Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00AA458CF2E511EFA03CA77C762E951A.roa
File: 00AA458CF2E511EFA03CA77C762E951A.roa (raw, json)
Hash identifier: 5PAjCAoszsdGdujc95Eh68HNwlCIoY35p/wF+eYoOpg=
Subject key identifier: 4C:26:4F:A8:0C:A5:99:59:ED:EB:C8:C2:18:F5:A0:C7:82:BC:52:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00AA458CF2E511EFA03CA77C762E951A.roa
Signing time: Mon 24 Feb 2025 19:24:44 +0000
ROA not before: Mon 24 Feb 2025 19:24:40 +0000
ROA not after: Mon 07 Apr 2025 19:24:40 +0000
asID: 138915
IP address blocks: 154.223.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89332 (0x15cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:24:40 2025 GMT
Not After : Apr 7 19:24:40 2025 GMT
Subject: CN=67bcc77c-c228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:55:23:a9:51:f4:d4:1e:78:7e:70:05:1f:
b7:0c:e0:b3:ca:81:61:e6:f4:39:16:e2:ff:71:3d:
16:16:03:e8:2f:d3:7f:1c:86:94:6a:36:4a:5e:fb:
56:3c:60:70:c3:b2:f5:24:6d:4a:60:92:8d:5b:19:
41:44:e7:82:47:20:b7:3e:6d:b3:74:5f:5e:1a:c0:
52:d3:65:53:d4:71:c7:11:57:6c:59:ac:fd:9f:21:
05:e5:c3:e2:27:60:fd:fa:8e:56:cd:94:61:a6:fa:
42:db:a9:eb:6c:11:c8:a2:97:c1:cb:5b:bf:94:87:
8c:31:d8:fb:fd:7c:af:c0:c7:c8:e3:c2:82:46:4c:
a5:82:17:c9:f4:5f:2f:db:f0:d8:b4:37:a7:e4:50:
6b:62:01:9f:c5:01:b6:a1:50:6c:37:9f:23:d3:90:
7d:21:51:97:05:af:c4:87:7d:ab:2b:b1:47:01:05:
82:d5:2b:36:e9:dd:fb:49:0a:6b:51:39:6a:94:77:
02:40:70:52:9d:47:f4:af:98:f3:1e:9d:c4:ec:ff:
9d:46:ab:a3:f8:21:83:de:5a:cb:93:3c:3e:83:58:
c4:87:f9:83:e0:f2:62:7d:4c:13:c1:d0:63:97:1c:
9d:55:d5:fc:d5:a1:da:98:1b:2e:7b:d8:37:bd:6c:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:4F:A8:0C:A5:99:59:ED:EB:C8:C2:18:F5:A0:C7:82:BC:52:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00AA458CF2E511EFA03CA77C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
28:50:1f:06:e6:e9:90:05:4b:2a:59:f2:f5:23:e6:b7:66:c2:
b8:cb:a8:22:aa:9f:d4:84:a7:34:9a:96:6d:80:4f:f8:03:ae:
27:0e:7e:76:d1:b3:77:9c:e1:07:95:ee:bf:60:14:f5:4f:ee:
80:bf:1e:a5:81:f6:0c:92:c9:ea:ee:2a:b9:58:ed:f9:3c:07:
85:b0:ad:18:09:59:2b:e6:52:58:52:46:a6:b4:06:19:b1:8f:
75:33:41:90:83:69:02:f1:fd:db:8a:75:31:d3:97:9d:1e:cc:
da:ff:ba:14:af:31:c8:54:41:c5:7a:df:e1:35:c0:69:72:81:
86:4b:c1:b5:a6:21:bf:36:98:fe:9f:a6:9b:fc:5b:fc:ba:a4:
bb:0d:d8:9b:66:d5:2b:43:62:29:c9:41:b5:d0:96:60:0c:6c:
af:ee:d5:5e:e4:1e:ae:28:90:53:0b:d0:f0:8b:48:c4:bd:54:
ab:d0:67:a4:0a:89:01:c5:d3:ac:74:fc:ba:db:49:27:d1:1c:
6c:70:64:81:1c:39:84:65:a6:6f:48:6b:ca:65:da:3f:e2:fc:
5f:ee:3d:29:59:db:5d:c8:a8:18:83:1b:92:34:72:ad:e8:16:
b6:b0:87:2a:4a:00:f2:66:88:04:b8:2b:4f:1e:18:ae:8e:4d:
5d:34:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:00 2025 by rpki-client