Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB228CCD56311EF8DDF2247762E951A.roa
File: BAB228CCD56311EF8DDF2247762E951A.roa (raw, json)
Hash identifier: TmFr0SQ6L0ocrqHwNzLeMtRBbwKYfEpq+zqAHIQkhNw=
Subject key identifier: BE:C0:AA:2D:66:DD:30:B1:6D:35:4E:BE:07:69:B8:97:7C:BB:FF:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB228CCD56311EF8DDF2247762E951A.roa
Signing time: Sat 18 Jan 2025 06:16:18 +0000
ROA not before: Sat 18 Jan 2025 06:16:15 +0000
ROA not after: Sat 22 Feb 2025 06:16:15 +0000
asID: 395886
IP address blocks: 154.202.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81262 (0x13d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 06:16:15 2025 GMT
Not After : Feb 22 06:16:15 2025 GMT
Subject: CN=678b4732-4868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:bd:9f:f7:1f:3c:d3:54:e7:a6:73:35:69:
55:1f:98:4a:dc:bc:2e:e5:0b:11:8e:d0:a4:e3:67:
2c:98:29:23:69:2f:39:c5:24:02:de:8e:e6:8e:f0:
ce:d5:d8:84:b3:6b:fd:f2:8a:09:25:7c:44:61:c2:
8c:77:e8:d8:84:18:e8:98:57:b7:74:db:b8:da:79:
f3:36:3f:bb:4e:a6:03:d4:5a:16:2c:b1:70:55:34:
b7:af:c3:33:d3:0d:77:e0:b3:16:59:7e:07:5c:0e:
0c:5e:ff:87:1e:bd:91:3b:28:1e:ef:64:05:d6:cb:
5f:2d:17:f2:87:44:d2:52:a9:02:81:29:e8:3f:b5:
1c:80:64:27:17:b1:91:97:df:ac:e5:21:73:5a:fa:
c4:e1:2d:ab:d1:ee:83:fd:47:90:17:73:43:4c:f0:
cf:fc:9c:2a:cb:a4:f6:64:22:cf:48:5b:a7:2c:de:
f7:12:b5:af:0d:93:7c:e5:f1:1c:35:f1:e3:f2:a9:
33:64:6e:e7:4e:a5:66:69:d6:7c:bf:40:36:82:b7:
1a:33:7a:f7:bd:38:41:28:b5:79:ca:72:a4:24:ed:
ca:ff:af:88:de:7c:72:ba:2c:8d:2e:95:e1:bf:a3:
70:ec:a3:03:e6:85:fe:a3:8c:26:05:9d:28:a5:88:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:AA:2D:66:DD:30:B1:6D:35:4E:BE:07:69:B8:97:7C:BB:FF:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB228CCD56311EF8DDF2247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d3:03:19:b7:9a:8e:ea:e9:39:33:e6:ab:65:7a:ca:09:11:
b8:b1:42:d3:0f:36:1a:ad:73:c5:cf:b8:62:2a:7a:54:95:ec:
76:1d:85:f6:69:7e:67:87:13:05:89:89:eb:01:c2:84:aa:ec:
b8:6c:d7:20:2a:c6:0c:6e:9c:ea:6f:0e:e3:f6:b2:61:5c:a0:
e3:cb:37:44:f7:c7:03:c1:f3:48:1e:04:fd:84:6d:3c:d1:51:
cc:b8:5f:bb:cc:2f:d5:a4:ad:f5:70:5b:c9:0e:b5:3b:67:d3:
5b:49:30:06:5b:1c:23:2e:6e:0a:54:de:11:87:3c:95:da:a0:
af:de:1c:84:48:2e:30:4d:56:ca:58:c9:09:3f:be:e3:ca:a0:
47:14:39:78:fd:1b:9b:1b:3c:60:ad:a0:04:64:89:19:d9:e0:
ee:b4:f1:fe:e8:4e:a7:cc:ed:0e:3e:56:4e:6e:c4:74:4c:3c:
e2:7c:eb:1e:4f:c5:f3:1e:f3:02:03:32:f5:a7:c1:d1:7a:1c:
43:70:af:45:40:d5:62:76:e2:92:53:9f:b9:9f:92:a5:4f:b2:
42:f8:96:8d:51:dc:b7:98:c3:07:47:5c:3b:57:72:45:ef:55:
f3:8c:46:8b:3f:af:71:ca:d4:c3:03:86:3c:18:5a:cb:8a:c4:
94:a1:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:08 2025 by rpki-client