Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F52144C91A11EFBE720963762E951A.roa
File: 34F52144C91A11EFBE720963762E951A.roa (raw, json)
Hash identifier: V5VnQ68iYPAOiewUVP/mZ+rp8xT55FS8wmjmmRUV4+4=
Subject key identifier: 34:ED:ED:CA:01:62:AD:C2:F6:E1:58:AB:76:F7:9A:DD:68:BC:55:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F52144C91A11EFBE720963762E951A.roa
Signing time: Thu 02 Jan 2025 14:59:47 +0000
ROA not before: Thu 02 Jan 2025 14:59:43 +0000
ROA not after: Mon 13 Dec 2027 14:59:43 +0000
asID: 17561
IP address blocks: 154.222.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78579 (0x132f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:59:43 2025 GMT
Not After : Dec 13 14:59:43 2027 GMT
Subject: CN=6776a9e3-4659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:8b:89:72:c1:bb:56:94:e0:36:e1:b4:dd:
29:5e:55:da:a2:35:22:0d:1f:73:a0:ff:ad:15:f3:
8b:b3:29:9e:fb:60:02:12:65:b8:36:2d:bc:c7:a4:
a7:de:c9:ed:a1:51:ce:5d:0e:2f:23:0d:c4:13:24:
63:56:3e:bf:d9:b1:dc:6d:46:75:71:17:1d:5c:ec:
50:f4:10:02:25:2a:4b:cc:97:d8:08:e8:7a:a8:0c:
61:cb:19:17:79:10:49:4c:3f:65:32:11:1b:6c:6f:
56:5b:a8:e3:b3:48:e2:55:44:9e:d9:cc:c9:d6:24:
68:af:40:25:d5:23:a1:cd:a1:90:da:b7:d7:c9:80:
22:ca:ed:e7:cb:cb:12:b0:81:db:34:3b:30:7a:6b:
e3:28:f7:11:89:a5:b5:9a:a0:fb:73:86:1b:90:25:
c5:70:30:92:ce:88:cd:63:dc:b5:88:56:31:33:a9:
d0:f6:c6:0b:d6:49:d7:4f:77:a4:b0:47:6a:c1:96:
2c:93:96:4a:f2:43:6b:a6:da:a6:1a:53:c6:df:54:
6d:dc:bd:48:15:0e:8a:55:09:7d:dc:ee:8c:14:0e:
3d:c9:12:55:50:b5:21:51:e2:5e:00:f8:14:97:4b:
58:02:c9:50:f1:57:32:ff:4e:77:a1:8e:f2:c4:47:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:ED:CA:01:62:AD:C2:F6:E1:58:AB:76:F7:9A:DD:68:BC:55:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F52144C91A11EFBE720963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.34.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9e:f5:c5:1f:87:fa:d1:d6:63:64:92:71:43:2b:48:1b:19:
80:58:80:8a:af:30:d0:de:27:4a:06:06:cc:4e:a1:1f:26:63:
e6:0e:f1:4b:10:1f:72:e8:23:7f:6b:09:7c:3c:b3:c0:97:de:
75:58:51:96:79:9f:b1:db:5e:d0:fb:fa:b5:91:0d:e2:ea:7e:
31:45:54:60:dd:c1:54:3b:7e:c5:de:80:f3:2c:41:ab:65:1a:
2f:8f:79:cf:02:2b:07:4a:e6:92:e6:78:42:c8:5b:56:6d:cd:
51:7f:53:30:fc:ab:ea:5c:d1:73:47:9c:7a:f6:31:ae:6a:42:
b9:7e:a2:ce:53:4b:5c:b2:07:a0:c3:ab:23:e6:84:ca:dd:55:
c2:f9:ba:e0:f4:b8:28:40:6f:f4:31:83:c9:5e:11:0a:1b:f4:
80:0b:ff:2a:e2:79:91:50:1d:57:b3:5a:38:8b:75:df:70:f1:
b9:3a:52:5d:bc:28:c3:fc:9a:3c:78:84:af:28:a1:30:5b:d6:
52:8e:aa:b4:2e:96:2f:cb:9e:1f:0b:d8:26:49:48:3e:1e:84:
3d:07:98:b4:4f:42:6e:6c:be:41:ac:79:c1:33:0b:a9:91:a6:
09:61:71:66:b2:f3:2e:50:b9:ca:67:88:66:a3:4f:e2:e5:6e:
a3:75:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:50 2025 by rpki-client