Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD5B04AD2DD11EFAA82C756762E951A.roa
File: 0BD5B04AD2DD11EFAA82C756762E951A.roa (raw, json)
Hash identifier: LzA9GZKE10IM8V22wcDntaNCTEDsTOJob5gtqhdk9oQ=
Subject key identifier: 39:1E:0D:1F:8B:8D:E4:0D:E2:5B:8B:A3:D0:A5:41:A0:36:64:23:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD5B04AD2DD11EFAA82C756762E951A.roa
Signing time: Wed 15 Jan 2025 01:07:10 +0000
ROA not before: Wed 15 Jan 2025 01:07:06 +0000
ROA not after: Sun 12 Dec 2027 01:07:06 +0000
asID: 17561
IP address blocks: 154.81.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80750 (0x13b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:07:06 2025 GMT
Not After : Dec 12 01:07:06 2027 GMT
Subject: CN=67870a3e-db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:c3:38:b7:60:5e:ac:3c:99:e9:a6:af:fe:
20:a8:21:8b:18:c7:d5:68:91:6b:99:c2:c7:dc:c2:
fd:2e:50:a3:b5:17:d0:d0:04:fa:72:55:42:f6:76:
f3:d4:56:97:df:70:14:65:bf:72:bd:46:c4:44:d4:
be:06:5d:cb:02:c1:81:a9:33:d3:8f:28:96:9b:c8:
ba:f9:9b:71:88:c0:b4:c7:52:19:76:60:69:68:da:
0c:02:ca:84:68:94:71:3f:bf:e5:ee:01:e5:3b:dc:
6a:b4:26:52:8e:3d:7a:e9:ac:c3:69:f1:c8:06:b9:
6f:b1:b3:5f:9f:0d:40:08:fa:68:6c:7b:c2:6a:40:
6c:0d:e2:f8:48:24:fa:69:62:f1:8a:a4:98:8d:8a:
91:dc:0a:39:2f:ee:dc:7a:e5:84:a9:e6:bc:55:dc:
2c:9f:28:e8:6a:8f:35:c4:68:c6:09:e1:78:75:92:
f4:27:d7:2a:74:32:9c:d5:4f:06:b2:1e:56:a7:0a:
de:d2:11:a5:9c:53:d4:e9:2f:32:10:f3:60:10:45:
68:9f:15:d5:fe:2e:c5:e2:9e:39:0a:3a:eb:9b:e2:
1d:0d:e7:e6:15:b1:69:b6:09:ac:c7:87:df:dd:96:
e7:c7:8d:12:99:d7:55:b9:6a:21:f3:72:f9:ec:9c:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:0D:1F:8B:8D:E4:0D:E2:5B:8B:A3:D0:A5:41:A0:36:64:23:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD5B04AD2DD11EFAA82C756762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:08:4a:a1:26:dd:35:c1:79:b6:cf:fd:41:30:ec:e1:9f:e4:
75:d7:15:17:7a:0d:45:8d:f8:02:d2:43:a6:f2:33:84:e6:3d:
b0:d3:0e:dd:5a:aa:0d:c4:67:28:dd:14:64:cf:e1:46:1a:3e:
c0:7b:66:86:4b:e8:08:6d:2f:d0:df:bc:2e:f7:46:de:03:cf:
69:8a:ce:59:1e:ae:1d:69:aa:5b:da:cf:ce:a0:a3:db:92:34:
fb:55:da:13:82:7e:dc:4a:5a:c8:76:21:4b:28:de:c1:0b:cb:
c6:fe:4b:08:dd:c2:19:aa:31:96:79:8f:bd:ce:3e:39:a4:07:
6e:e8:9d:fc:8f:42:71:b5:e3:fa:7e:cc:3b:fa:d5:5d:87:6a:
ff:0c:d7:f8:1d:7e:2a:88:a2:0d:a9:1a:87:77:22:6b:54:df:
a5:c2:0d:9b:06:c9:71:33:c0:c1:b6:39:8f:67:ce:56:28:dc:
1e:ea:6b:d3:63:e5:0e:f1:2f:9b:07:58:8f:58:3d:ff:10:7a:
fc:64:49:bc:b5:2a:33:94:42:86:df:e4:39:c9:c4:8a:63:01:
e2:37:71:1d:2c:97:e0:a3:21:26:c0:9b:12:12:21:3f:eb:6a:
28:b2:e8:78:4d:4b:56:6e:79:91:97:e6:42:38:68:60:f1:24:
68:73:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:55 2025 by rpki-client