Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5685B194C5E011EFA6FF4260762E951A.roa
File: 5685B194C5E011EFA6FF4260762E951A.roa (raw, json)
Hash identifier: u8VjBZ9C+6MrUcrWwPVRLqgs2rNblwD5rdrkurAb5z4=
Subject key identifier: C9:EF:6B:6C:B7:09:C9:32:7B:BC:19:09:9B:2D:F2:42:F9:EB:3E:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5685B194C5E011EFA6FF4260762E951A.roa
Signing time: Sun 29 Dec 2024 12:27:59 +0000
ROA not before: Sun 29 Dec 2024 12:27:55 +0000
ROA not after: Sun 12 Dec 2027 12:27:55 +0000
asID: 17561
IP address blocks: 154.210.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77128 (0x12d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:27:55 2024 GMT
Not After : Dec 12 12:27:55 2027 GMT
Subject: CN=6771404f-502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:8c:e9:80:d7:7c:33:77:8c:34:cb:3c:78:
bb:b0:3f:1f:d7:fc:0e:23:04:d2:64:6b:67:1c:4f:
d3:7f:a3:8f:c2:ec:61:09:c4:07:92:63:42:5a:e1:
17:b5:18:6b:6b:9b:7a:88:6b:e1:b4:d7:20:ef:6b:
52:5d:13:3d:ac:2c:9e:fe:16:0b:6e:8e:78:3c:33:
1a:b1:6f:6c:1b:62:a1:5b:62:93:66:4b:14:02:10:
42:03:52:7a:52:64:e8:53:22:2a:63:15:d6:73:de:
ee:da:96:4a:bb:9b:9f:ba:7b:ff:ea:74:84:52:91:
13:f9:e1:2f:ef:3a:6c:d7:0b:fe:3c:d8:ce:64:99:
c7:7a:09:8b:f1:f1:b6:b3:29:fa:51:9e:d3:4d:48:
da:25:0a:95:4e:5b:ae:6f:15:9f:e6:76:bd:ad:67:
36:16:26:99:89:30:29:40:61:4c:b7:1d:df:66:9c:
c6:03:a8:a0:d7:7f:03:99:80:d9:47:40:3e:db:7b:
0a:35:e7:f2:50:aa:71:11:f0:64:26:fc:8a:b7:68:
b9:d0:ff:79:b9:5d:80:22:a3:41:4e:00:1a:70:a0:
df:45:0f:aa:f6:43:f0:47:cb:66:25:63:3b:07:2b:
95:73:13:bb:c0:8c:9b:17:bb:0f:06:e3:b3:7e:e9:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:6B:6C:B7:09:C9:32:7B:BC:19:09:9B:2D:F2:42:F9:EB:3E:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5685B194C5E011EFA6FF4260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.102.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f8:c9:a1:85:19:51:cc:19:61:2d:7a:97:18:15:37:53:63:
fd:ae:70:9d:2b:c5:d5:7a:45:6f:7d:6f:6b:f9:db:e1:df:22:
ed:62:1f:0d:f2:fa:1a:dc:89:5b:67:a5:85:21:9a:f3:3a:2c:
3c:87:9e:87:3b:b9:07:fa:b3:67:2a:67:6a:08:37:a5:21:fe:
eb:f9:8f:94:42:d2:d5:e3:0f:04:25:db:c4:04:b7:60:68:52:
4d:9b:53:c5:e7:43:ed:1a:39:d1:38:a0:78:ac:31:65:b4:fc:
9e:be:1e:23:bc:9e:3d:94:0f:99:c5:7e:31:57:e9:1b:11:e6:
39:c8:73:24:bd:57:bc:23:a1:6a:b5:a7:fd:a7:2f:dc:9d:e7:
fd:17:f0:66:0d:44:69:2b:a8:9b:9f:8c:bf:99:bb:01:a8:c5:
84:0d:07:39:fe:60:2c:ab:83:fa:19:c0:6b:22:6d:3a:70:17:
19:56:26:05:03:27:82:af:98:73:4c:89:64:39:b5:ab:bc:54:
68:8e:47:a0:f1:9d:f1:a3:e7:93:14:4d:8d:1d:f2:de:b8:5c:
fa:c5:bd:b7:c5:e2:de:b0:50:ee:d1:3c:0c:48:c1:57:61:c3:
53:4c:b2:86:bf:31:4b:f9:29:e1:0c:25:64:d9:05:3b:9f:71:
2c:cf:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:35:45 2025 by rpki-client