Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B279FAE31311EFA1EAF166762E951A.roa
File: 55B279FAE31311EFA1EAF166762E951A.roa (raw, json)
Hash identifier: eD/p7ee+NFKwM0i2Z6/vbddvHDhOeh7SWDH3HEJ0Oco=
Subject key identifier: 21:7C:41:16:AB:0F:87:80:19:77:48:6E:73:88:D5:B0:00:4C:21:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015115
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B279FAE31311EFA1EAF166762E951A.roa
Signing time: Tue 04 Feb 2025 16:16:05 +0000
ROA not before: Tue 04 Feb 2025 16:16:01 +0000
ROA not after: Wed 30 Apr 2025 16:16:01 +0000
asID: 18229
IP address blocks: 154.210.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86293 (0x15115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:16:01 2025 GMT
Not After : Apr 30 16:16:01 2025 GMT
Subject: CN=67a23d45-a832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:1d:44:88:e4:a5:82:29:cc:81:18:59:1e:
2a:02:ba:d9:6a:47:f2:5c:22:14:ab:5f:ca:12:66:
32:12:8e:0f:7a:92:49:ec:07:bd:64:55:fa:a2:3b:
7a:67:e7:3f:95:08:63:f8:a9:0e:78:39:a4:64:31:
1a:c7:cb:6e:17:3a:3d:bc:38:17:f4:d6:54:31:e8:
af:df:60:4d:e6:fd:e5:b6:40:06:97:cb:08:7b:ca:
df:ec:9c:a7:d0:c8:43:8c:8f:5c:46:77:32:d9:92:
77:35:df:14:1e:34:8f:a4:83:cb:87:64:91:64:c3:
d8:70:46:f3:d8:a0:b7:69:84:a4:36:33:d2:17:be:
59:cd:bd:18:16:9c:3b:73:e8:d5:5c:0d:50:fc:47:
ab:ff:54:a6:53:37:e9:2c:73:68:df:1d:c5:0f:ff:
0e:ef:fd:93:f3:57:35:82:5e:9e:7f:66:6b:35:5a:
4d:58:ff:28:ee:da:5c:f9:01:4e:94:38:8c:01:4f:
a7:33:2f:8f:1d:bb:39:77:2b:01:1f:79:40:b9:4f:
81:5e:69:88:09:a7:e9:1f:6b:31:2a:c3:38:d2:45:
89:fc:2e:37:da:89:66:be:05:fe:1b:57:6a:a4:d4:
11:95:59:ad:75:8b:86:e5:8c:3a:3d:16:12:a7:22:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:41:16:AB:0F:87:80:19:77:48:6E:73:88:D5:B0:00:4C:21:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B279FAE31311EFA1EAF166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.171.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f8:30:7d:19:25:c4:c3:cd:4a:97:f8:f0:8f:9e:6d:d7:6f:
5f:8c:df:87:63:4b:d1:64:b8:e4:cc:6b:20:d6:c8:c7:ac:5e:
c1:23:48:0e:f0:8f:57:e8:6a:e2:b6:79:75:9a:3a:85:90:20:
72:35:ce:74:f9:46:46:76:b1:db:37:f8:d2:e7:50:9d:14:67:
d3:6f:70:af:59:f9:7d:bf:f4:4b:1b:df:7c:25:56:55:8f:62:
1e:8e:67:43:b0:d3:85:37:95:88:77:87:3a:3d:d2:2c:2c:c0:
46:79:17:19:5b:10:54:dc:e4:4d:b9:1f:c1:c5:00:45:99:57:
ee:84:90:df:8b:74:fc:20:d7:78:1a:c7:b8:39:48:0a:55:e5:
82:4b:f5:e6:7a:a5:5b:5d:fd:80:41:ff:33:af:a3:d0:a5:e5:
e9:0a:b1:6d:97:93:16:49:6e:63:b3:c0:ff:28:df:cc:56:d5:
2c:88:55:9e:9b:bc:6b:a7:07:af:3c:85:90:ec:d1:ad:a9:d8:
e5:64:f5:e3:a6:44:61:eb:e1:d8:76:f4:1a:56:0f:ba:c8:8f:
47:33:3a:41:ce:62:bf:ef:bc:3d:7b:38:c6:69:4c:be:b8:e4:
85:f9:7e:1a:8c:d2:22:d2:56:3b:64:eb:21:76:d5:99:30:59:
2c:0c:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client