Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14E15EDEE24411EF8A7AC975762E951A.roa
File: 14E15EDEE24411EF8A7AC975762E951A.roa (raw, json)
Hash identifier: EKvZBsIOQKyMNQ90H//XftuLsXBqBZfWrjkpQxmtejM=
Subject key identifier: 8D:83:0C:11:B9:CA:AA:9F:35:B9:AA:98:AC:E9:BD:9E:42:9A:0A:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015041
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14E15EDEE24411EF8A7AC975762E951A.roa
Signing time: Mon 03 Feb 2025 15:32:31 +0000
ROA not before: Mon 03 Feb 2025 15:32:27 +0000
ROA not after: Wed 30 Apr 2025 15:32:27 +0000
asID: 150008
IP address blocks: 154.206.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86081 (0x15041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:32:27 2025 GMT
Not After : Apr 30 15:32:27 2025 GMT
Subject: CN=67a0e18f-10b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:53:75:b0:dd:ed:10:4e:03:04:3d:4f:c3:
13:52:98:3d:12:54:8f:7a:70:81:6e:fb:ae:80:f2:
1e:1f:51:07:67:b4:4c:f3:4a:9c:cc:4a:a6:8e:2a:
04:21:d0:35:51:11:cb:a5:ef:7c:3f:9b:fb:e2:d8:
28:65:28:d9:ba:79:6f:b7:23:ff:cf:9d:8f:33:1e:
b4:3c:22:14:70:3d:db:13:07:c2:3c:f8:ca:d7:1f:
54:ba:80:77:b1:22:1a:b3:b8:6b:e9:31:40:f1:f2:
6d:7a:0a:ad:4e:d9:1e:bc:d1:91:4c:20:a0:f1:10:
8f:b7:cd:9c:d6:aa:68:24:53:ab:08:eb:11:a7:33:
76:32:96:df:e4:d7:df:b6:a4:f4:26:06:c8:f8:70:
55:c2:a6:0a:86:1c:ac:d2:9d:71:97:a8:c5:0a:f6:
b1:df:8b:96:56:18:d1:38:11:2e:56:e0:72:9c:6c:
8d:5b:e0:65:14:c3:05:96:9d:0a:e3:ed:fc:44:4e:
bc:9b:74:56:66:19:60:e9:8c:e9:5a:9d:a6:78:44:
b9:04:82:d2:f4:56:7a:c3:64:b7:6d:3d:4a:27:3b:
0c:25:4d:24:ec:7f:d1:d2:c4:2b:48:42:ab:83:c4:
cc:fb:ce:be:c5:de:5f:47:a2:b6:98:e3:fc:7a:75:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:83:0C:11:B9:CA:AA:9F:35:B9:AA:98:AC:E9:BD:9E:42:9A:0A:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14E15EDEE24411EF8A7AC975762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.25.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e1:55:b2:ce:09:fa:37:a7:8d:c0:93:7e:98:5d:7f:aa:cf:
bb:5b:0f:74:ba:21:43:5b:83:20:83:9c:95:3a:10:5f:fb:c4:
16:49:c9:ec:8f:61:3f:72:cb:c0:12:87:5a:de:02:28:b6:e6:
c4:84:cb:72:87:4c:43:b3:ed:da:89:b2:db:46:33:40:d0:db:
dc:b5:c5:a9:f8:50:6f:b2:ee:b6:26:81:34:64:51:cc:95:97:
e4:eb:3f:55:e6:b7:f6:72:6e:84:31:1c:30:a6:d4:eb:a9:17:
30:44:e5:57:83:4b:7b:cc:70:39:2b:fb:97:a7:fd:f0:1f:29:
ea:df:1a:3b:18:56:10:73:84:fb:70:d6:a6:c6:2b:68:b0:43:
39:2b:d5:8d:2a:31:8a:bd:15:49:41:5c:a7:cb:d5:e4:4a:df:
fa:7b:0a:11:c1:28:0d:03:09:52:34:68:0d:29:92:4b:56:27:
8e:48:18:3f:d2:51:8b:02:70:a1:57:d5:41:89:f0:fc:37:4c:
c2:9a:33:0c:2f:c2:63:2c:f7:b5:b3:fc:b4:36:95:5b:f8:63:
81:d1:e8:b8:84:90:08:e3:3f:57:80:75:08:0f:81:77:41:20:
cd:9f:0b:b6:9c:0d:cd:68:45:5a:d3:03:62:9a:9b:62:31:b9:
9e:a1:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:19:26 2025 by rpki-client