Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAA3530C37B11EF8EA9F5AB762E951A.roa
File: BAAA3530C37B11EF8EA9F5AB762E951A.roa (raw, json)
Hash identifier: KlDVMllm1HHALqSuO+PAdLAiUGN3iiRNQcVtWZKJugI=
Subject key identifier: 00:72:7F:34:72:FF:50:EA:0C:A1:89:15:9E:06:5E:DB:43:EC:69:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012728
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAA3530C37B11EF8EA9F5AB762E951A.roa
Signing time: Thu 26 Dec 2024 11:22:45 +0000
ROA not before: Thu 26 Dec 2024 11:22:41 +0000
ROA not after: Sun 12 Dec 2027 11:22:41 +0000
asID: 17561
IP address blocks: 154.94.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75560 (0x12728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:22:41 2024 GMT
Not After : Dec 12 11:22:41 2027 GMT
Subject: CN=676d3c85-7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:65:06:e4:59:30:f1:e1:10:ab:90:aa:ee:
8c:7b:08:4f:44:a2:5f:a4:2d:83:6d:91:83:fb:5f:
6e:bc:7f:70:9a:c1:13:04:0f:1a:1f:20:9a:7c:c2:
8e:7d:d4:e4:a0:46:ae:25:b7:f7:b9:3e:56:f3:8e:
be:42:b7:86:93:05:a5:a1:ce:c4:99:e9:1e:da:29:
3f:0b:d1:a3:4f:52:a5:78:b3:af:f7:fc:f6:1c:45:
29:ee:ff:8c:3e:77:0d:0b:e5:0c:68:33:62:6c:f9:
6e:c8:29:f8:95:a8:9b:64:51:96:c5:81:45:44:be:
f2:d9:2e:68:e6:40:c7:6b:50:79:d4:42:d0:95:57:
23:74:56:47:1e:ac:a8:6b:ec:84:de:8a:05:22:2a:
db:af:66:e7:22:dc:74:6a:75:af:0f:49:1b:94:d8:
64:c0:1c:20:cf:5b:e9:c3:57:5f:ee:ed:a9:af:ec:
b2:ec:c3:69:cf:85:76:f9:c6:aa:ed:53:a5:fd:8d:
f9:5e:37:b2:58:9e:60:10:22:b8:7b:f2:8a:32:03:
ef:e2:0c:f2:26:83:5b:81:eb:c5:ba:bf:ed:66:64:
4d:5f:99:3e:55:9b:66:12:19:f3:c6:f5:61:fe:29:
61:a3:00:b5:cf:8d:75:6a:74:d9:6e:eb:d4:9e:e3:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:7F:34:72:FF:50:EA:0C:A1:89:15:9E:06:5E:DB:43:EC:69:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAAA3530C37B11EF8EA9F5AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:e5:df:49:2a:c4:3b:25:92:c7:2c:39:be:36:43:c5:dd:
95:63:67:ed:c0:47:21:07:3d:d3:ee:06:9f:0d:c8:57:62:83:
bc:c8:af:ec:a3:9e:d7:48:c2:e7:fb:82:c1:3d:f3:18:2c:35:
88:33:43:ab:f2:27:b7:9a:37:40:40:fd:bd:78:52:60:c1:81:
94:a4:25:53:97:12:55:48:bf:23:88:e0:31:44:4e:21:c8:49:
9a:11:e5:95:f3:29:5b:5d:86:e6:71:11:04:21:47:87:9c:40:
6b:cf:30:96:ea:22:92:6e:26:18:ee:a0:6a:ea:5f:0e:80:b9:
aa:d4:52:71:6a:04:7f:bf:e8:81:73:da:96:78:63:7b:a9:ed:
5d:19:da:35:83:a7:96:e6:f2:63:ce:9b:fa:93:39:82:d3:ea:
4b:a1:5d:7b:ac:2d:81:57:08:d0:7b:aa:ff:33:a1:a5:be:c8:
d2:0f:a8:09:c6:a5:a9:2c:a2:ad:df:ad:7c:d5:fb:16:94:51:
a0:e1:a5:29:a6:47:5f:00:a9:22:db:ec:db:1e:30:23:a6:12:
5e:8b:dd:eb:96:b8:8a:a1:57:1f:f0:e8:60:23:2f:17:63:4b:
8d:14:97:be:62:df:06:d2:e1:e0:0c:dc:d8:c0:99:7b:45:b4:
f5:07:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:18 2025 by rpki-client