Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F27D7CE2D111EFB1A239B1762E951A.roa
File: 09F27D7CE2D111EFB1A239B1762E951A.roa (raw, json)
Hash identifier: wifxUssnMvD0D8IN2nFcfNs9/WzYZsIPLMJHFkNx6so=
Subject key identifier: CA:45:52:CF:D9:17:7F:63:3A:F5:28:DD:5B:9D:5D:00:DC:7E:10:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F27D7CE2D111EFB1A239B1762E951A.roa
Signing time: Tue 04 Feb 2025 08:21:31 +0000
ROA not before: Tue 04 Feb 2025 08:21:28 +0000
ROA not after: Wed 30 Apr 2025 08:21:28 +0000
asID: 18229
IP address blocks: 154.210.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86176 (0x150a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:21:28 2025 GMT
Not After : Apr 30 08:21:28 2025 GMT
Subject: CN=67a1ce0b-f3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:84:23:29:89:fd:44:ce:3a:b3:5c:13:c8:
91:d3:fd:21:d8:5a:67:19:de:5c:21:59:cc:4d:35:
bc:d2:49:a6:49:32:65:ea:d9:08:2c:9b:b2:ad:c7:
e6:bc:75:1e:94:8a:79:6f:36:86:7c:65:a3:ce:38:
3f:84:2f:55:4e:f6:95:42:b0:73:d6:4d:9d:dd:20:
61:06:f8:1b:f7:e1:f5:eb:da:3b:ca:d2:5c:cf:db:
6d:88:b0:c8:1d:4d:9c:19:3a:dc:78:d0:c1:c9:91:
cc:e4:ef:29:ec:7a:ea:40:1b:0a:c3:3a:fb:14:2f:
27:24:be:4b:e9:1d:90:63:62:b3:4f:7b:90:e8:9c:
58:64:5e:8b:60:cc:e4:c2:7d:e3:cf:1e:73:b6:d3:
0a:84:45:1e:02:c6:23:2f:04:19:c7:50:87:08:a1:
da:68:e5:c2:9b:2f:cc:91:e5:c7:87:5e:e6:c2:2c:
ff:5b:8f:7f:82:29:12:a0:c7:c0:d0:94:f9:80:71:
54:cb:1f:e2:50:3f:a6:ae:74:ff:3d:4e:a2:07:90:
94:ff:93:51:f9:ee:20:49:0d:35:45:2b:12:21:a3:
a4:d5:1c:c5:3a:5e:47:02:14:f3:69:41:34:e7:c2:
fe:a4:bc:8c:cb:15:67:7c:2a:20:38:5a:0a:60:4a:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:52:CF:D9:17:7F:63:3A:F5:28:DD:5B:9D:5D:00:DC:7E:10:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F27D7CE2D111EFB1A239B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:cf:0c:b7:e4:6f:2f:61:9f:b3:58:40:f7:61:88:b2:42:13:
95:36:92:82:22:5b:84:00:7e:77:7b:d0:5d:9e:ee:19:ff:33:
14:33:bc:0f:9a:bd:81:aa:08:6e:41:78:77:e8:4d:dd:c4:6b:
25:6d:dc:a4:b5:00:01:d3:d2:00:13:93:d4:44:2a:ce:52:6f:
e9:0a:55:ce:f2:63:93:78:c1:c5:8d:ca:0c:f2:5b:28:e1:4a:
2d:03:34:04:8b:d9:3c:f0:17:c5:52:58:da:55:79:31:a5:f0:
2f:47:eb:1f:f0:01:39:82:23:09:b4:b8:96:c8:af:24:aa:fd:
08:70:57:97:84:68:97:11:b3:65:cd:7b:66:d5:06:86:5a:98:
76:4a:05:44:49:da:2e:23:4a:19:ea:e0:2e:91:ad:d1:da:6f:
2a:2e:51:68:3a:f1:7a:ae:d7:82:37:6c:36:5a:21:21:53:89:
08:90:3a:ad:3e:b0:68:35:d1:e7:1e:8b:50:e5:e9:5d:95:83:
d0:3e:83:65:32:81:72:8c:9c:7e:95:b6:4e:16:4a:8e:60:95:
1d:04:b3:9e:6a:55:b1:d2:7d:a0:ac:3a:94:85:28:41:3d:3e:
7b:96:a7:6e:8b:e0:a7:9c:e5:9c:71:f6:42:61:3b:d4:1a:7b:
9a:fe:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:48 2025 by rpki-client