Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/310AF8ACC36511EFB1F3739F762E951A.roa
File: 310AF8ACC36511EFB1F3739F762E951A.roa (raw, json)
Hash identifier: jp5QxcstnTAz9rW18ChKoRXhTc7jOSMOlihYwQH+Ydk=
Subject key identifier: 38:58:99:6E:D9:F7:0D:1E:BF:05:9E:BE:7D:AD:20:3E:C9:6D:1A:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/310AF8ACC36511EFB1F3739F762E951A.roa
Signing time: Thu 26 Dec 2024 08:41:25 +0000
ROA not before: Thu 26 Dec 2024 08:41:22 +0000
ROA not after: Sun 12 Dec 2027 08:41:22 +0000
asID: 17561
IP address blocks: 154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75428 (0x126a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:41:22 2024 GMT
Not After : Dec 12 08:41:22 2027 GMT
Subject: CN=676d16b5-1f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:72:1a:64:74:fc:5d:d5:fd:69:67:42:b5:
61:9a:32:13:bb:80:4b:f1:9d:97:4f:b3:2c:19:c3:
83:a0:14:4a:fc:5d:a6:1b:16:c8:c9:e8:dc:ba:12:
26:31:f7:68:f7:eb:a6:0e:a5:14:3c:01:84:0b:34:
f6:18:1e:56:27:c1:89:16:91:d8:40:6e:7c:e2:9f:
a6:90:bd:cb:c9:79:30:2d:b8:d0:02:64:c8:a9:61:
7b:cf:f0:2a:9e:87:90:d9:a5:b7:c1:c7:06:33:fe:
dc:78:fb:26:2c:8b:b0:28:13:62:c9:84:18:16:5c:
97:f1:27:39:86:23:bd:39:1a:8f:75:85:4c:13:cd:
af:e9:55:9f:0a:13:7e:87:81:73:37:e1:3f:31:aa:
bd:56:6a:65:98:3c:3c:ac:a9:ce:b3:2c:02:0c:c5:
19:39:a8:69:53:64:a7:5d:3f:fc:af:2b:72:b8:30:
98:a5:8d:8b:63:7f:9a:31:a8:91:e0:45:d2:bd:d5:
f4:ec:65:d9:54:69:4e:06:c8:78:76:af:80:3d:2c:
29:2c:0f:ba:36:a9:9f:99:e4:09:e7:e3:35:3f:72:
59:5c:c8:eb:1e:23:51:5b:2d:a9:69:92:8b:9e:7d:
cf:b2:fd:f8:11:88:0a:07:ec:35:73:a7:a6:88:4c:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:58:99:6E:D9:F7:0D:1E:BF:05:9E:BE:7D:AD:20:3E:C9:6D:1A:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/310AF8ACC36511EFB1F3739F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:d9:33:b9:03:0a:60:e1:ce:e3:e0:64:04:9a:e1:81:b8:b4:
7e:eb:20:14:02:fa:b5:c9:b1:d9:a8:c1:96:b5:68:7f:a6:12:
20:b5:b6:e7:d7:1e:e1:75:04:78:93:36:90:56:97:0a:1f:90:
49:eb:45:f0:b2:80:0e:05:69:a8:ac:51:33:e9:5a:c0:65:2c:
58:7b:a2:b0:b4:fd:d8:ac:32:ae:32:d5:b8:40:02:5c:60:78:
cd:81:f8:a3:10:2e:42:84:b5:c6:61:98:29:6f:5d:a2:ac:4a:
b9:08:2d:a1:f5:86:26:a7:ce:8f:ee:b4:3f:3e:71:cf:6b:63:
a6:09:5b:f0:7d:44:d0:07:bf:f8:0f:39:96:89:6d:54:34:2d:
3c:85:2a:ce:62:07:c1:6f:84:fb:27:f8:41:cb:ea:ba:d1:14:
b8:f6:d4:c7:1b:2c:84:de:67:45:53:bf:d4:d6:06:53:c3:15:
df:99:2f:f9:aa:8f:f5:fc:91:5a:80:c6:01:a8:07:28:2b:85:
76:41:58:30:a3:84:2b:f5:ef:c9:6b:72:f2:6c:2b:82:29:43:
22:00:43:15:de:e9:4a:03:79:66:56:54:8c:36:71:73:f6:65:
45:32:d9:af:a5:40:6e:4b:1e:46:5a:36:84:af:05:6d:ad:ef:
14:3a:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:48 2025 by rpki-client