Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60229A62C8A311EFA6F65163762E951A.roa
File: 60229A62C8A311EFA6F65163762E951A.roa (raw, json)
Hash identifier: Gz7dd5yKKEtqzcOYfa0E8Jdy89T7OiUQIDNz8V1DEwg=
Subject key identifier: EB:5D:10:6E:90:85:0B:D2:70:2A:0C:DA:FA:70:D8:8C:D4:EB:4E:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013132
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60229A62C8A311EFA6F65163762E951A.roa
Signing time: Thu 02 Jan 2025 00:49:09 +0000
ROA not before: Thu 02 Jan 2025 00:00:05 +0000
ROA not after: Fri 12 Dec 2025 00:00:05 +0000
asID: 984
IP address blocks: 154.218.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78130 (0x13132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:05 2025 GMT
Not After : Dec 12 00:00:05 2025 GMT
Subject: CN=6775e285-89b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:d9:62:50:1c:3c:07:1c:d8:e9:0a:59:f6:
87:5a:5d:24:8a:0e:22:e9:3a:99:02:c5:7d:76:e1:
3d:b5:8a:3a:ff:a1:89:26:01:fd:ab:bf:e4:48:05:
2d:7b:7f:73:7d:b7:df:05:ac:74:87:85:12:e3:7d:
b5:99:22:52:5a:70:94:7f:8b:9f:09:73:ba:69:53:
5c:a8:cc:0b:b2:b8:73:04:1f:fb:bf:78:d9:38:8f:
a3:34:99:50:b9:14:57:0a:e7:11:62:35:72:07:43:
f3:c3:b4:a9:78:7c:6b:a8:f4:83:83:34:bd:a2:dc:
81:f5:9d:e3:26:6c:cd:22:e7:28:93:50:2e:9d:34:
09:07:65:1e:d9:6d:00:11:f5:7b:3c:fd:9e:2a:fb:
36:7c:eb:f0:c3:ae:9a:12:9e:33:15:45:02:75:d1:
fb:fe:90:18:70:21:aa:55:d8:e6:33:80:f6:2b:37:
0e:63:0c:70:07:1e:1a:c6:38:34:d6:a1:63:fc:2a:
9f:bd:d4:94:4f:3e:e3:46:53:86:5d:68:f2:53:bb:
f1:a0:35:cb:c4:34:bf:4c:50:08:3c:a1:7c:49:c9:
5c:ba:43:6f:5f:df:39:66:27:9b:6d:c0:fb:97:df:
1e:94:a5:1a:50:39:de:38:70:64:24:70:6f:e4:c2:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:10:6E:90:85:0B:D2:70:2A:0C:DA:FA:70:D8:8C:D4:EB:4E:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60229A62C8A311EFA6F65163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.53.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c6:25:82:5d:1e:5a:4b:bc:56:6b:be:aa:63:4b:80:4f:da:
f1:53:b1:16:ed:13:72:4e:0b:d0:0d:27:85:7c:3a:7e:1c:b1:
42:2b:f3:61:5f:6b:e3:9f:9f:5c:61:9d:81:16:05:d1:33:2e:
c6:fe:4b:63:79:0c:ad:21:cb:1a:3c:26:b7:b6:98:21:94:bb:
65:29:01:2d:7b:f5:11:f4:5a:c7:00:72:f5:bf:66:fd:b6:b3:
25:c1:6d:cc:ad:c3:5c:69:55:83:9e:1f:77:74:a4:9f:f3:fc:
e3:35:63:67:b3:ae:61:a1:20:21:cb:85:cf:92:82:70:65:45:
38:4e:7e:14:90:04:35:22:31:2b:3a:8b:91:b8:5d:fc:fd:c5:
7a:4a:8d:39:58:ee:78:6a:b8:9d:ee:6b:14:a6:f4:25:41:59:
ec:c3:00:8d:e0:db:38:8a:c7:9f:9b:bf:88:81:31:96:17:7c:
b2:3d:54:d5:1f:07:c1:63:4b:dc:36:ff:ad:d9:d2:cc:88:c1:
df:4d:1c:e3:70:59:27:6e:d1:1f:d2:e4:5e:42:b3:2c:c3:38:
08:84:f4:5a:64:5e:a6:a5:72:d9:12:aa:e6:d5:ab:f1:be:30:
c0:6f:ee:bf:cf:02:7d:b6:25:1d:93:bd:a5:49:b2:ca:4a:a8:
19:95:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client