Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092FE370CF2611EFB8B10669762E951A.roa
File: 092FE370CF2611EFB8B10669762E951A.roa (raw, json)
Hash identifier: skY3BKacrZ1mjKfXkr+iUBZcJqnx09Q/EyVwvdYKOtw=
Subject key identifier: 56:4D:50:82:29:19:18:9F:E9:92:80:78:60:08:44:A5:41:5D:65:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092FE370CF2611EFB8B10669762E951A.roa
Signing time: Fri 10 Jan 2025 07:39:34 +0000
ROA not before: Fri 10 Jan 2025 07:39:30 +0000
ROA not after: Fri 16 Jan 2026 07:39:30 +0000
asID: 138965
IP address blocks: 154.222.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80299 (0x139ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 07:39:30 2025 GMT
Not After : Jan 16 07:39:30 2026 GMT
Subject: CN=6780ceb6-d61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:5d:2e:89:c9:bb:aa:44:6e:60:33:32:70:
76:4f:a0:e5:5b:7b:9e:cf:e9:d8:cf:29:e0:0a:c7:
73:94:41:61:57:fb:48:6f:31:aa:93:ba:4b:ef:26:
fa:3c:3b:be:5b:35:60:75:b6:1f:68:9c:d2:2e:6e:
d8:11:73:f0:06:cf:bd:0e:79:24:c0:55:68:84:f5:
18:fa:65:37:4d:15:ae:4a:4c:c5:e7:c9:ad:01:d0:
c7:21:98:14:4a:92:37:a3:84:b1:36:e6:84:2d:87:
12:8b:ae:36:51:1b:14:7d:c2:02:96:20:15:ba:50:
69:99:6b:04:f7:0c:45:02:d9:4e:5d:de:c5:20:5f:
14:93:69:0e:c9:3a:f0:dd:df:bf:a3:8f:f3:d6:c2:
d0:75:66:6d:43:97:8a:30:d9:3c:7a:8b:45:89:6b:
e8:54:51:55:3a:97:f5:6b:0e:61:61:22:2f:fc:ea:
71:74:7a:28:15:7f:86:ca:0f:25:c3:6e:60:22:59:
0d:74:77:80:0d:c0:23:2d:65:35:88:91:57:d5:d9:
ca:5c:2a:5b:23:71:b3:1d:ac:43:89:df:ee:b1:9f:
d5:f6:5e:94:cd:54:9b:11:c1:91:aa:1d:6d:9e:aa:
c5:54:78:48:b3:26:0e:95:74:d7:22:ae:4b:65:59:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:50:82:29:19:18:9F:E9:92:80:78:60:08:44:A5:41:5D:65:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092FE370CF2611EFB8B10669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.54.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:cb:3d:54:93:ef:de:57:04:01:1a:e7:9a:4c:0c:89:53:1c:
63:91:f6:c1:f5:52:8e:58:6c:a0:e2:6f:60:cc:98:60:32:c5:
ec:3e:50:ae:46:7e:5a:e2:5b:e7:34:4c:8f:63:e8:e4:a5:c2:
29:aa:ac:1d:d5:c6:7d:fa:05:4e:90:06:c5:e3:82:9b:43:47:
09:91:28:4e:e7:3c:0f:5b:aa:d6:1e:51:4d:56:26:e7:46:78:
d5:bb:d3:74:44:54:e1:c7:66:77:76:b4:a3:b0:e4:4a:e1:ab:
8a:e9:33:f3:4a:40:63:29:24:de:81:74:b8:ea:3f:87:08:2a:
f0:f1:32:99:4f:12:68:d5:03:0f:58:f7:55:0d:e9:55:9d:7b:
cd:2c:10:3d:07:12:35:e6:21:50:27:ef:f2:48:a5:df:3b:88:
f3:1c:7c:ef:79:55:29:57:2b:a1:4c:e7:29:0e:fa:ed:2b:27:
0e:1f:48:14:35:54:31:3c:3c:fc:34:d3:91:30:f0:cd:92:ff:
b5:15:0c:3e:81:a7:20:1e:08:03:8a:c0:3f:db:4e:27:e7:a0:
92:3d:93:67:28:71:08:a5:70:69:e3:0b:e5:42:89:3a:77:c1:
1d:53:79:d1:0e:17:6e:da:50:98:8d:47:12:1c:70:fc:05:08:
fc:34:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:21 2025 by rpki-client