Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176888DCDA2711EFB23B03BD762E951A.roa
File: 176888DCDA2711EFB23B03BD762E951A.roa (raw, json)
Hash identifier: 8hi3JkbyrJLbfQ1g9jWRLr4DY9e8B62+n3780QZ1oeQ=
Subject key identifier: 9D:B8:90:52:B4:F3:CC:36:BF:57:51:B6:7A:C8:E8:95:B6:F1:66:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01442C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176888DCDA2711EFB23B03BD762E951A.roa
Signing time: Fri 24 Jan 2025 07:44:50 +0000
ROA not before: Fri 24 Jan 2025 07:44:47 +0000
ROA not after: Tue 13 May 2025 07:44:47 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82988 (0x1442c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 07:44:47 2025 GMT
Not After : May 13 07:44:47 2025 GMT
Subject: CN=679344f2-598c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:4e:6c:79:13:58:e9:ec:62:ea:79:6e:24:
2b:82:98:f6:12:26:e9:e7:10:9c:8c:cd:b9:7e:f6:
25:70:3c:ed:65:fe:ba:9f:2a:10:6a:c8:9f:a9:83:
8e:83:60:8a:cc:54:f3:00:13:fd:76:24:7f:e4:cc:
8a:98:2d:96:98:ac:50:f4:de:64:6f:25:ad:84:fc:
79:9c:e3:43:92:ef:58:ed:40:bb:b5:b2:fa:3d:cf:
11:4f:09:95:57:8a:a2:ba:14:2d:94:87:9d:e9:72:
54:63:82:34:cd:af:46:5b:14:7e:00:6e:68:7a:a7:
dd:11:2b:30:11:c7:a5:1f:4b:c6:63:61:31:34:93:
91:8e:39:9b:5a:fb:02:5a:7b:ef:9d:94:c5:b8:b9:
ad:05:72:6d:62:c2:3b:04:7d:30:f7:c7:6b:40:15:
59:36:c1:07:7c:7d:d0:98:38:df:35:79:11:d3:66:
38:91:77:f9:9d:b1:e8:7f:33:18:0b:ae:74:ae:5f:
ae:bf:30:9b:d3:f3:a7:9b:2e:54:a6:51:bb:cf:e9:
88:50:40:20:32:5e:1e:f2:05:e1:f6:df:4c:c6:de:
41:d7:5c:15:f4:62:3c:1a:fe:58:33:fd:0e:70:aa:
a9:1a:52:88:12:06:c1:3c:68:c2:88:d0:7f:3f:c7:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:90:52:B4:F3:CC:36:BF:57:51:B6:7A:C8:E8:95:B6:F1:66:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176888DCDA2711EFB23B03BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d1:48:a4:71:5c:d0:75:85:c2:e8:c8:ef:d7:ad:31:fa:bb:
a1:df:06:bf:9f:42:f8:14:12:84:af:e2:0b:b4:6a:42:31:5a:
df:00:ca:35:43:16:0e:66:75:b2:2c:3c:65:c8:65:fc:4d:8b:
f8:27:95:49:63:1f:e1:bd:8d:bc:fc:e4:61:0a:14:ef:51:99:
c1:d7:1b:68:82:55:eb:53:49:56:b1:8c:ab:7b:0b:cf:5d:07:
89:4f:37:38:a5:d6:10:63:17:22:20:54:ec:57:12:09:f6:13:
68:1b:be:62:08:7a:f0:ae:3d:b4:6b:7c:9d:9f:95:67:53:9a:
a0:c4:5a:f1:57:9d:1b:00:47:e0:18:3a:b3:cf:8a:78:b3:f6:
8e:a8:5f:88:b6:38:7d:64:f9:17:85:91:47:48:dc:4e:01:c3:
4e:3a:04:29:8a:ca:58:49:5d:47:07:73:d9:f4:3c:e1:c8:64:
ca:e9:1a:87:6f:88:96:dc:5f:cc:5c:d3:3d:df:38:84:69:6e:
40:9d:2f:d0:6f:b4:3d:28:c2:83:3d:b8:37:85:33:82:ad:e9:
0a:ef:c5:07:ee:06:83:30:2e:6f:4e:17:bc:78:79:9b:a0:b4:
b2:ed:84:05:c2:f4:0c:21:bb:f4:a8:63:f6:24:19:47:56:b8:
ee:ff:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client