Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E59112F61111EFB3715D48762E951A.roa
File: 19E59112F61111EFB3715D48762E951A.roa (raw, json)
Hash identifier: LFf4+zRy3zAGf93FAsZkXgjno0xRNxt2ta8ezsVJ8oA=
Subject key identifier: 5A:64:0E:A9:B0:67:72:ED:E8:4D:73:F4:2A:E6:3A:8D:49:FB:F7:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E59112F61111EFB3715D48762E951A.roa
Signing time: Fri 28 Feb 2025 20:17:58 +0000
ROA not before: Fri 28 Feb 2025 20:17:55 +0000
ROA not after: Sun 13 Apr 2025 20:17:55 +0000
asID: 138915
IP address blocks: 154.206.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93169 (0x16bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:17:55 2025 GMT
Not After : Apr 13 20:17:55 2025 GMT
Subject: CN=67c219f6-edab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:1d:eb:5f:14:00:d1:f7:7d:66:51:a3:59:
b8:e5:9a:e9:a0:17:76:b1:54:ef:54:28:ba:16:c1:
e2:47:58:cc:8b:98:57:cd:44:ac:80:95:cc:02:33:
0a:62:1d:93:85:59:77:18:a1:0f:29:53:f4:72:fe:
7f:ef:5e:48:8e:99:da:9c:64:1a:6a:c7:40:ab:f2:
15:57:79:b5:04:e6:1e:14:db:b9:76:97:a1:4c:ed:
2e:f3:da:25:b6:98:26:e8:b4:c8:17:56:aa:46:d9:
9a:e9:51:9f:74:fd:75:fb:fe:44:8f:58:06:b5:6b:
5d:88:fc:67:fe:2f:37:7c:88:bc:06:1a:a2:50:07:
7b:6f:d1:b7:33:3b:f7:f7:01:1c:9f:82:29:77:2f:
d2:17:0b:98:e6:3e:45:dd:e9:22:ee:bf:ba:3b:ad:
45:0b:c8:c0:05:0e:9f:c0:59:f8:0f:ed:f8:1c:68:
41:80:ed:84:8f:b9:15:ea:f6:34:e0:a3:fc:cd:1a:
f6:f2:b8:84:f0:33:e6:c6:7e:22:72:03:a3:e4:26:
72:ce:2a:b1:18:8e:4c:22:95:e4:d0:96:3b:66:02:
23:f0:d8:3f:19:20:1c:74:f5:1d:b8:2f:65:e4:0d:
c0:a8:28:79:7b:52:0b:cf:f3:30:69:c6:d4:8e:1f:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:64:0E:A9:B0:67:72:ED:E8:4D:73:F4:2A:E6:3A:8D:49:FB:F7:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E59112F61111EFB3715D48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:cf:64:c8:c7:bc:56:09:ca:13:0c:1b:ce:5d:a2:47:3a:85:
14:30:20:8a:67:d5:a4:52:eb:c6:89:73:36:59:5d:86:fa:6a:
c6:8e:9b:d5:24:85:a5:4a:13:48:7c:44:86:ec:36:65:eb:65:
f1:b0:13:d2:c7:e9:b4:8a:4d:cc:ab:7b:62:bf:ff:20:11:e8:
58:8d:5a:cd:b3:62:c0:b5:b9:17:42:c9:ee:f7:6f:0f:1f:3e:
ee:a6:51:e5:43:e2:a3:ba:f6:00:3a:82:bf:8a:a4:5a:65:17:
7b:17:32:81:f5:a8:30:c3:f3:16:ab:80:56:10:99:44:64:b9:
d7:f6:f8:25:bf:a2:40:70:cc:e1:5c:6e:65:91:02:16:d8:94:
f3:08:45:7d:ff:8b:a2:02:9c:77:87:17:92:fd:8e:1b:68:f5:
bd:95:48:ae:a8:3c:29:aa:dd:0d:bb:80:3e:16:5b:e7:21:c1:
cc:4e:fd:38:02:01:42:59:a1:06:c4:fd:75:9c:fd:d2:1d:9a:
5e:f7:9f:5d:26:53:ce:ee:15:26:63:b5:6b:ca:c7:e8:2d:8f:
e7:6e:b5:81:ee:d3:2c:cf:34:de:7f:70:52:88:b9:bd:fe:c9:
a5:23:da:6c:4d:93:be:91:46:84:a1:ad:1b:5b:ab:44:29:01:
5e:2c:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client