Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB5740D4E31311EFA1B8936A762E951A.roa
File: AB5740D4E31311EFA1B8936A762E951A.roa (raw, json)
Hash identifier: AiZakllq06gmAUxq5pMFmJh9qFKXXUiaw36dyUH6sW4=
Subject key identifier: C8:73:6A:4D:F5:27:7E:20:11:5C:20:0C:62:C0:25:E1:08:77:C3:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015117
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB5740D4E31311EFA1B8936A762E951A.roa
Signing time: Tue 04 Feb 2025 16:18:29 +0000
ROA not before: Tue 04 Feb 2025 16:18:25 +0000
ROA not after: Wed 30 Apr 2025 16:18:25 +0000
asID: 18229
IP address blocks: 154.210.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86295 (0x15117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:18:25 2025 GMT
Not After : Apr 30 16:18:25 2025 GMT
Subject: CN=67a23dd5-c1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:e8:82:cd:62:3b:37:42:3e:8f:9c:63:57:
87:6d:f3:78:f5:2f:30:5f:fa:45:c7:bd:5b:d7:42:
f5:5b:d5:45:a1:0d:10:52:be:30:03:cd:14:eb:66:
79:eb:80:ca:68:13:69:de:57:fe:58:68:2f:86:6d:
f5:28:2e:92:52:4f:57:1c:33:9a:60:e0:97:ce:2f:
c8:7d:3f:a5:bf:d0:e9:32:3d:02:c2:1d:be:1f:fa:
2e:b4:b2:eb:87:81:97:f1:48:cb:fd:ce:72:9e:bf:
74:e3:26:2c:da:7b:ef:3c:9a:2d:e5:57:f2:8a:18:
68:c0:77:10:46:6a:a5:74:18:46:99:08:b5:49:d7:
e6:ce:6a:b6:57:91:29:ff:79:a9:09:f9:12:3f:85:
18:6e:30:ec:cc:98:df:ae:de:5f:7f:2e:41:d0:4f:
1e:d0:75:37:d3:25:6d:d1:8b:d1:30:a2:4a:2a:81:
cb:e2:7c:99:bb:09:bd:6e:ef:e6:d6:cf:20:50:a4:
62:28:b4:85:37:2b:4e:f6:ee:7b:57:2f:89:0a:f7:
50:be:5b:b8:26:bc:a9:a9:59:3e:f7:65:fe:77:3f:
9f:19:75:76:1f:ae:6f:27:aa:44:34:e8:31:15:07:
1f:4c:09:2b:20:c1:06:21:e8:31:9b:cd:7e:73:55:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:6A:4D:F5:27:7E:20:11:5C:20:0C:62:C0:25:E1:08:77:C3:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB5740D4E31311EFA1B8936A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ff:42:3b:ea:5e:4c:db:a3:4c:f8:05:3d:e8:ed:02:5d:14:
75:e0:77:4a:5a:15:98:c0:2e:51:6e:6a:55:91:60:82:4d:5d:
d2:a9:16:87:6e:f8:3e:99:6d:09:0f:d7:6a:72:6d:54:4d:88:
0d:90:7e:9d:b0:0f:ef:04:50:dc:af:70:5c:9c:4f:3b:1b:7b:
9d:e9:23:eb:d8:1c:da:85:c1:f9:5d:90:8e:ba:11:64:b8:01:
67:53:d7:5a:29:e0:be:dd:44:20:37:12:a4:14:54:2f:e2:8c:
99:2c:6a:03:d1:fb:9c:b2:89:7b:d4:22:65:8e:e1:52:28:c5:
32:04:e6:d4:c4:04:1d:82:c9:2d:93:95:d4:5c:2c:6c:d8:20:
c5:55:15:ed:a0:f2:a8:75:7a:c4:7b:19:25:df:29:2c:cb:af:
9c:ce:91:66:94:80:3b:8c:3c:9a:7a:db:54:3d:e6:26:c1:9f:
a3:03:20:0c:68:c4:ec:8f:a1:ae:d3:d8:af:4d:31:ff:70:20:
7a:44:21:9b:07:ce:e9:1d:58:a0:82:1c:40:7f:a9:d9:20:c7:
d5:55:83:7c:07:de:f3:3c:59:f0:83:76:63:19:0d:62:7e:ce:
93:a3:2a:e7:87:03:b1:1a:35:8e:c0:2e:79:53:a3:ee:48:9b:
80:82:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:38 2025 by rpki-client