Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0901FB4C5E911EF806DE597762E951A.roa
File: A0901FB4C5E911EF806DE597762E951A.roa (raw, json)
Hash identifier: Bor+NfPpYmZ5bvsNYcmHM0a0t1BdKrtoICT0fXFk/S8=
Subject key identifier: 34:B4:50:84:38:E0:F0:A4:27:8B:6A:F3:07:1B:1D:BF:FA:9E:27:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0901FB4C5E911EF806DE597762E951A.roa
Signing time: Sun 29 Dec 2024 13:34:28 +0000
ROA not before: Sun 29 Dec 2024 13:34:25 +0000
ROA not after: Fri 12 Dec 2025 13:34:25 +0000
asID: 984
IP address blocks: 154.210.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77208 (0x12d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:34:25 2024 GMT
Not After : Dec 12 13:34:25 2025 GMT
Subject: CN=67714fe4-d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:2c:15:6f:a8:1c:14:f4:7c:12:85:67:d4:
e1:d4:97:c3:77:b8:54:e4:e3:ee:e9:05:38:35:46:
76:24:cc:6a:93:4c:81:49:ad:24:80:fc:17:fb:dd:
62:a1:27:4d:02:3d:aa:13:67:8d:7e:26:69:b6:ef:
00:ad:32:d5:54:ba:bb:10:39:00:b0:7d:fe:4e:bb:
75:b5:42:af:11:1f:7f:a5:a4:f5:bc:ce:33:86:7d:
42:54:ed:6e:db:ba:06:e0:ab:88:a4:27:f9:ad:0e:
9a:43:77:20:66:ed:f5:91:05:cb:0e:e9:4f:39:9b:
e1:ad:42:c7:5c:3e:59:c6:66:4a:3e:05:d2:33:3f:
e2:ff:ea:e5:72:18:13:a6:a9:e8:66:dd:66:dd:96:
8a:db:ed:7d:12:7a:8f:6f:3b:12:f5:50:a4:bb:39:
54:b0:66:26:d1:66:44:42:6d:8b:3b:8a:34:26:17:
e7:4a:9b:d5:24:67:e8:b7:19:72:81:fc:c0:7d:5e:
0a:53:85:40:f2:9c:07:d7:57:02:f5:da:ab:d5:6c:
ad:a5:8e:92:20:e7:0f:ca:eb:a8:35:b3:a5:d0:bc:
1e:e1:43:94:23:50:fd:b3:e3:4c:f3:dc:83:3a:58:
2c:bb:e2:0d:87:6f:15:1e:62:cd:aa:3b:4e:9f:d0:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:50:84:38:E0:F0:A4:27:8B:6A:F3:07:1B:1D:BF:FA:9E:27:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0901FB4C5E911EF806DE597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.251.0/24
Signature Algorithm: sha256WithRSAEncryption
01:96:a9:60:3c:39:cc:12:8c:12:0e:de:fb:e9:a1:41:90:5e:
7c:3a:79:1f:bc:d0:03:a0:d3:1f:38:14:c5:fb:aa:bc:55:fb:
fd:14:87:e8:a4:57:00:37:84:17:4b:12:aa:53:91:0c:86:d6:
1e:29:78:6c:8e:56:a0:4c:a7:0d:c8:17:8e:9e:b2:13:87:b2:
40:84:1c:32:b5:1a:2f:e2:14:b1:ab:90:be:2a:6b:ee:b7:05:
8b:e6:2f:b1:de:2c:01:41:7d:01:c4:58:ad:83:c2:c3:82:1b:
48:9f:70:d9:6a:e4:f7:67:c0:1c:f8:0c:75:b9:84:c0:f0:4d:
49:77:79:f9:94:6b:5e:0f:c7:6d:d4:54:06:25:a0:50:02:81:
a9:e1:b2:33:29:80:33:4f:da:63:30:f5:75:ef:0e:2b:91:eb:
30:43:a5:8d:02:0a:47:38:64:23:e4:41:ff:90:d7:8b:53:fa:
95:55:b4:1a:41:3b:16:06:ab:fb:d1:c8:54:82:37:40:85:8a:
b3:99:0e:d5:eb:df:5f:a5:d8:14:d2:77:20:02:37:86:1b:97:
94:0b:5b:80:5f:da:44:19:33:5c:8b:51:65:a6:63:56:da:e7:
33:48:09:78:24:f1:c8:9b:90:1d:66:83:0d:ba:49:36:36:48:
31:56:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:51 2025 by rpki-client