Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD29840C53311EFACC6A997762E951A.roa
File: ECD29840C53311EFACC6A997762E951A.roa (raw, json)
Hash identifier: tN5R2H4xWeli0C1qnbxScjyAgZpXgXyqlK0+b2w03pY=
Subject key identifier: FB:C6:C2:EB:FB:74:05:CF:06:19:61:75:EF:3C:59:81:FC:68:F1:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD29840C53311EFACC6A997762E951A.roa
Signing time: Sat 28 Dec 2024 15:53:48 +0000
ROA not before: Sat 28 Dec 2024 15:53:44 +0000
ROA not after: Sun 12 Dec 2027 15:53:44 +0000
asID: 17561
IP address blocks: 154.204.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76803 (0x12c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:53:44 2024 GMT
Not After : Dec 12 15:53:44 2027 GMT
Subject: CN=67701f0c-938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:ed:20:c6:7c:19:4e:37:72:82:c5:ca:1b:
00:69:1c:7a:65:fe:a7:f8:7f:b1:4b:47:34:53:a1:
ef:a2:87:00:72:d5:42:c0:dd:b7:3b:98:22:1e:7c:
1d:85:00:0c:4f:20:05:f2:c5:03:df:e9:8c:b6:82:
b0:24:ed:21:4f:a7:48:be:d1:06:55:12:72:7a:a5:
29:ea:b8:95:66:c2:e2:68:e1:f0:1a:cd:cd:a9:63:
d4:33:0d:fb:a4:3a:33:d7:bd:87:be:74:bc:a5:b3:
12:c6:c5:8a:63:48:cf:50:43:fa:34:49:1f:5f:1d:
3c:8e:da:20:b0:b0:cc:a1:e2:43:5a:c8:ab:28:ef:
ef:2c:ad:e0:c9:47:ac:ab:d6:b1:d4:89:df:fd:d0:
c5:96:33:e1:1d:79:20:70:76:97:9a:56:59:22:f6:
85:69:46:aa:ea:c8:ab:fa:fc:4e:12:71:68:73:b4:
fa:86:7c:50:b1:a0:77:15:0e:1b:d4:68:b2:b9:bb:
d6:e8:7b:ad:89:a3:b9:f7:82:b1:7d:07:32:92:4b:
2b:2a:8e:8b:9e:94:db:44:6c:4a:d7:51:75:ea:dc:
71:20:48:af:fc:ff:59:21:84:ea:8b:42:ee:91:26:
b3:41:3e:da:b2:ab:d8:48:d4:da:8d:9d:8d:17:38:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:C2:EB:FB:74:05:CF:06:19:61:75:EF:3C:59:81:FC:68:F1:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD29840C53311EFACC6A997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6a:d8:92:66:f8:3c:df:61:94:f6:18:36:48:ba:47:f3:19:
2b:b5:79:e6:74:75:1e:83:a7:e8:57:ff:8b:71:84:1a:40:b8:
e0:94:64:00:ee:35:44:21:02:7b:6b:7e:fe:86:5a:32:15:1b:
28:c2:d1:93:ce:16:ee:f1:4b:06:00:d3:90:dd:c6:dc:00:50:
7c:84:e5:04:fa:3e:74:de:0d:13:6e:6f:04:6b:af:aa:da:ff:
28:07:ee:20:50:80:1e:d2:73:42:8b:11:f6:86:b3:14:0d:e7:
dd:2b:97:c5:9e:8f:5b:70:f0:bb:95:ee:13:8e:58:e9:e7:39:
d7:80:c4:59:f8:bc:0e:f2:43:fe:4a:52:b1:03:2c:a0:da:23:
2f:50:7c:36:f1:c6:31:87:62:63:93:08:0a:c2:73:37:d6:66:
95:4e:0d:eb:3a:3c:54:2e:27:8e:73:c8:a2:c2:d3:05:1c:18:
26:96:c4:b0:a7:63:d8:3d:e7:59:df:e6:c7:72:ee:16:ea:0f:
b2:09:4d:bd:9c:3c:0e:b9:46:1f:f6:b5:80:7c:ec:d6:fa:43:
1d:60:f6:47:84:91:84:cc:2e:87:0a:3d:87:ca:14:85:4f:2f:
05:13:64:79:b9:f8:d2:a2:4b:03:d4:f0:fd:30:b2:be:39:ea:
14:c5:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:03:14 2025 by rpki-client