Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53520CDAC53F11EF9E056B61762E951A.roa
File: 53520CDAC53F11EF9E056B61762E951A.roa (raw, json)
Hash identifier: XAk1zolcernxSzDztHh/GZUrVgAo2FvPcCLZ3r1X83s=
Subject key identifier: 3F:E7:CF:2B:45:AD:58:E5:54:14:7E:1B:AB:17:71:77:56:E1:C8:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53520CDAC53F11EF9E056B61762E951A.roa
Signing time: Sat 28 Dec 2024 17:15:24 +0000
ROA not before: Sat 28 Dec 2024 17:15:21 +0000
ROA not after: Sun 12 Dec 2027 17:15:21 +0000
asID: 17561
IP address blocks: 154.206.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76909 (0x12c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:15:21 2024 GMT
Not After : Dec 12 17:15:21 2027 GMT
Subject: CN=6770322c-c0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:84:71:8d:91:bc:88:ae:19:c8:1d:b6:9e:
23:dd:5f:58:ea:0c:86:7f:96:69:82:43:1b:19:53:
51:19:02:67:02:2b:c3:fc:16:45:d4:22:7b:12:dc:
f0:7d:5b:47:2a:26:01:78:29:fd:89:48:b5:3c:54:
a6:10:86:0c:b0:e7:aa:82:8e:cc:3e:87:31:9d:0e:
ce:5b:da:45:8f:19:cd:c4:67:10:6a:eb:dd:6d:a3:
16:75:bc:d2:0a:b9:22:75:09:99:b8:38:96:4c:e8:
81:a9:b3:db:9e:f6:49:ed:29:63:9f:7d:01:f0:07:
23:5a:d8:cc:22:e3:bd:eb:ea:02:0b:dc:6c:18:d8:
56:4f:c2:fd:35:23:9b:78:64:f9:de:54:be:8e:8d:
2e:77:74:ea:a7:75:2d:ff:f0:dd:d8:c1:bc:e5:5c:
fb:30:fb:c8:42:23:72:cd:25:98:33:8f:7e:59:b2:
32:92:6d:e2:20:c0:cd:40:b7:88:b7:eb:58:df:c6:
78:ff:5d:b6:73:7b:c3:70:5b:8c:6e:28:1f:43:1b:
40:69:f0:93:0b:79:1c:45:32:c6:b7:95:55:28:d9:
38:3f:48:13:a0:eb:a6:8e:7f:99:ca:22:9f:9a:d9:
d8:e6:a5:00:01:38:a9:76:90:9f:f8:cd:ce:db:9a:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:CF:2B:45:AD:58:E5:54:14:7E:1B:AB:17:71:77:56:E1:C8:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53520CDAC53F11EF9E056B61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.238.0/24
Signature Algorithm: sha256WithRSAEncryption
37:16:59:c3:5d:e4:27:c4:82:21:a7:ba:1f:99:dd:9e:fd:56:
ed:e5:42:a4:d0:f3:da:8b:f7:59:a5:6d:cb:10:3c:0c:72:76:
b6:12:ea:3a:31:be:cc:e6:aa:bf:78:37:76:71:e6:c3:05:43:
9b:c1:e6:b1:c7:85:b3:fa:95:19:9d:dc:0d:f9:28:f7:00:4b:
6a:a3:52:45:49:42:2e:da:71:8d:29:91:5b:59:67:c3:44:72:
8e:97:c4:31:3a:55:be:59:64:22:51:c2:3c:dc:7b:fb:e4:94:
6b:9e:e9:46:3a:63:77:f1:b7:b9:e3:85:4d:06:f5:77:cf:6f:
85:ef:b8:6c:a8:30:a1:eb:9f:4d:f1:f4:22:e9:23:0f:22:47:
79:d1:9e:33:ab:80:6c:89:fa:c4:68:78:5f:e2:63:34:df:d4:
d6:a3:ad:03:7a:b3:15:ae:e4:b2:76:4f:6e:c9:81:ce:f0:58:
6c:fd:c1:84:24:c7:48:51:eb:f1:e2:ee:76:f4:6f:64:6f:64:
90:78:25:f0:3e:55:33:29:fc:c6:0e:d5:5c:9f:6d:e7:c0:5e:
e8:75:76:86:68:fe:7b:9e:e3:91:a4:1c:9e:60:a6:00:50:6c:
b5:15:de:2d:26:b3:dd:f0:96:ee:a3:97:d8:c7:01:c8:03:88:
47:e1:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:42 2025 by rpki-client