Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C352ED0C35011EFA0A0F59A762E951A.roa
File: 6C352ED0C35011EFA0A0F59A762E951A.roa (raw, json)
Hash identifier: iQjGi2Pe4FI9bjISFO0ERbRtQZivUvSsYhFL4PcUoNY=
Subject key identifier: 43:50:5A:95:34:22:AF:A8:96:9D:5F:53:2E:F8:96:20:FC:B3:85:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C352ED0C35011EFA0A0F59A762E951A.roa
Signing time: Thu 26 Dec 2024 06:12:45 +0000
ROA not before: Thu 26 Dec 2024 06:12:42 +0000
ROA not after: Sun 12 Dec 2027 06:12:42 +0000
asID: 17561
IP address blocks: 154.95.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75169 (0x125a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:12:42 2024 GMT
Not After : Dec 12 06:12:42 2027 GMT
Subject: CN=676cf3dd-33aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:c6:a8:3d:6d:b5:4d:61:6d:75:1e:58:1d:
55:a9:2a:f4:36:e6:3a:de:cf:dd:12:8d:61:09:72:
d5:de:a8:fe:3d:79:19:7b:d0:00:18:55:0d:ab:0f:
15:74:c1:6d:9f:37:36:2b:4d:e6:80:94:7b:9c:72:
52:ad:30:86:66:fe:29:d5:7f:3d:b3:fa:d1:6f:f0:
36:17:14:52:54:7a:4e:10:90:c7:de:02:7e:43:de:
7c:9e:3e:d3:10:76:23:7c:bf:09:39:d2:1b:9e:66:
66:44:87:5b:e7:33:f4:55:f7:2d:2f:13:12:d5:f0:
16:db:30:9c:ee:da:63:da:0d:7d:fb:0f:8a:33:9a:
27:62:9f:56:9d:ca:c3:b7:0d:54:3c:83:d1:d5:8e:
6a:d8:eb:bc:18:b3:af:1c:d7:be:4c:9d:9b:cb:58:
fc:90:97:0b:59:8b:df:55:ec:13:ee:fa:ef:fd:97:
5b:e6:5a:e4:bb:20:c6:5c:34:d9:85:ae:b0:1d:49:
31:75:8d:f3:38:17:73:f9:90:03:59:83:35:7e:f8:
ea:60:4f:cf:de:e8:e2:dc:26:63:24:c9:49:21:83:
53:0b:b5:58:7d:0c:e8:ae:58:fc:3d:09:89:d7:71:
b9:79:30:22:e2:5e:a7:db:6a:e0:27:15:76:60:d4:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:5A:95:34:22:AF:A8:96:9D:5F:53:2E:F8:96:20:FC:B3:85:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C352ED0C35011EFA0A0F59A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:54:0f:da:74:fc:66:53:43:04:e5:0c:d2:18:ed:38:b3:c7:
2f:02:f2:d8:18:57:f1:11:22:bb:1c:79:a5:10:13:3f:6f:56:
6e:9f:1b:5d:b7:0e:7e:96:0a:a8:74:b3:9b:f3:86:cf:04:19:
4f:c8:cd:a8:f0:5d:75:19:28:58:07:48:a7:89:44:db:e7:b1:
4d:fa:3d:99:de:ae:e3:1f:dd:e2:50:24:af:27:94:45:67:ed:
e7:48:46:82:14:ab:35:9e:6e:13:88:2b:f5:40:c5:64:be:96:
82:49:1f:7f:d7:29:44:8d:30:55:09:eb:54:8a:ba:cd:ba:b9:
f6:0d:ea:4e:3e:14:60:5b:b7:bb:da:41:07:cd:58:71:af:c1:
8a:57:ec:ba:ee:0b:07:fa:d4:fd:a6:73:ad:78:25:6f:fa:60:
91:9a:b8:15:74:18:91:09:c2:e9:f2:c8:6a:c5:d3:1e:b1:51:
5b:84:b2:ff:c3:13:76:ac:e6:e2:1d:a8:f0:3e:4e:3e:82:96:
97:60:17:8e:da:0c:de:48:3a:ad:30:fc:ea:a6:0e:91:4f:80:
fb:cd:00:1a:11:cc:6a:3a:d4:fa:60:5c:33:cd:94:2c:8f:23:
6c:b2:bb:fe:e3:a9:e6:e7:0a:30:48:a0:80:55:49:da:83:7e:
dc:23:ed:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:27 2025 by rpki-client