Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/329A152AB5F711EF89DB7F78762E951A.roa
File: 329A152AB5F711EF89DB7F78762E951A.roa (raw, json)
Hash identifier: KvZzBkphf9M4I/RmvCqCLqqse/b1X3eEI6cAPSwDIEQ=
Subject key identifier: A6:35:7E:AF:A7:D1:C4:ED:30:65:21:B1:36:64:97:14:4A:1F:A9:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/329A152AB5F711EF89DB7F78762E951A.roa
Signing time: Mon 09 Dec 2024 06:31:18 +0000
ROA not before: Mon 09 Dec 2024 06:31:14 +0000
ROA not after: Mon 19 Oct 2026 06:31:14 +0000
asID: 149014
IP address blocks: 154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72107 (0x119ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 9 06:31:14 2024 GMT
Not After : Oct 19 06:31:14 2026 GMT
Subject: CN=67568eb6-51f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:39:25:6d:ed:ee:9f:ef:a6:4f:b3:fb:16:
4d:d3:29:71:64:18:68:1b:10:20:7f:16:1a:cc:27:
33:39:b7:0a:e3:41:f4:5d:73:77:27:63:b3:47:a4:
51:b5:d3:49:a9:f3:20:5d:80:fd:8b:51:e1:60:c4:
82:dd:4f:40:f3:91:86:15:78:33:9c:05:90:f7:9c:
c6:9e:0b:5a:7b:85:79:5c:45:8e:bf:60:bf:8d:a7:
8b:29:29:8f:b6:5f:d9:36:62:ca:f1:51:cb:2c:72:
f2:a5:03:9d:03:44:32:da:7c:2a:4d:80:a0:a2:52:
f6:1a:de:a4:01:19:49:10:60:f8:15:4a:c4:63:91:
3c:51:91:3e:6c:62:14:bc:c0:8a:8b:b5:37:df:46:
2c:8f:d3:84:c5:c8:c2:5b:22:e0:d9:f6:8b:fb:99:
7b:0d:12:ff:c4:b7:fe:8f:df:d8:ce:5a:5c:0d:f1:
25:2d:99:b8:e9:63:11:1e:17:29:47:87:70:58:19:
3d:fd:46:16:29:e2:52:cb:8e:63:31:b7:c8:e6:46:
71:7d:40:a8:09:bd:96:93:97:43:e6:19:40:5f:79:
71:d9:ce:63:84:e2:66:8a:0b:8c:84:9e:5d:23:4a:
82:9a:5b:45:d3:ec:81:e6:74:7c:7a:7a:f4:41:f9:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:7E:AF:A7:D1:C4:ED:30:65:21:B1:36:64:97:14:4A:1F:A9:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/329A152AB5F711EF89DB7F78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
37:a9:31:c4:3d:f7:46:5d:5c:61:2e:f8:a4:9b:35:9e:0f:9b:
ab:8e:3d:7b:ae:d8:9c:ec:48:b6:7e:98:fb:9f:5d:99:f5:ec:
f6:59:ed:8e:ae:24:d9:bd:33:db:3b:b8:60:8b:2e:1f:cf:f9:
c2:59:dd:fa:90:42:80:0a:33:a8:c4:4d:3d:9f:ac:4f:a1:cd:
2d:5c:2f:6b:a8:c2:a8:13:75:00:c9:7b:40:f4:3f:86:fc:33:
c5:84:77:76:89:04:86:03:18:3c:82:36:91:57:74:14:98:82:
c2:d7:d5:56:92:a8:cf:5d:04:67:ab:0b:4d:d4:94:6b:8c:72:
55:1f:08:62:62:1c:6d:af:39:ea:e2:ec:8c:4c:4b:42:30:8f:
38:9b:95:42:b5:a0:c2:2a:a6:c3:64:03:02:ca:0a:e9:f4:8c:
3f:bd:b3:29:0f:9f:b1:c6:2e:be:99:72:ac:26:4d:a7:32:f6:
23:9f:8f:82:40:5d:3c:d8:c7:06:03:dd:72:f0:0e:be:46:b8:
86:0b:f3:04:e4:51:9f:7e:45:35:c6:c5:40:3f:d2:bb:14:41:
93:bd:80:d3:4e:a7:f5:90:18:98:22:d8:5f:ca:c2:2a:ad:cf:
92:47:44:f7:2d:ab:52:97:0e:01:a2:dd:a2:9b:c9:f5:70:ae:
b6:ae:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:49 2025 by rpki-client