Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0663513EDAE511EF867EFE49762E951A.roa
File: 0663513EDAE511EF867EFE49762E951A.roa (raw, json)
Hash identifier: SOAjZ4nloIWz76EEargaUuJnV0JGTuLYxmXbsnstWrM=
Subject key identifier: 76:6C:B8:F7:E7:D0:11:33:08:E5:E7:FE:1D:56:DA:62:F1:82:8B:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0663513EDAE511EF867EFE49762E951A.roa
Signing time: Sat 25 Jan 2025 06:24:26 +0000
ROA not before: Sat 25 Jan 2025 06:24:22 +0000
ROA not after: Tue 27 Jan 2026 06:24:22 +0000
asID: 38638
IP address blocks: 154.194.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84197 (0x148e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 06:24:22 2025 GMT
Not After : Jan 27 06:24:22 2026 GMT
Subject: CN=6794839a-b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:da:da:b5:b8:b9:d5:34:69:fa:29:b7:da:
a4:80:57:e4:e8:8f:77:07:c1:69:fd:78:b5:88:6a:
7e:a2:5c:5b:a1:4d:53:73:48:4d:29:1f:af:5f:e6:
c9:72:15:78:e8:82:77:c4:b2:63:4a:c6:c3:22:b7:
2c:7f:c2:b0:73:86:36:4d:8f:60:42:17:1a:91:0b:
ac:10:6f:bf:c3:6c:d9:b2:d9:8b:fc:f7:b0:5c:c4:
c8:10:84:c9:67:9a:64:03:bc:2c:a7:90:a0:50:77:
5d:fb:dd:d0:95:ff:e5:9e:e9:f5:a8:b3:44:79:9f:
ab:d0:47:0f:b7:f8:66:25:f3:bb:78:ed:e8:67:7d:
96:8b:cd:31:72:41:e7:f7:9c:b5:20:fa:04:db:50:
00:d2:40:16:99:45:36:6e:b4:50:b7:f0:5c:98:d7:
d7:f7:29:b1:a5:aa:8d:93:03:4c:6b:4a:78:01:07:
53:b5:59:dc:cb:42:17:46:ed:36:29:9c:f7:69:8e:
28:e0:02:d7:12:b4:cc:0f:2e:5f:0f:8b:0e:05:f7:
05:4e:0b:a3:57:59:ac:31:19:be:ca:75:9c:5a:f6:
2c:7d:09:59:4a:08:28:77:17:de:f1:09:0b:20:74:
b2:a6:15:30:23:eb:df:71:70:ff:cc:10:fa:8b:0a:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:B8:F7:E7:D0:11:33:08:E5:E7:FE:1D:56:DA:62:F1:82:8B:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0663513EDAE511EF867EFE49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.15.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f8:c9:88:e6:f5:f0:7a:ed:82:1e:47:00:58:f3:7e:ce:77:
e3:18:84:4a:a3:8e:f6:41:32:f2:19:e1:26:8e:02:40:d0:64:
25:9b:47:20:ff:00:8b:9e:8a:5e:a4:00:05:51:54:d4:dd:21:
ec:ed:da:4e:22:f2:24:1d:17:8c:af:e8:98:cd:c4:c9:a6:fc:
05:1d:ee:96:05:ca:b0:fa:80:14:68:e2:54:2b:39:14:c4:be:
b8:9c:b6:01:f2:d8:ae:98:f4:6f:54:2c:dc:03:55:ec:ef:99:
a7:f4:ac:eb:53:05:af:89:ef:26:b5:e9:1c:b3:65:63:44:5f:
e9:3b:f0:60:c1:d1:9d:51:1e:ee:cb:47:78:d4:08:85:b1:82:
bc:68:1d:b5:7b:1e:90:af:a2:cf:b1:c7:e0:f7:8b:c6:35:ca:
29:dc:9f:2d:c5:5b:8f:c9:c9:f2:f6:ec:17:3a:76:f6:a3:5d:
e6:d0:b9:c9:75:10:85:dd:10:13:bc:93:18:5d:26:85:19:f9:
2f:7c:30:02:ef:68:df:d3:80:3c:c6:66:ba:f2:d0:e1:58:71:
f6:2c:99:e0:fb:05:ab:d8:ea:53:b1:37:ef:74:a0:20:cc:14:
0f:be:57:4a:1b:54:eb:75:f6:72:0c:d2:63:34:e6:78:bc:b7:
a7:c4:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:08 2025 by rpki-client