Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383D5162C5E311EFB7495E71762E951A.roa
File: 383D5162C5E311EFB7495E71762E951A.roa (raw, json)
Hash identifier: quW+FgsxovpEL7TJIDWUuwTSear24s5CAUfhSU7poeE=
Subject key identifier: 20:0D:CA:64:CD:3A:BC:4C:CF:28:7E:9B:43:DC:9F:7C:7D:89:F4:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383D5162C5E311EFB7495E71762E951A.roa
Signing time: Sun 29 Dec 2024 12:48:36 +0000
ROA not before: Sun 29 Dec 2024 12:48:33 +0000
ROA not after: Sun 12 Dec 2027 12:48:33 +0000
asID: 17561
IP address blocks: 154.210.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77154 (0x12d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:48:33 2024 GMT
Not After : Dec 12 12:48:33 2027 GMT
Subject: CN=67714524-67ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:52:af:f1:4a:b6:64:fc:48:63:5a:f5:3f:
db:db:8d:b0:95:45:c0:0d:29:7b:7d:88:2e:75:73:
54:27:97:21:e7:a9:c8:b2:20:18:b8:5e:dd:e2:16:
7b:47:29:5c:a5:93:e7:3f:50:72:f6:41:83:40:b6:
81:23:8e:c5:98:d3:7a:e9:3c:8f:b5:16:29:f7:90:
bf:45:5d:72:eb:7b:67:15:42:d8:cf:38:da:5d:b8:
39:09:1a:e3:b4:14:f1:76:46:a4:8f:8f:bc:4b:c7:
e9:d7:a1:bb:e8:bb:c9:fd:62:52:62:a8:e5:e9:5b:
2c:b1:fa:b8:99:f7:92:a6:e3:44:d6:80:15:19:61:
d6:31:41:c1:88:fb:60:72:72:f0:78:4a:4e:00:6b:
0d:fb:12:bf:b9:8f:21:97:66:32:4f:4c:89:5f:e8:
14:78:d1:89:b4:67:8f:23:2a:ab:33:45:41:e5:81:
21:0e:57:f1:15:a1:cf:30:9c:65:db:aa:01:51:c6:
85:83:43:cf:31:89:cb:22:a2:40:3f:df:0a:ac:1e:
1d:30:7f:06:0f:08:d6:0b:59:57:54:5b:1e:4e:ff:
61:ec:f8:0c:60:33:d2:55:22:81:17:b0:d5:c8:d8:
a6:85:ea:8b:70:2c:b2:7e:de:4f:15:6e:ce:38:e7:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:CA:64:CD:3A:BC:4C:CF:28:7E:9B:43:DC:9F:7C:7D:89:F4:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/383D5162C5E311EFB7495E71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.115.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:71:c3:5b:62:75:55:f6:a0:02:a7:6f:4f:a6:60:39:ff:16:
6d:cc:23:3c:6f:0f:a6:cc:92:34:77:00:ea:4e:bb:e2:7e:c3:
74:73:a0:da:95:86:7b:6a:ba:f0:7d:d5:5b:b5:21:95:40:3a:
00:d1:9b:4b:7e:47:ff:b9:77:44:eb:95:5e:d7:cc:c3:34:c6:
82:1b:14:f0:48:77:c3:3c:42:16:9d:87:85:8d:0e:c5:a9:5a:
79:76:b8:63:82:25:6e:fe:7d:b9:4d:30:68:4f:e6:c0:e9:75:
2e:90:c9:27:b4:cb:c5:1d:e9:3f:70:62:40:22:79:f8:db:a9:
82:1d:18:ee:b9:c2:1b:32:00:ae:15:7d:a6:b0:65:53:d2:c4:
cc:24:d8:42:2b:36:13:73:e1:8f:ed:ef:aa:c0:7d:6f:eb:da:
d6:82:3f:e0:ec:74:3d:2d:af:24:32:1c:79:14:fe:c9:74:3e:
ff:ad:d4:40:f9:3d:5a:b5:47:7d:6b:e6:04:f9:79:8c:bd:3e:
97:8e:97:38:d4:4a:fa:ee:82:40:b1:4a:ed:6f:b4:c3:68:a0:
3e:90:21:29:e4:ca:31:53:19:0e:30:f3:f5:f6:3c:f8:51:bc:
49:ef:1d:4f:2f:b0:43:b5:fb:97:51:75:b5:fb:53:8e:aa:e2:
53:28:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client