Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3492328C5F211EF9BA84252762E951A.roa
File: A3492328C5F211EF9BA84252762E951A.roa (raw, json)
Hash identifier: xdR/cLz6/T2XzWjWmQX3a9OUHmrDF3OCRw9bsBuTvfg=
Subject key identifier: 64:C9:D3:78:17:79:A1:5D:97:B8:4E:CA:66:C3:27:5D:4A:65:75:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3492328C5F211EF9BA84252762E951A.roa
Signing time: Sun 29 Dec 2024 14:38:58 +0000
ROA not before: Sun 29 Dec 2024 14:38:55 +0000
ROA not after: Sun 12 Dec 2027 14:38:55 +0000
asID: 17561
IP address blocks: 154.211.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77284 (0x12de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:38:55 2024 GMT
Not After : Dec 12 14:38:55 2027 GMT
Subject: CN=67715f02-81b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:e4:4d:b0:5d:f2:6c:6a:e5:c2:72:a5:f0:
dc:1a:f1:07:5d:3b:2f:7e:20:97:53:8e:1e:64:7c:
08:65:25:29:19:d6:02:40:a0:61:70:29:4d:01:ff:
23:61:a2:20:ea:ba:e0:5a:2f:d6:04:00:e7:a2:c3:
8e:06:2f:d2:80:1d:ff:05:c5:e7:8d:67:62:30:0b:
34:ce:a9:25:c1:4e:a5:26:9e:19:1e:22:19:68:2c:
1b:5f:45:7f:5d:12:4c:48:e8:9e:99:ba:16:2b:f1:
24:05:07:69:1a:f8:8c:df:dc:3d:2d:f5:75:42:4b:
95:8f:35:33:6d:fa:f8:30:b8:36:a8:8f:01:a4:3f:
c2:56:58:91:54:03:cd:3f:bc:3c:d2:7b:18:eb:11:
32:b6:c7:5e:a8:cc:3a:3f:7c:90:7a:ca:d7:6b:2f:
b9:a8:74:a2:d1:76:5d:97:e8:e7:1e:d5:38:85:2c:
44:fd:db:61:78:68:9a:dd:cf:1e:fa:e9:51:dd:db:
82:02:c9:1d:9d:39:57:be:13:7e:4f:d3:01:11:8e:
5c:d5:91:ad:ae:ba:93:04:06:e8:f4:06:83:23:29:
dc:7c:ef:9d:ce:bf:e3:5b:3f:af:f6:14:a5:86:97:
6a:98:26:e2:c2:bc:47:7c:06:dd:66:eb:1c:5c:46:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C9:D3:78:17:79:A1:5D:97:B8:4E:CA:66:C3:27:5D:4A:65:75:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3492328C5F211EF9BA84252762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.60.0/24
Signature Algorithm: sha256WithRSAEncryption
19:40:03:7d:cc:73:68:04:49:d5:d0:84:1b:b2:04:6b:5b:57:
82:83:99:5e:75:65:3d:61:a3:65:70:0a:cd:f4:19:d6:9e:a7:
be:68:a0:8a:ea:62:4c:f9:09:69:f3:22:6c:9b:a3:92:9e:eb:
68:a0:e1:b5:7d:8a:59:94:c2:dc:6a:fd:e3:a8:45:a8:45:90:
14:25:68:a8:0a:90:89:96:f6:03:a4:35:ea:8a:80:d6:61:70:
80:87:fb:06:3c:9c:2f:43:88:d1:aa:65:7f:a0:1f:07:df:25:
e3:9f:b4:4e:c3:52:ab:e4:d7:53:42:98:02:7c:9f:0e:5c:0b:
59:c1:99:a2:09:02:4a:64:c5:ff:cb:6c:dc:c0:e7:26:39:2d:
71:f8:e8:33:d3:e8:d4:8b:c6:1d:15:a4:28:89:16:7b:64:df:
47:63:b1:67:9e:45:81:0e:03:6c:88:54:58:91:90:4c:f1:9f:
16:0a:2f:12:0a:64:50:fc:d8:a9:0f:1c:7c:95:54:8d:7a:56:
d8:fc:f2:c7:3f:3c:4c:dc:02:27:6a:fa:c7:ae:03:15:7f:38:
15:59:2d:c2:e6:f7:79:a0:46:97:2e:30:79:c7:20:76:70:d6:
6e:e5:da:02:e6:76:c6:0d:80:5e:19:37:e1:da:0d:9b:45:fb:
dc:a6:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:39 2025 by rpki-client