Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F149D4C54D11EFB56362B6762E951A.roa
File: 32F149D4C54D11EFB56362B6762E951A.roa (raw, json)
Hash identifier: wWjDdaHXob23g3+RaG8QiAFWfZlHcHySK0iY/k8i5wU=
Subject key identifier: F6:F8:9E:9E:AA:E4:03:4E:AF:6D:08:40:EC:90:A4:5D:C9:0A:23:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F149D4C54D11EFB56362B6762E951A.roa
Signing time: Sat 28 Dec 2024 18:54:43 +0000
ROA not before: Sat 28 Dec 2024 18:54:39 +0000
ROA not after: Sun 12 Dec 2027 18:54:39 +0000
asID: 17561
IP address blocks: 154.209.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77037 (0x12ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:54:39 2024 GMT
Not After : Dec 12 18:54:39 2027 GMT
Subject: CN=67704973-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:c6:ae:63:77:e5:75:c2:1c:8b:9d:10:e2:
9c:eb:b8:89:1a:2f:ae:12:31:97:8e:f5:8f:29:7d:
44:3e:02:61:a6:08:29:07:44:99:b4:49:3e:db:be:
16:47:4f:09:a3:52:e2:4e:e7:e5:b0:ff:ca:16:9a:
d9:89:44:c3:ef:e1:a7:c6:d9:7f:6e:d2:02:47:8f:
df:5f:8a:42:d7:80:cf:77:6f:e3:d8:ee:65:e6:8c:
7e:17:f8:9d:1c:6c:46:8f:4c:ec:70:7e:0f:da:ce:
60:ea:b5:39:f9:dd:3f:62:ae:e8:00:db:de:63:fe:
b4:87:28:b0:90:82:67:7a:9e:f9:57:ea:e2:7b:d7:
d1:de:a5:ab:fe:d2:dd:4a:6b:c6:9d:53:cd:1d:dc:
8f:c4:b9:e4:76:27:6a:87:3a:89:1c:f9:5d:e6:28:
7c:db:94:97:5f:e4:f7:c2:4b:f8:f7:57:3f:5d:8c:
30:ca:7f:2f:1a:3e:48:ae:a5:2d:5c:82:d3:3a:74:
a0:a3:e4:57:07:2b:00:56:85:e2:4d:4b:cb:31:1d:
7e:c5:58:6f:b4:b5:2e:fb:96:14:77:c7:cb:08:5c:
22:ae:ff:c0:ea:7c:29:28:46:f6:2b:d3:ec:cb:bc:
6e:a9:ee:5f:52:98:4a:fb:81:ca:c5:20:68:9a:ad:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:9E:9E:AA:E4:03:4E:AF:6D:08:40:EC:90:A4:5D:C9:0A:23:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F149D4C54D11EFB56362B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d6:c9:3f:29:e6:51:b4:9f:38:a2:cc:b1:c1:bf:37:02:5b:
0f:f6:c1:c6:71:88:e4:83:67:38:1c:dc:bc:33:46:2f:aa:1a:
a9:b7:15:8e:2c:b3:94:f4:5b:ea:a2:47:0a:c1:5e:b1:a9:95:
b2:4c:99:e2:6f:72:eb:a6:3d:e5:80:9c:eb:1c:0b:19:84:e1:
96:7f:b7:f7:96:1b:dd:bf:e0:04:fd:bc:03:d8:f5:30:f7:18:
14:65:8c:54:2e:0e:e3:ff:5c:02:75:e3:31:0b:13:1a:d9:a9:
f5:4d:65:6c:02:30:54:14:87:a7:bc:d4:8e:df:38:4d:b5:a5:
f8:d2:fb:26:24:52:a4:97:8b:4b:fa:6a:3e:c5:a5:5e:28:a3:
a8:26:ec:e1:09:c8:f0:da:68:c1:61:eb:15:ac:4b:7d:f0:1e:
c7:f9:8f:a4:15:e5:da:03:67:79:96:b1:d1:e2:82:3a:0b:44:
df:07:40:3c:1b:e4:63:11:9f:e8:49:97:91:fd:88:db:8c:25:
7b:ab:a7:13:f2:54:e7:0f:1a:f3:2e:27:f5:d3:41:70:54:c2:
a9:ae:10:05:b5:3e:b2:e5:14:ef:4a:6a:1c:06:9c:3e:00:cf:
d3:2c:c2:a4:d5:0e:d3:22:69:14:8c:dd:ce:08:97:62:1e:ea:
24:10:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:54 2025 by rpki-client