Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0538CFCED99011EFB923D143762E951A.roa
File: 0538CFCED99011EFB923D143762E951A.roa (raw, json)
Hash identifier: pQ9A/N9J074on+b4WGPYChLlhek3FZdMqisSuuBuogI=
Subject key identifier: 71:E8:B1:58:11:C7:B5:27:2E:29:65:F3:D3:79:63:9C:B6:E8:44:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014286
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0538CFCED99011EFB923D143762E951A.roa
Signing time: Thu 23 Jan 2025 13:43:26 +0000
ROA not before: Thu 23 Jan 2025 13:43:22 +0000
ROA not after: Tue 13 May 2025 13:43:22 +0000
asID: 138915
IP address blocks: 154.205.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82566 (0x14286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:43:22 2025 GMT
Not After : May 13 13:43:22 2025 GMT
Subject: CN=6792477e-6767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:65:7a:6c:f1:4f:b5:89:0c:e3:56:98:a7:
9d:f1:de:f5:e8:91:30:b6:8f:0a:7b:16:7d:9c:5d:
5c:88:62:e2:75:ef:9d:58:2f:3e:6c:3a:31:38:ed:
7a:99:5d:c8:c3:0d:06:2a:2b:64:56:40:be:82:21:
56:08:02:c3:09:ab:dc:9e:e9:54:68:a5:40:02:00:
b2:f0:cb:da:64:09:79:0c:d7:e1:3f:fc:d4:1e:25:
8d:0a:85:57:9a:ae:63:f2:20:b6:ee:a8:35:94:d3:
42:13:91:ac:d7:bd:2c:68:82:47:59:ea:88:fa:96:
f5:a5:ed:26:bb:c9:8c:57:0a:04:7b:09:62:fa:09:
fa:61:af:e3:79:67:36:56:ab:6b:ee:3b:65:71:90:
18:f9:41:6a:88:1f:9c:5e:5a:43:f1:50:2a:75:89:
ec:d5:bd:d7:8c:c3:bc:aa:ba:c5:a9:2e:54:dd:bf:
6d:e7:36:2a:8a:06:ae:a3:62:d0:b7:3c:49:57:92:
8d:e0:e4:db:5a:bd:55:99:1f:6b:25:87:3d:c8:37:
be:59:bb:48:9a:d2:d5:08:4c:19:a3:25:eb:e2:bb:
53:24:19:ae:e3:5f:37:ef:e5:2a:99:6c:91:e5:0f:
0c:bd:49:7d:89:76:5f:fb:82:03:40:12:ec:12:71:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:B1:58:11:C7:B5:27:2E:29:65:F3:D3:79:63:9C:B6:E8:44:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0538CFCED99011EFB923D143762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9f:9e:00:d4:64:3a:03:b7:8e:1d:63:a4:14:bf:8e:60:77:
a3:77:47:43:5d:57:52:dc:5d:b4:96:a4:6e:7a:e1:bd:5c:01:
6f:29:48:2e:40:97:c3:7c:54:e9:7f:4e:4c:cf:f1:f2:57:df:
00:df:2f:c6:d4:2d:0b:03:11:37:a9:3d:c7:2d:e8:7f:12:1e:
a6:9e:b4:1c:58:21:d9:2c:81:27:6f:b2:4b:a2:28:23:7d:77:
06:27:03:81:c6:79:a8:1f:54:1a:a2:30:2f:22:51:7f:94:bf:
14:63:6e:58:10:bc:1c:9c:1d:55:42:1b:8e:b4:15:2e:f1:20:
56:e5:d2:70:1a:16:7f:5e:52:94:18:33:63:ae:5e:ad:f9:ac:
2b:6d:30:84:17:2c:e9:ac:68:63:94:67:5f:13:de:ee:87:21:
c7:eb:64:8d:7a:db:80:a2:89:b5:79:e9:43:a5:bb:55:97:39:
15:e8:32:7f:5e:c7:ef:1e:b7:9b:3f:44:3f:c5:1a:12:6b:50:
30:08:51:93:0b:7b:47:7b:1a:fe:3e:74:cb:60:f7:cf:34:07:
2d:75:b8:9c:57:7b:54:ff:95:ce:6b:37:ff:a1:8c:0b:ec:27:
6b:48:06:b2:52:24:e3:b0:b5:8a:02:e1:47:0c:57:66:9a:01:
b1:f3:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:32 2025 by rpki-client