Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E70CFEC1BA11EFB269247B762E951A.roa
File: 54E70CFEC1BA11EFB269247B762E951A.roa (raw, json)
Hash identifier: DsBzOGCcOqqmsJqiMpF1hFgAfMaPYOworawklbWATrY=
Subject key identifier: 22:18:D9:A5:03:A3:17:3A:83:1C:45:1A:81:A3:C2:31:2A:4F:59:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E70CFEC1BA11EFB269247B762E951A.roa
Signing time: Tue 24 Dec 2024 05:45:50 +0000
ROA not before: Tue 24 Dec 2024 05:45:47 +0000
ROA not after: Wed 10 Dec 2025 05:45:47 +0000
asID: 984
IP address blocks: 154.193.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74211 (0x121e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:45:47 2024 GMT
Not After : Dec 10 05:45:47 2025 GMT
Subject: CN=676a4a8e-a826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:01:de:00:33:9d:e2:8e:04:2f:a8:37:09:
13:bc:2e:68:44:2a:78:48:6a:df:d1:06:cf:dc:04:
89:23:bc:5c:cd:49:4e:28:e5:c0:00:c4:87:96:af:
00:75:a6:3a:85:d6:93:d6:9d:eb:23:29:b0:83:d0:
f3:e4:d8:1c:3e:1b:e0:e3:2c:e7:d8:72:ee:33:9e:
36:6e:a3:6d:dc:ab:a7:e4:02:1a:3e:f0:c1:34:77:
97:0b:f0:8e:63:da:f4:d3:87:94:90:05:3b:4f:ce:
3c:ad:d2:22:9e:87:d5:e5:d6:80:a2:ce:a3:41:f8:
f9:85:6e:29:c2:23:3e:60:f9:30:c5:a2:3e:f7:08:
95:10:73:8e:de:74:71:9b:bf:5d:12:ed:29:98:c0:
e9:cf:11:c1:0b:b2:58:be:0a:86:9b:4d:01:e8:48:
3d:21:37:ab:3e:51:b6:4a:2a:41:1f:09:25:07:36:
d7:a8:f3:16:e1:49:f9:be:3c:54:cd:1f:7d:b0:65:
8a:ae:db:42:af:8a:57:18:d9:fc:8b:4a:a4:65:e4:
93:15:fc:01:7f:de:7c:12:1f:0a:0a:bb:ee:bd:c2:
b9:0a:28:3f:2c:9a:23:94:1c:5d:97:67:87:8d:32:
52:60:fb:cf:9c:3d:a8:a5:68:63:73:33:6d:e6:04:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:D9:A5:03:A3:17:3A:83:1C:45:1A:81:A3:C2:31:2A:4F:59:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54E70CFEC1BA11EFB269247B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.171.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ef:c6:89:44:b0:48:5f:2c:1c:da:a5:44:df:7d:2b:c7:3a:
76:5e:34:0e:1f:d8:b3:5a:aa:86:25:f0:1f:93:bb:8c:df:2d:
75:23:55:e1:42:9f:50:33:33:97:7a:b5:34:82:a3:0b:a1:15:
7f:f9:f4:dc:06:4c:6c:d6:a0:64:20:8d:c0:0c:0e:25:90:3b:
f0:2e:be:23:77:26:c6:e5:b5:06:b1:c6:72:a0:e6:06:1e:1d:
0f:35:10:16:36:a0:b1:28:7b:77:fb:b5:f4:93:b2:f4:57:e5:
c7:fe:e1:2a:d4:26:d8:6d:cb:9a:27:35:80:9c:c2:73:7c:b7:
6b:1d:1c:29:a7:60:1e:ca:d1:87:db:c9:88:8f:94:9b:40:83:
d2:46:1e:ff:57:23:19:ae:cc:64:c9:92:b3:f0:53:3b:3d:4c:
61:4c:f4:a3:9d:9e:ce:4e:65:f5:69:da:b4:20:8b:16:95:9b:
65:32:25:13:8e:ae:a0:c6:b6:58:26:bd:17:ca:e0:e1:d7:dd:
42:1e:bb:60:0e:b6:4b:85:d3:72:eb:de:c0:90:fc:d7:e2:5f:
dd:de:67:20:d0:69:e9:14:16:e6:89:69:6e:ef:6c:81:2c:bf:
aa:c4:83:6e:4b:72:0b:39:88:c7:fc:df:29:13:f8:a9:9a:a5:
bd:0d:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:24 2025 by rpki-client