Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/720ECC80E2D611EF82389155762E951A.roa
File: 720ECC80E2D611EF82389155762E951A.roa (raw, json)
Hash identifier: tv2JsVphoBDje/BlMz5IV76xOvLrWJW98YS6EWkhV30=
Subject key identifier: AB:4D:89:8F:C1:CB:09:15:28:98:88:9A:A7:A7:AE:C2:41:88:3C:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/720ECC80E2D611EF82389155762E951A.roa
Signing time: Tue 04 Feb 2025 09:00:14 +0000
ROA not before: Tue 04 Feb 2025 09:00:10 +0000
ROA not after: Wed 30 Apr 2025 09:00:10 +0000
asID: 18229
IP address blocks: 154.210.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86208 (0x150c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:00:10 2025 GMT
Not After : Apr 30 09:00:10 2025 GMT
Subject: CN=67a1d71e-69a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:4d:45:fd:0e:48:48:af:c7:dc:4f:23:5f:
1c:43:db:40:ab:81:c6:21:43:3d:10:a8:05:81:63:
1d:cc:16:6a:2c:8f:8a:bf:33:a3:a4:c5:6e:09:ac:
0b:24:4e:96:ec:13:03:ac:c2:2d:6d:46:50:c0:bd:
06:5a:53:46:3a:49:7d:39:87:dd:5c:1a:f2:39:e4:
c9:cc:47:70:2d:59:01:48:89:fa:7f:e0:e0:ef:04:
fc:dd:85:92:ab:80:7b:f8:1f:37:d1:a1:40:08:27:
f0:fe:22:d4:e5:d9:4e:59:6f:2b:fd:f0:bd:14:5a:
0d:cd:a2:7f:4e:88:b2:1c:3d:7e:5e:57:a7:de:d2:
f9:5e:76:39:ca:78:82:92:7b:8e:29:c0:75:f4:00:
03:01:a3:ff:80:19:fa:58:36:9d:c2:c3:e9:40:3d:
0c:98:8e:f7:0f:42:0f:41:38:74:cd:c8:fc:93:47:
e8:0b:0b:bc:82:c2:7f:e2:7e:08:06:6d:9b:f0:e8:
e4:a2:80:2f:c6:1b:7e:64:cf:7c:2b:d7:87:b1:6c:
89:3f:ca:96:4e:28:a4:fa:41:cc:93:09:53:5d:97:
6e:b3:c2:49:fe:d3:00:0d:d3:ba:4d:94:98:1c:2b:
aa:4c:8e:23:3b:ee:38:4e:35:f2:c0:79:9e:46:a4:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:89:8F:C1:CB:09:15:28:98:88:9A:A7:A7:AE:C2:41:88:3C:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/720ECC80E2D611EF82389155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0a:da:2f:0a:bd:39:80:b1:b2:db:b7:0a:be:af:02:f6:93:
e4:24:fd:6e:86:e0:78:33:6d:1f:37:12:4a:15:08:7f:a4:0c:
08:06:bb:6c:50:11:d5:92:51:55:8f:76:06:45:4d:62:73:f8:
17:93:54:15:76:ee:20:46:0b:79:ad:31:f3:97:02:3f:7b:5d:
6c:69:1f:04:51:13:23:88:09:fa:6a:74:6c:cd:79:8e:4d:6a:
2c:4a:0c:49:d7:9e:55:73:ca:72:1b:38:84:8a:95:6e:15:08:
e9:20:de:f0:c4:a9:b4:f8:fd:7a:3e:71:4a:2f:bd:ba:b4:47:
4a:3b:b2:8f:49:3c:80:ab:97:cf:9b:2b:57:ce:1c:3f:b4:49:
a0:53:f1:62:87:9a:dc:bf:39:0f:0e:31:dd:4b:45:b2:70:b8:
ec:97:7c:8d:ee:e3:5a:30:d5:66:ac:76:89:84:7c:78:d2:94:
2e:a5:2c:8c:a6:50:53:06:da:c4:4e:87:ba:c4:c5:89:3c:41:
10:c6:97:63:d7:60:eb:7b:90:51:ff:9a:b8:50:5f:a8:08:15:
c1:9e:7f:fe:af:b2:2a:08:48:07:05:62:bd:57:69:18:29:c7:
f2:df:44:5c:37:50:e5:30:ff:79:a6:a0:af:53:97:98:e3:ea:
41:92:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:16 2025 by rpki-client