Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904877DAD24811EF98FE5CB8762E951A.roa
File: 904877DAD24811EF98FE5CB8762E951A.roa (raw, json)
Hash identifier: EB81E2UU5gSTzp2+qbNnEMxhmTq+9blpL9ju/Y5uGPc=
Subject key identifier: EE:BE:20:41:EC:33:3A:21:B7:48:8E:8C:4D:51:AB:B3:33:B0:9B:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ADB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904877DAD24811EF98FE5CB8762E951A.roa
Signing time: Tue 14 Jan 2025 07:24:17 +0000
ROA not before: Tue 14 Jan 2025 07:24:14 +0000
ROA not after: Tue 18 Feb 2025 07:24:14 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 10:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80603 (0x13adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 14 07:24:14 2025 GMT
Not After : Feb 18 07:24:14 2025 GMT
Subject: CN=67861121-6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:43:d4:29:19:a7:c2:3f:1c:54:19:bc:eb:
ae:2d:b9:31:33:39:75:48:ec:ca:45:ff:f9:15:14:
58:19:4b:df:69:70:57:3f:24:ee:e1:ff:bd:fb:a9:
f2:fd:7c:e7:a8:cf:5b:a3:aa:72:d6:ed:3b:49:52:
3b:34:8c:22:6c:59:b6:59:d4:fe:96:24:f9:59:b4:
4d:49:81:0a:d9:33:3e:e5:64:59:e8:36:46:48:d5:
ed:fd:5a:16:44:25:51:83:16:36:22:1c:18:55:49:
b6:76:1c:29:15:b0:97:e9:80:f0:3f:9a:a9:8d:55:
26:34:2f:02:71:f7:cd:ad:72:ed:93:a0:9a:2b:84:
7c:dc:8d:d5:68:31:52:bc:98:9c:ab:43:2b:2c:c1:
04:55:80:d3:98:58:fb:59:43:aa:b7:a7:41:30:14:
9c:1f:f9:88:e0:b3:53:4a:91:f4:d8:3b:d9:47:a2:
56:18:2b:27:57:ca:98:27:d7:b4:c8:b8:0f:c3:65:
9d:7c:2b:70:b6:3a:7d:19:a4:d0:c6:a6:18:8c:6b:
4a:f1:8a:d5:c8:df:cb:45:b6:8b:ef:9a:87:ce:ff:
e1:36:47:fb:9c:86:ad:1b:60:ee:06:0b:cb:81:19:
01:27:0f:a7:a2:53:dc:91:7f:e0:cb:df:21:f4:11:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:20:41:EC:33:3A:21:B7:48:8E:8C:4D:51:AB:B3:33:B0:9B:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904877DAD24811EF98FE5CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0/24
Signature Algorithm: sha256WithRSAEncryption
30:80:5e:10:8c:a8:37:56:48:dc:7d:fb:f3:52:a8:50:e9:ec:
f4:28:52:fe:ac:0c:ce:db:8d:2c:35:ab:62:16:3b:96:ae:cd:
b0:49:5a:69:b9:e9:b8:1c:e7:72:6a:ca:d0:12:37:ef:44:8a:
b0:91:b4:29:03:4f:b4:ad:0b:fb:32:73:d8:04:d2:46:80:8d:
9e:c0:1c:21:e5:13:ca:14:20:fa:a1:c1:f4:b5:72:0b:3a:bd:
19:56:0d:f3:44:db:81:bf:81:a2:a0:ca:72:a8:10:0c:29:a1:
65:67:25:b7:9f:22:f2:34:0e:6b:c4:d2:14:67:93:30:da:be:
a3:a4:86:1e:7b:72:ae:22:ad:1b:84:42:22:fc:8f:fe:6e:6f:
fa:b8:12:c0:31:79:5d:ef:f8:69:06:12:8f:6c:57:62:1e:ea:
80:b1:a7:b0:3f:ad:36:e4:4c:89:4e:d0:5f:8f:d1:a7:d1:8c:
72:30:4a:bb:d8:c2:16:f5:91:13:a5:76:b8:82:e8:ab:36:7a:
0e:b2:44:d4:b6:26:dd:e1:75:19:63:b3:52:af:51:87:dd:bb:
ab:31:43:f7:19:98:26:de:0c:ed:4d:39:00:8a:af:db:96:16:
17:11:a9:ad:3c:14:a5:c8:ed:5d:42:f5:31:9f:55:40:9e:79:
05:98:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:26 2025 by rpki-client