Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CBCDEAC91511EFA33ED242762E951A.roa
File: 15CBCDEAC91511EFA33ED242762E951A.roa (raw, json)
Hash identifier: clY11rkq0v03RIwAOB2RTeHq3nNa5cn7qcqFeuwiugQ=
Subject key identifier: B5:CE:EA:D3:C1:A1:D3:6A:1C:CB:D9:B2:92:B7:56:37:E1:CF:25:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CBCDEAC91511EFA33ED242762E951A.roa
Signing time: Thu 02 Jan 2025 14:23:07 +0000
ROA not before: Thu 02 Jan 2025 14:23:03 +0000
ROA not after: Mon 13 Dec 2027 14:23:03 +0000
asID: 17561
IP address blocks: 154.221.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78537 (0x132c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:23:03 2025 GMT
Not After : Dec 13 14:23:03 2027 GMT
Subject: CN=6776a14b-6828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:9e:75:bf:1f:92:44:14:5a:c0:c7:e9:34:
82:5b:62:a5:bd:5b:79:a2:d3:00:00:2e:bb:b5:c2:
dc:e3:0b:37:4e:42:90:5a:63:99:74:65:5c:dc:94:
02:63:a8:73:c3:81:35:f2:72:53:86:74:10:43:fb:
6d:c7:28:fa:ca:0d:4f:a8:94:c2:0f:7d:45:e2:a0:
a6:c0:c1:8a:cd:88:d5:2f:fc:09:97:5c:6b:e6:6b:
d9:b0:53:01:11:53:2b:b9:95:11:26:68:75:b4:8b:
13:a2:5d:bb:65:f7:6e:83:d0:65:18:b1:5e:c1:43:
78:fc:0f:a7:88:90:02:38:ae:0f:4a:e2:5b:d4:fd:
3d:28:56:55:77:26:9c:84:c2:9a:85:e2:6b:cb:f2:
ed:ba:fe:ba:a8:67:8f:e0:5b:01:ea:b4:ec:be:42:
00:dd:4d:e9:59:cf:ad:d3:4b:3c:83:c2:9f:35:cf:
54:b1:28:a0:55:34:d7:a6:55:2d:cf:da:0d:5e:75:
b2:93:88:4f:de:41:af:33:0e:f0:d3:9e:08:d2:de:
4b:ce:a1:40:00:20:f8:98:8f:b9:46:93:6c:c8:64:
a0:41:35:0c:48:c1:2c:21:3d:6c:e7:4f:54:38:f9:
3e:b9:15:f1:b8:fd:cd:c5:b0:91:5e:28:c8:c5:bb:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:EA:D3:C1:A1:D3:6A:1C:CB:D9:B2:92:B7:56:37:E1:CF:25:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15CBCDEAC91511EFA33ED242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.241.0/24
Signature Algorithm: sha256WithRSAEncryption
29:45:65:be:c7:66:a9:a2:3e:23:24:bf:00:aa:a4:95:60:41:
9a:e5:7e:0a:60:c9:a9:d0:8a:e3:17:21:c6:9f:bf:e4:d0:44:
69:f0:b5:11:b4:cb:66:4d:a0:c0:ed:36:59:37:4b:67:df:47:
a5:29:13:d0:57:9f:50:15:1e:4c:09:e6:44:1b:69:8d:b4:d8:
0c:49:7f:fc:8d:d8:b7:1c:3d:ba:c8:b2:d6:dc:fd:bb:45:61:
c7:ea:da:6c:fe:b0:cc:2f:f4:a4:ee:d1:12:a0:fa:c9:8e:de:
e6:f7:a5:14:84:d7:fd:dc:4b:67:47:89:92:e1:26:93:21:6b:
24:33:1a:fe:86:df:fe:34:59:66:f7:8e:17:00:9a:76:36:cf:
dc:cd:e3:c4:53:9a:47:d4:55:76:66:d3:da:82:02:5e:a9:57:
6b:3d:e5:70:21:13:f8:7e:37:c1:81:0f:a0:cf:0f:ce:67:29:
37:1c:22:36:f3:23:4e:d2:8b:1b:b1:8f:04:b8:52:34:2c:13:
d3:54:70:b3:1d:ba:7f:6b:2e:23:10:f7:3e:ce:9f:2e:d9:9e:
39:7c:82:07:04:0a:b4:43:15:25:49:23:49:d6:d4:26:77:0b:
4d:c0:30:23:5d:74:3a:8b:60:ad:ad:a9:db:c5:0d:7b:8d:ee:
ea:df:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:51 2025 by rpki-client