Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B163CE0E1811F084B6F05E762E951A.roa
File: 13B163CE0E1811F084B6F05E762E951A.roa (raw, json)
Hash identifier: 3+IfnyP119F9iBJeAA1csyf8LoYWJ124rttOSSen90Q=
Subject key identifier: F8:A1:4E:46:E9:85:9A:3F:03:50:EF:9B:D5:61:6A:4C:2D:CE:CE:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01771C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B163CE0E1811F084B6F05E762E951A.roa
Signing time: Mon 31 Mar 2025 10:08:22 +0000
ROA not before: Mon 31 Mar 2025 10:08:18 +0000
ROA not after: Fri 02 May 2025 10:08:18 +0000
asID: 199524
IP address blocks: 154.193.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96028 (0x1771c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 31 10:08:18 2025 GMT
Not After : May 2 10:08:18 2025 GMT
Subject: CN=67ea6996-1197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:e6:14:03:81:2f:dc:35:0e:d6:42:71:7f:
1f:3f:74:d0:a8:ae:8d:13:d4:86:58:9e:95:1a:64:
01:20:94:3e:60:ba:3b:04:44:b1:f8:be:03:7f:49:
33:a0:c8:9f:42:49:ac:65:9b:e0:88:c3:a7:33:99:
6a:fd:b4:be:c0:e2:a4:a4:a5:25:e3:eb:bb:21:b4:
a4:d2:c2:96:d3:59:26:8d:25:cd:46:03:87:d3:70:
98:e5:be:16:ca:37:20:39:32:34:84:5a:0a:64:ce:
d9:ab:d2:47:4a:93:e9:c1:6e:af:ab:58:20:02:5d:
bc:9e:b1:5c:60:42:17:bb:0b:bd:52:bc:31:3e:8c:
54:48:01:33:bc:5c:d8:45:46:c3:3d:75:14:54:1f:
17:ed:b6:1f:2b:22:b4:76:23:11:03:03:a9:ad:46:
24:f0:43:41:5b:d2:c3:f0:86:82:d9:a6:95:57:74:
0c:90:9c:c7:29:44:ce:5d:35:df:32:4d:48:08:a6:
cd:aa:0c:61:e7:a3:3e:06:34:4d:6f:8d:b8:97:af:
59:85:bb:65:ea:df:c3:48:96:d3:75:40:85:f8:99:
b2:bc:41:87:79:c5:8b:cc:60:a6:b4:19:e0:1d:d6:
eb:22:03:7f:2c:39:2b:20:3e:e0:8a:d8:3f:64:b0:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:4E:46:E9:85:9A:3F:03:50:EF:9B:D5:61:6A:4C:2D:CE:CE:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B163CE0E1811F084B6F05E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0/21
Signature Algorithm: sha256WithRSAEncryption
c7:6d:09:bb:de:5b:2e:8b:b5:04:7c:ae:77:b4:3f:6f:67:36:
6a:e3:ce:3f:d0:1d:af:1b:f6:7a:91:3a:36:cb:43:fb:0e:41:
fe:17:28:58:7d:3c:97:7a:fd:13:7e:90:ed:f2:a0:ac:1b:98:
3e:6e:dd:67:1d:4a:9f:67:1a:c2:b0:d9:1b:a8:ce:e8:0a:86:
bb:ab:10:2c:db:91:50:8d:38:06:45:6b:8e:bf:db:5c:4c:62:
59:53:27:a7:5c:16:4f:71:be:77:74:da:29:16:3f:b4:70:2d:
c0:4c:14:20:28:63:01:b4:be:a6:96:ec:8a:52:2c:62:17:f4:
19:16:69:d6:1e:14:a5:a2:41:41:d0:f7:58:29:51:6d:c1:8b:
a8:f1:05:17:3e:1b:c2:23:4d:b4:49:11:89:49:60:0f:4f:d6:
a0:ae:dd:e6:18:aa:9c:7c:43:a3:2a:ad:88:7e:1a:43:98:b0:
e9:f8:e9:3b:fb:28:39:98:cf:21:bf:b0:14:e7:ac:81:23:84:
c6:77:94:ae:f9:a9:c6:50:43:50:cb:c7:a9:6a:85:a7:c8:6d:
21:98:5f:18:3e:e6:67:03:ea:ac:3c:43:ed:a5:8e:9a:f2:44:
a1:ea:f8:f1:8f:ad:04:a1:7a:cf:56:88:68:e3:6b:34:fa:78:
d1:89:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:38 2025 by rpki-client