Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C05A2AC8C011EF906619B1762E951A.roa
File: 31C05A2AC8C011EF906619B1762E951A.roa (raw, json)
Hash identifier: ph1IJ+uG6n2/g4P0apbGmQsrLkonCwwzY0sSPXNTMW4=
Subject key identifier: EB:15:7B:FD:83:A8:BF:89:D3:1F:0A:C5:A2:B4:54:F1:79:B3:53:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C05A2AC8C011EF906619B1762E951A.roa
Signing time: Thu 02 Jan 2025 04:15:27 +0000
ROA not before: Thu 02 Jan 2025 04:15:23 +0000
ROA not after: Mon 13 Dec 2027 04:15:23 +0000
asID: 17561
IP address blocks: 154.221.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78330 (0x131fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 04:15:23 2025 GMT
Not After : Dec 13 04:15:23 2027 GMT
Subject: CN=677612de-bed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:f7:16:9f:30:ea:d7:ae:93:00:60:48:0f:
63:65:b7:0f:c1:11:b6:29:5f:f9:bb:27:d1:5d:25:
6d:62:0f:a6:11:78:2f:87:88:e1:89:35:a1:f6:6e:
53:9b:95:bb:f9:24:41:6b:60:ca:29:ef:dc:71:0e:
31:fc:70:82:3f:eb:ff:cc:53:a9:1a:bc:c0:09:2c:
15:a0:27:a6:01:c0:c9:17:5b:61:57:1b:d7:7e:af:
3f:24:1a:12:8c:8f:5a:c9:2d:b8:cb:72:3a:8a:d4:
89:70:dc:0b:b8:6e:1c:2e:75:ef:9f:32:fd:c6:69:
d6:b3:b6:fe:f8:d7:42:c4:4f:3f:0d:50:bc:22:22:
49:47:32:ee:b5:40:fb:b9:2c:82:0b:21:bf:06:76:
f6:d2:3b:16:f5:d5:38:39:2b:f0:74:84:6f:48:a3:
b0:40:50:60:1a:6c:c5:d5:f3:b2:80:18:fa:f3:5e:
c8:e6:ef:4f:f6:68:96:93:cd:24:79:88:20:14:3d:
97:45:b0:2e:e3:0f:91:60:25:f5:f4:5d:59:18:27:
66:6a:f5:52:79:bf:9a:de:13:ad:d9:4f:5d:e0:3a:
ae:8a:52:02:b8:b6:e0:7a:52:51:86:77:2e:88:f4:
6b:bb:5e:1d:8b:40:5f:40:77:af:c2:ed:53:0b:8f:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:7B:FD:83:A8:BF:89:D3:1F:0A:C5:A2:B4:54:F1:79:B3:53:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31C05A2AC8C011EF906619B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.203.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c1:18:20:13:5d:c1:9d:52:0d:6e:7a:f9:c3:3c:3d:71:50:
25:49:8d:9c:d2:ae:21:69:ee:83:50:82:d4:b3:49:15:98:7f:
f1:7b:06:92:86:84:c1:2f:07:b5:34:27:e0:f4:51:47:bf:87:
be:03:5b:0f:d6:5c:6a:c1:f8:74:59:6b:f0:2d:4d:b4:e1:e8:
fe:0d:99:d6:74:17:0e:9b:77:e6:2d:13:88:92:fe:5e:2f:d5:
f4:1f:f5:7b:74:f3:dd:0f:4a:b9:4f:42:54:6a:c2:c3:a3:e6:
30:8f:31:9f:cd:f3:2a:19:6d:63:37:5c:bd:45:2f:8b:f0:4a:
d8:83:27:d9:f2:5a:af:b0:ac:cd:65:25:ab:12:77:30:eb:dd:
c1:c0:9f:4a:2e:ad:67:68:a8:ec:dc:3e:7f:f7:63:62:f2:62:
44:87:20:0d:3a:6a:ae:52:9d:6c:dd:25:01:17:84:99:73:da:
01:5f:3b:15:f2:a1:f6:3e:56:74:b3:2b:53:0d:6a:25:cc:82:
06:dc:63:c0:2e:f4:69:1a:ad:73:26:6a:31:7a:4b:3b:2f:b7:
3f:a6:b5:06:46:9f:2b:1e:ec:5e:bf:4a:13:3a:78:24:17:6e:
ec:2a:64:c3:6f:c5:81:64:2c:b0:1f:ec:4f:34:b8:3d:9f:97:
24:a7:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:41 2025 by rpki-client