Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/165371F0E2CE11EF8683089D762E951A.roa
File: 165371F0E2CE11EF8683089D762E951A.roa (raw, json)
Hash identifier: 1y2qdgXpEEoPqQU8UQMmbcnM/F+CAW/2pdrFdyBNbFw=
Subject key identifier: D3:41:50:F9:7F:0F:31:CF:1D:7C:15:07:81:E3:F7:B7:D2:58:7E:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015090
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/165371F0E2CE11EF8683089D762E951A.roa
Signing time: Tue 04 Feb 2025 08:00:24 +0000
ROA not before: Tue 04 Feb 2025 08:00:20 +0000
ROA not after: Wed 30 Apr 2025 08:00:20 +0000
asID: 18229
IP address blocks: 154.210.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86160 (0x15090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:00:20 2025 GMT
Not After : Apr 30 08:00:20 2025 GMT
Subject: CN=67a1c918-a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:b4:c3:92:8a:ab:e3:9e:8a:e2:1a:00:0d:
f1:40:f5:4f:db:32:98:67:be:9e:6b:0f:2f:53:9b:
27:6b:85:b8:79:7f:14:7f:cd:02:a4:06:f1:68:fe:
7c:e7:c0:99:bf:30:ba:60:46:e8:c7:42:15:86:86:
0d:e5:70:91:e7:f0:15:80:6a:86:e2:05:0c:f1:5d:
7e:52:dd:73:aa:12:97:8e:29:6e:f0:6f:81:3d:52:
90:2e:37:83:38:31:4f:4d:29:c7:bb:aa:de:51:87:
56:dc:9e:cd:76:b6:d0:13:bb:54:7e:08:b1:9f:b6:
9a:5c:e7:09:6a:67:f0:a1:a3:58:36:56:d3:90:5d:
43:7d:cd:18:19:da:fd:ca:a9:22:20:f9:ec:0c:8e:
7b:1c:96:f5:18:15:86:57:29:01:1c:ae:10:a0:04:
92:e4:fa:5f:32:d4:c2:a5:bd:20:7c:cc:f8:d5:f3:
16:b8:a8:5c:2c:85:5f:f6:c3:33:64:76:fc:85:5d:
07:4f:f1:5e:73:2e:18:4d:df:7e:12:6d:9f:91:9f:
7f:dd:f0:c3:05:c9:25:0e:e8:53:11:5e:cc:80:b1:
27:dd:f8:24:78:2d:74:77:8d:96:ab:86:f4:e3:8d:
10:b0:e5:ef:63:41:6f:2e:a2:45:7a:6e:77:ff:ca:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:50:F9:7F:0F:31:CF:1D:7C:15:07:81:E3:F7:B7:D2:58:7E:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/165371F0E2CE11EF8683089D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.198.0/24
Signature Algorithm: sha256WithRSAEncryption
96:38:33:39:6c:30:ba:7e:f9:7b:46:de:23:db:d0:55:c5:55:
1a:e3:74:a0:7f:02:3f:8e:0b:b9:28:3e:18:f7:c2:9e:d3:26:
ea:ad:e9:c4:df:74:fe:20:34:68:15:1f:c4:b6:08:b7:c1:bc:
ef:9c:76:c2:5f:a7:3b:b9:29:98:b4:78:e8:bd:50:05:e6:91:
46:98:12:ea:8c:ef:4c:10:73:c9:2c:c2:ce:d5:42:e8:12:41:
24:b8:8b:9e:a8:97:54:b3:5e:e9:a4:28:d1:89:86:1f:b5:2d:
cd:8d:c8:c8:4c:49:5a:35:92:c7:26:db:d3:52:d1:16:34:b2:
2a:e3:ea:3c:04:90:bc:bd:16:17:3d:97:68:d5:9c:fd:91:1b:
fc:14:4d:b5:b7:dd:37:d1:ca:66:15:cd:60:a2:33:f2:e0:b4:
3d:54:b3:a8:ee:6e:a1:2a:9f:21:b1:9c:02:d4:ba:91:c6:9e:
6a:66:b7:7b:3e:3c:da:dc:71:14:9f:09:6d:25:a6:de:cb:c7:
39:8d:25:8e:5b:a6:43:74:35:38:73:8f:fd:5c:e9:e1:a5:76:
dc:4c:2d:9f:5f:35:82:74:87:b9:ef:e1:d8:30:0a:66:45:9b:
44:5d:f5:44:8c:73:bf:de:6c:87:35:b4:6f:51:6e:58:2f:66:
6b:14:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client