Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BCA911AC8BA11EFBF2C4087762E951A.roa
File: 0BCA911AC8BA11EFBF2C4087762E951A.roa (raw, json)
Hash identifier: /sBo2hO2dSfjQcJr9s33f0pJG10Ak+T9NiAzbRvNEvw=
Subject key identifier: BF:A1:FD:C1:AE:08:35:6C:B6:36:E9:3B:D5:05:D1:74:3C:5F:A0:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BCA911AC8BA11EFBF2C4087762E951A.roa
Signing time: Thu 02 Jan 2025 03:31:26 +0000
ROA not before: Thu 02 Jan 2025 03:31:22 +0000
ROA not after: Mon 13 Dec 2027 03:31:22 +0000
asID: 17561
IP address blocks: 154.220.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78278 (0x131c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:31:22 2025 GMT
Not After : Dec 13 03:31:22 2027 GMT
Subject: CN=6776088e-8b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:1e:82:23:d8:86:c0:25:a4:bd:32:e3:1f:
c4:ba:42:3e:c7:17:2d:ba:38:00:7a:0d:6e:b6:87:
89:96:96:28:c9:6d:c3:ff:6c:39:64:1e:a2:d4:2e:
9a:41:91:f4:b2:5b:3c:99:bd:1a:8a:a2:96:28:17:
74:49:c2:d6:ad:fb:d3:77:cb:ce:97:19:89:c5:0b:
aa:01:ca:70:2d:26:55:a6:ff:94:9d:a5:97:3e:e0:
5c:f4:d9:6c:57:c4:1a:ae:92:71:ed:30:26:e4:79:
c1:f0:8c:38:d7:e5:99:93:9e:08:99:90:ee:71:0b:
0c:13:bb:76:e3:63:93:6c:78:03:bf:18:5e:8b:a6:
b8:59:d6:09:49:36:67:cc:72:b5:81:c0:c0:d9:a7:
07:16:2c:58:93:b1:6a:cc:09:f2:85:d9:cf:fa:a1:
48:3a:12:5d:57:5a:d9:5a:fa:bc:0d:cf:48:71:2a:
f3:f2:9c:45:bb:b6:7d:26:8e:2a:5c:7f:88:c0:21:
8a:52:f4:e8:c0:3a:99:56:a2:b8:6a:97:a2:8c:0b:
4a:9b:5e:0d:53:05:01:77:81:f2:32:0f:3b:aa:5f:
43:15:d5:fe:5e:68:96:f7:45:84:cb:63:63:8b:6e:
7d:ef:c7:08:70:bb:39:15:9f:b4:50:60:98:ae:7a:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:FD:C1:AE:08:35:6C:B6:36:E9:3B:D5:05:D1:74:3C:5F:A0:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BCA911AC8BA11EFBF2C4087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.191.0/24
Signature Algorithm: sha256WithRSAEncryption
67:02:d8:71:70:b8:7f:8f:46:e1:4a:e3:58:29:cc:b0:58:a4:
82:69:76:e6:5e:bd:e4:f0:de:3f:ee:78:9d:6e:91:e5:31:51:
68:5f:95:5d:04:01:d8:a0:aa:d0:fb:18:c7:73:d5:81:3b:92:
dd:3c:66:87:8d:8a:4b:10:15:e0:3c:a7:17:8c:05:20:f3:a2:
d9:64:00:7b:30:17:72:2a:4c:7f:75:25:62:5b:02:cf:fb:b8:
c4:4d:fd:ad:80:8a:86:0b:97:bc:5b:1c:b1:d8:8b:cf:43:32:
bb:24:3d:c9:0a:9e:70:d4:15:e3:50:9c:71:dd:da:9b:27:bd:
1e:72:b8:28:b1:d5:97:e0:5a:be:a3:59:89:57:b0:9f:97:3d:
b0:c1:ea:6c:8d:23:82:a3:06:18:cd:b5:fa:7d:73:24:18:08:
f8:03:d8:34:05:29:a7:3c:5f:b7:4e:02:1c:c1:c9:bf:7c:24:
71:28:15:1f:35:32:26:0a:f4:43:29:f6:66:ce:87:f7:be:5c:
3d:98:51:74:0a:a2:88:23:8b:8f:4e:15:5c:a1:6a:40:18:6c:
ac:2a:1f:b2:81:8d:12:be:27:31:6f:ba:f3:a5:17:91:f0:65:
d7:b1:84:b1:58:6f:14:8b:3f:e7:46:44:4e:5b:1e:07:a5:85:
70:35:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:38 2025 by rpki-client