
b3:37:09:76:4f:0b:eb:85:a5:cb:60:62:4f:aa:2e:76:07:f3:
50:cb:94:3f:fd:87:fa:f8:9f:29:de:f1:ac:34:05:83:e6:2e:
24:50:47:32:bc:1b:6a:fa:ee:7c:cc:33:4c:89:27:b1:f3:a3:
10:76:c5:a1:ef:4c:14:4e:09:ed:b1:85:44:ea:40:7c:59:23:
a0:2b:ac:07:68:83:ad:68:96:d4:71:70:2e:2d:30:07:42:62:
a4:91:0c:fe:8b:29:9c:1c:87:d1:03:66:cb:c5:52:4f:d4:62:
86:9e:9f:4d:bd:c9:16:5a:3c:98:d5:af:f8:2d:ab:14:47:a4:
e8:67:53:eb:43:25:7b:97:f7:eb:c2:42:1f:fa:a2:0a:72:5f:
33:6d:4b:8e:ff:74:ce:e2:14:b4:84:7f:79:94:51:c7:48:8f:
de:92:3a:9e:a1:ed:6e:c5:2d:fb:1b:40:b0:5b:65:a3:65:c7:
69:7e:b2:2f:28:a8:65:b7:8a:12:49:1c:d1:1f:e3:d9:92:f0:
85:cd:4d:f0:a6:40:3d:72:78:30:ed:aa:9a:22:e7:30:a4:68:
e7:bd:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:16 2025 by rpki-client