Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFC90B2C54611EF8209818E762E951A.roa
File: AEFC90B2C54611EF8209818E762E951A.roa (raw, json)
Hash identifier: VTpqPl/2D5RK2GSNpgTMvXOE4Y0LfzdXTPLIJKJBZt0=
Subject key identifier: B2:21:16:C0:14:71:36:70:B1:9B:B4:62:E5:DF:E5:F9:89:20:82:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFC90B2C54611EF8209818E762E951A.roa
Signing time: Sat 28 Dec 2024 18:08:05 +0000
ROA not before: Sat 28 Dec 2024 18:08:01 +0000
ROA not after: Sun 12 Dec 2027 18:08:01 +0000
asID: 17561
IP address blocks: 154.208.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76977 (0x12cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:08:01 2024 GMT
Not After : Dec 12 18:08:01 2027 GMT
Subject: CN=67703e84-6601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:ee:01:55:4e:a8:bb:8b:00:53:ab:dc:19:
64:9d:54:44:f3:ad:11:85:75:11:f2:09:9a:a7:81:
0b:c1:bc:27:c2:f6:dc:d0:22:db:f1:dd:55:d5:f4:
e2:67:05:cd:63:67:da:bd:a8:92:54:54:a5:ca:5e:
4a:0b:02:b9:6e:4e:90:87:ee:8c:a4:29:c7:95:84:
0e:65:55:c5:05:a2:27:bc:49:36:19:48:24:c8:e4:
7a:24:55:72:4f:85:94:29:34:f7:db:77:8b:e7:81:
1a:95:2f:2b:81:38:ce:8d:3e:84:c4:af:17:fd:d8:
f1:e3:3c:37:79:34:85:8f:2e:87:e4:f7:b1:dc:16:
4a:e1:49:eb:57:19:4e:78:8f:8a:b7:46:d5:b6:41:
96:9c:43:98:7c:24:af:1d:16:98:53:47:e1:05:56:
42:93:cc:3d:38:04:03:82:17:65:40:c0:e7:c6:ba:
6c:85:58:a2:08:de:a5:c6:2d:e3:84:eb:1c:0e:c4:
06:e7:99:6b:28:7f:75:aa:d0:59:89:cd:57:83:1d:
5b:d2:60:b6:51:4f:6a:a4:f6:c2:9f:63:f6:66:45:
e3:98:2b:44:30:2d:ef:f3:f9:c7:70:3f:5f:49:7f:
f6:c5:90:42:8f:9b:3e:30:87:67:8f:ba:8a:63:96:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:16:C0:14:71:36:70:B1:9B:B4:62:E5:DF:E5:F9:89:20:82:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFC90B2C54611EF8209818E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.189.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bc:81:41:82:6f:76:f4:df:c8:4d:10:90:99:3e:91:56:37:
6e:df:dd:45:24:39:f3:6f:04:85:c8:86:6c:bb:17:93:10:7b:
79:de:35:5c:23:44:c9:e2:34:1b:b9:c3:97:cc:94:08:5c:a6:
f2:4e:6b:14:4f:5f:fd:30:2a:9d:be:99:55:76:4f:20:50:f4:
70:61:13:9c:72:c3:80:da:8d:f6:cf:92:6f:98:84:c2:dd:99:
a0:26:1c:b1:23:0a:78:4d:2a:c5:e4:ef:e7:dd:c5:52:73:08:
32:7a:07:25:a4:4b:f7:88:80:4b:45:8d:01:30:a3:21:c0:21:
45:71:95:71:fa:e2:a8:76:32:26:0c:fb:ca:ea:b5:57:ac:f7:
31:3d:95:23:04:34:81:97:82:ab:4f:ed:bf:fc:cb:30:90:e6:
ae:b3:90:08:69:81:e7:60:a2:38:21:70:b1:64:fa:3f:b7:9a:
fb:47:5c:2a:eb:2d:e7:26:ae:d9:43:4f:69:5a:49:b7:9f:34:
89:a0:9b:50:6c:eb:15:f8:e0:54:24:d4:5d:df:a4:b1:b0:70:
92:e1:da:d5:4f:80:4a:d0:aa:0e:fc:4d:34:e0:d7:a2:73:77:
6b:41:10:f5:52:a3:52:52:3e:57:e7:a3:0a:91:48:38:ed:cd:
27:24:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:45 2025 by rpki-client