Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA5C124F35B11EFA0BC67A4762E951A.roa
File: 0CA5C124F35B11EFA0BC67A4762E951A.roa (raw, json)
Hash identifier: zDkIJ7D5ETiis7/gbIpeKVsHVUkStdDdx0cvjlDS/rA=
Subject key identifier: 6A:A8:13:28:8E:29:EE:6D:23:E8:93:C2:BF:88:9F:80:49:EB:AA:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA5C124F35B11EFA0BC67A4762E951A.roa
Signing time: Tue 25 Feb 2025 09:29:45 +0000
ROA not before: Tue 25 Feb 2025 09:29:41 +0000
ROA not after: Sat 19 Feb 2028 09:29:41 +0000
asID: 17561
IP address blocks: 154.83.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89606 (0x15e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:29:41 2025 GMT
Not After : Feb 19 09:29:41 2028 GMT
Subject: CN=67bd8d89-8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:98:b6:c6:98:af:3b:a8:bf:f8:5c:05:9a:
f3:f9:42:90:02:41:78:d7:f2:b5:e2:68:c7:32:70:
2b:a8:05:a6:15:cd:a5:3f:af:f1:97:89:6b:73:f3:
44:f3:60:f7:c3:bb:c2:ae:e7:d6:f9:e5:5e:f5:d5:
fc:80:c8:6f:8d:0f:76:9a:61:8b:1e:6b:da:bc:6e:
dc:e8:74:73:46:b6:8b:48:de:68:ba:2d:13:af:16:
d8:52:4a:8f:db:d6:b7:22:23:52:00:92:b4:2f:33:
d7:08:77:b1:cd:70:df:1d:56:c9:02:f1:bd:e3:d9:
5e:36:fb:c2:e8:a1:7f:23:c9:79:42:1f:82:8c:69:
a0:6d:90:f4:1f:a5:6f:a7:f0:04:8f:a5:dd:e9:0e:
44:56:73:b9:8c:e1:8f:9e:e3:86:48:19:6e:51:a9:
07:0b:14:ac:26:f8:38:b6:4e:d8:87:1b:a6:31:90:
bc:d0:f5:1e:48:08:fd:24:38:57:5f:c7:24:a3:a1:
6a:9a:ec:45:f6:5b:57:0c:16:15:6f:32:86:13:5f:
09:9e:c2:d5:39:c6:9a:5e:2d:b0:42:7d:b0:2c:51:
e6:c2:9e:3e:5c:0a:46:79:a2:d9:86:ed:03:c0:66:
7d:00:6a:5b:d4:6e:2d:28:00:b1:7a:3a:e2:0a:91:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:13:28:8E:29:EE:6D:23:E8:93:C2:BF:88:9F:80:49:EB:AA:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA5C124F35B11EFA0BC67A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.64.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3b:3a:b8:e0:5a:57:fc:6c:f3:6e:82:e0:84:be:ed:ad:90:
33:4f:3f:ae:11:40:da:44:ca:3e:04:7e:b6:8a:2a:80:98:98:
d2:d2:f9:30:25:89:0a:c3:69:27:99:0e:69:21:d7:3f:36:e9:
31:d7:58:d5:de:c7:b2:f0:6d:7c:d5:ef:56:bd:3c:f4:32:50:
06:c0:15:23:8b:dc:8a:be:ec:6c:5f:1c:77:ad:2b:ec:bc:83:
f0:1a:39:4a:dd:7a:65:a7:7a:36:43:25:93:7f:24:56:a9:4f:
a3:a8:9d:67:17:6a:48:15:ae:dc:05:02:aa:0e:e2:fe:75:58:
d6:06:e2:2a:62:97:98:63:79:66:5e:0a:1d:7a:12:99:29:1e:
b9:5e:35:22:a2:02:ad:38:2d:cc:1a:f4:bb:2b:64:ef:f4:78:
72:f2:d3:c7:a3:bf:c0:dd:65:9d:88:1b:a4:0d:6c:cd:8b:17:
77:2e:72:a8:9d:60:83:2b:9e:e0:de:2e:34:1e:d7:28:74:d6:
1b:b4:14:8f:00:cd:a9:e0:df:0d:d9:57:74:99:fa:2a:f4:c3:
89:f0:8b:10:01:07:9f:84:81:60:bd:20:3c:fc:8f:e1:bd:b7:
03:25:24:c7:3b:69:f3:fb:99:7d:67:f7:88:0a:c7:38:70:c0:
5f:45:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:18 2025 by rpki-client