Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A94466C53011EF938B5F80762E951A.roa
File: 29A94466C53011EF938B5F80762E951A.roa (raw, json)
Hash identifier: h8SRa0toEGe3MRqmf1rG32XrSqijHD7X4M8qPlorXBI=
Subject key identifier: 42:23:1C:79:D6:A1:20:5E:E9:95:EE:AC:77:B6:C4:5E:3D:D0:78:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A94466C53011EF938B5F80762E951A.roa
Signing time: Sat 28 Dec 2024 15:26:52 +0000
ROA not before: Sat 28 Dec 2024 15:26:48 +0000
ROA not after: Fri 12 Dec 2025 15:26:48 +0000
asID: 984
IP address blocks: 154.204.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76773 (0x12be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:26:48 2024 GMT
Not After : Dec 12 15:26:48 2025 GMT
Subject: CN=677018bc-635e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:0d:2c:fb:03:21:eb:95:f6:85:7b:0d:00:
75:35:a1:75:01:ff:27:4a:a4:ab:fc:a8:93:76:5f:
1d:42:28:b0:e9:75:7c:1a:5b:4c:ee:c4:d2:0d:a4:
b0:08:57:8e:1e:b0:05:2b:5b:1a:c4:8e:51:9b:37:
24:66:6c:48:bb:eb:8e:9a:18:ee:ab:45:e8:2f:48:
40:21:26:9e:3a:90:9b:4b:06:fe:3e:75:e0:82:7c:
9c:6f:14:d3:bf:1d:d1:07:4d:37:2d:f4:81:6d:0c:
7e:35:8c:ee:10:15:a7:45:13:22:65:73:6b:51:cb:
be:f8:4d:92:65:1c:21:89:46:e7:37:e0:d6:b6:10:
7b:53:40:ef:72:e8:df:71:df:95:80:66:96:d5:90:
51:86:94:09:9c:8e:59:3d:4f:e7:45:a4:8d:f1:6b:
fb:1a:86:32:d1:f3:98:67:fb:9c:c9:bf:40:a2:06:
f6:01:93:b0:b6:ab:1e:b2:b5:28:00:9f:f6:34:50:
dd:65:fd:08:2c:a1:01:80:1c:85:c7:a4:85:a1:45:
9d:9f:8c:19:11:8e:72:f7:e2:ac:5a:83:73:d3:ce:
de:43:ac:23:b9:c2:9f:ab:d2:5e:2c:2b:99:dd:ad:
7a:84:6c:68:09:c3:44:23:5d:89:ee:d5:69:fc:19:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:1C:79:D6:A1:20:5E:E9:95:EE:AC:77:B6:C4:5E:3D:D0:78:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A94466C53011EF938B5F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d7:90:d6:5d:da:d2:a9:c9:87:ce:61:eb:27:c9:df:ab:03:
a6:bb:b2:fb:3c:78:cd:bf:2e:f7:91:e3:8b:05:41:72:c5:5e:
86:f1:03:b7:ab:06:a1:45:08:cc:57:34:9d:f4:cc:02:4d:f3:
86:d5:71:7e:63:2b:1e:62:ce:af:26:3b:32:cf:85:65:9b:9c:
92:8b:bd:fd:a2:c0:ce:09:ca:81:f9:31:d4:ca:40:8b:e1:47:
f0:bd:1b:d0:22:c9:d7:c0:08:14:e1:98:d3:38:ff:62:de:32:
f9:bb:4e:07:e5:e9:35:1f:54:ee:de:d4:b4:e6:ad:ad:2b:16:
3f:9d:77:c2:f8:fe:ef:1c:ea:b3:a2:86:32:69:71:5e:ce:01:
9f:e3:c8:4b:1c:15:ab:79:3f:85:51:72:aa:1b:13:c2:d2:09:
29:69:d2:49:f4:88:9d:a6:a7:a9:54:e5:d3:37:58:4f:63:2d:
e8:11:00:26:5e:99:84:0d:c9:cf:56:d6:f9:14:80:50:61:78:
d8:e3:db:60:f5:46:1c:0e:01:69:72:63:3f:ae:4e:74:e8:e5:
d8:26:5b:e5:97:bc:dd:ac:34:7e:5c:68:c0:89:61:23:16:2c:
5f:70:98:cd:19:c9:21:e6:6f:e1:03:14:37:24:14:99:4a:c7:
60:67:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:49 2025 by rpki-client