Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13249170F3B911EFAAECDE9A762E951A.roa
File: 13249170F3B911EFAAECDE9A762E951A.roa (raw, json)
Hash identifier: CL3ILykaHj8j1bfo/ozrdaTfzzla1bdGBUuNe90orTY=
Subject key identifier: 4F:44:4D:DD:10:F6:B9:C9:C9:97:AB:1F:18:0A:D4:1D:CC:98:D1:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13249170F3B911EFAAECDE9A762E951A.roa
Signing time: Tue 25 Feb 2025 20:42:49 +0000
ROA not before: Tue 25 Feb 2025 20:42:45 +0000
ROA not after: Wed 09 Apr 2025 20:42:45 +0000
asID: 138915
IP address blocks: 154.95.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90101 (0x15ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:42:45 2025 GMT
Not After : Apr 9 20:42:45 2025 GMT
Subject: CN=67be2b49-b6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:59:45:f4:e9:9b:f1:dd:7e:17:6e:d9:62:
43:1a:ed:cd:2c:9e:b2:50:25:53:46:2d:20:b6:82:
fc:03:27:ea:0a:4b:44:0b:1d:81:e8:60:89:34:de:
90:e5:3b:12:48:ca:66:e5:b6:22:da:b5:a9:49:79:
13:d1:6d:3d:7a:aa:c7:5e:18:24:03:6b:d5:96:18:
35:3a:b3:71:ad:07:5c:be:c6:2a:5d:c8:8d:69:14:
e1:27:22:0b:e3:41:72:10:2b:3e:de:ee:59:01:a6:
aa:9f:b5:7f:4d:33:16:c1:f3:65:e0:9d:99:51:26:
55:30:d7:1d:37:af:59:4e:d5:03:26:54:44:49:8c:
08:47:fb:ae:73:56:1f:03:bf:38:19:c0:60:54:98:
37:f4:df:57:05:b9:55:75:ba:d5:e3:87:db:7c:92:
c1:20:55:16:23:31:0e:40:84:21:d7:a5:eb:7a:75:
58:ec:0d:22:8e:3d:7f:a2:5b:d8:f5:7c:3e:93:86:
b1:06:e3:c3:8a:e0:86:71:12:92:47:30:e0:c6:8f:
19:85:c9:79:66:b1:6a:22:2a:af:4c:92:d0:89:a3:
f4:24:40:1e:9e:d5:a4:af:29:87:a4:ab:c1:bd:9c:
26:60:23:f9:76:af:25:ad:aa:bd:63:d8:dc:77:e9:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:4D:DD:10:F6:B9:C9:C9:97:AB:1F:18:0A:D4:1D:CC:98:D1:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13249170F3B911EFAAECDE9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:d0:dd:4e:c2:8c:b2:a1:d2:24:63:5a:a2:ae:ce:20:dc:
5e:a4:f8:c6:67:10:9e:cd:db:98:9d:c9:ce:5c:c6:af:7b:5e:
8d:3a:83:4c:71:86:ed:39:5c:67:1d:f1:3f:ac:e4:cf:5e:2e:
db:07:51:33:83:2d:a7:f3:87:f3:ee:68:81:0b:75:12:a5:81:
52:4a:0d:f4:dc:97:6b:36:28:2b:bf:75:c7:41:18:d9:33:a7:
12:d9:07:87:2a:81:c7:7b:7f:45:c4:3a:30:d2:d2:b8:d4:8c:
64:46:da:92:73:de:e9:41:27:e6:ef:6a:9a:8f:7c:1b:2b:ff:
e2:a1:5d:64:ce:26:af:2e:c6:ab:c9:74:c7:ff:14:9f:c5:ca:
f6:72:3d:74:c4:e0:27:e5:fa:04:38:32:ae:62:aa:e0:c0:97:
f3:0d:22:9e:24:6f:ce:00:0b:20:17:a9:f3:d4:98:bf:1b:e2:
77:f7:af:4f:41:52:72:a8:76:19:da:b4:53:26:47:dd:47:94:
84:8a:b0:9c:fa:68:32:aa:15:34:77:81:03:3f:8a:36:2d:b0:
38:15:39:a6:8a:c2:6e:f3:62:6c:25:fb:74:66:89:56:97:71:
c8:c6:c1:0f:b9:19:a3:05:17:76:95:24:cf:1e:3b:d9:ca:98:
9b:92:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:04 2025 by rpki-client