Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9312C14CC94111EF949A7259762E951A.roa
File: 9312C14CC94111EF949A7259762E951A.roa (raw, json)
Hash identifier: xdfhlo0q5lC6B0AknnXAHqCa+sTxCft0DglN7hXZ/XU=
Subject key identifier: 54:80:A5:E6:14:B5:C5:81:3B:75:3E:0F:9E:0C:81:5A:C0:3A:C5:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01342D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9312C14CC94111EF949A7259762E951A.roa
Signing time: Thu 02 Jan 2025 19:41:35 +0000
ROA not before: Thu 02 Jan 2025 19:41:31 +0000
ROA not after: Mon 13 Dec 2027 19:41:31 +0000
asID: 17561
IP address blocks: 154.223.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78893 (0x1342d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:41:31 2025 GMT
Not After : Dec 13 19:41:31 2027 GMT
Subject: CN=6776ebef-12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:67:85:14:f5:8d:12:5c:65:1d:f2:00:7e:
bd:f1:99:b2:99:fa:98:71:1c:35:ab:2c:51:cb:4f:
a9:e5:84:b7:4e:c1:2f:c4:93:a6:2a:f1:83:f7:10:
48:19:70:cf:92:a2:58:f8:90:72:4d:04:a3:fd:2b:
bd:46:e1:53:bc:06:b1:ed:a7:36:e1:88:c6:e8:7a:
a3:61:6d:63:c3:55:6b:d1:b7:6b:d8:85:6f:52:02:
d0:39:cc:d9:52:07:dc:73:f8:17:17:a6:7a:a9:e8:
e8:26:53:68:ca:37:40:a6:5e:53:9a:72:5e:84:6b:
0e:bf:59:4f:9f:8e:94:f3:85:37:29:c8:44:35:69:
7d:52:52:c4:56:44:6a:4d:f1:28:e4:73:99:a9:0b:
56:8c:e5:16:0e:94:84:f9:c4:ff:f1:cb:cd:52:b7:
52:7f:c2:b7:5c:47:cb:d6:1e:58:1e:22:37:2d:99:
3e:fe:e8:e4:22:44:74:f3:70:0d:d7:a5:7d:c1:7f:
3e:50:23:56:82:01:f3:bb:83:a9:3d:87:76:cb:4c:
65:b9:a8:75:60:ec:1e:da:5a:47:2b:44:13:b0:ef:
a0:5d:ff:24:f5:2d:3f:37:a1:96:09:21:90:fc:71:
56:63:ef:c4:b4:33:1c:93:c4:ae:35:26:76:02:2b:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:A5:E6:14:B5:C5:81:3B:75:3E:0F:9E:0C:81:5A:C0:3A:C5:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9312C14CC94111EF949A7259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:89:e9:8c:c6:7b:b6:d5:6d:1e:99:7c:3b:9b:e3:07:af:24:
9f:14:eb:be:17:c2:d2:a1:a5:6d:12:60:2e:6d:c1:da:32:64:
de:95:7e:6b:22:fd:4a:2c:cd:15:8e:fb:f6:d1:e9:6e:34:65:
60:9e:75:4e:06:e1:ae:63:1c:5d:cd:33:9d:68:ae:6c:66:2a:
5d:89:aa:43:0d:54:e6:ea:8c:d4:33:de:3f:45:45:fe:0b:94:
2c:14:d7:c3:ec:5b:57:42:3d:f5:e0:df:d1:cf:f8:9f:e9:97:
4f:54:8c:99:53:21:da:84:61:95:69:6b:bd:71:91:95:4f:a0:
a9:81:76:d6:2c:d8:c9:48:d4:51:2f:02:3b:0f:6a:8a:d4:83:
e0:6a:a4:b0:85:f0:dd:3a:7a:a7:6a:d6:f3:24:c4:d2:ac:d1:
cf:f7:01:89:68:89:41:85:fa:ed:bd:54:73:37:b0:99:51:e6:
b2:9b:20:dc:19:d1:b0:12:ad:fe:78:4a:59:0d:34:83:16:b0:
31:2c:75:1b:2a:13:9a:ba:d7:7d:58:db:c3:9d:62:b9:6c:72:
72:ac:7c:f5:55:37:f5:31:74:3d:bd:d9:5c:07:a8:40:99:42:
02:64:e4:40:c9:51:51:12:91:69:4d:80:ef:17:2d:9d:22:50:
19:18:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:32:03 2025 by rpki-client