Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D16A2B2DB5F11EF963BA478762E951A.roa
File: 1D16A2B2DB5F11EF963BA478762E951A.roa (raw, json)
Hash identifier: M5d45KCRn6ZJueEsGua69FdLICZTDTPT9lM8n6jihP4=
Subject key identifier: F3:85:24:99:AE:A3:A2:BE:C6:B3:3E:80:82:D0:07:3A:F7:23:D5:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D16A2B2DB5F11EF963BA478762E951A.roa
Signing time: Sat 25 Jan 2025 20:58:23 +0000
ROA not before: Sat 25 Jan 2025 20:58:19 +0000
ROA not after: Sun 28 Dec 2025 20:58:19 +0000
asID: 140883
IP address blocks: 154.201.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84560 (0x14a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 20:58:19 2025 GMT
Not After : Dec 28 20:58:19 2025 GMT
Subject: CN=6795506f-8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:68:18:ce:ce:ed:82:02:7a:cc:16:4f:b3:
02:ca:fe:9c:7a:fd:8f:fa:6c:68:10:c4:03:69:08:
15:39:37:0c:f8:56:c0:ec:31:c0:c7:e4:a0:c5:18:
79:42:9f:7b:f7:4d:6d:70:35:c3:e0:97:57:cf:7f:
df:74:20:ec:00:be:c1:b3:86:1e:ef:34:74:4d:69:
0d:74:16:4c:1a:07:f3:d0:b5:7a:0a:36:7e:fa:22:
56:b8:39:9c:20:c3:f7:be:6b:7b:9e:d1:f2:98:6a:
22:54:60:ac:5d:0a:2b:2f:1c:a2:1a:7f:95:ca:20:
b9:da:0d:fa:59:79:bb:98:2f:95:6c:22:86:ae:4a:
fa:0a:47:de:99:57:b1:a2:cb:3a:99:5f:2e:59:80:
d0:27:98:03:2b:42:a6:5b:1a:c9:51:0b:93:f7:6d:
5c:cd:2f:be:a7:a4:3e:2f:5a:60:e0:3d:5d:46:98:
aa:37:64:16:9b:d9:33:76:17:a6:36:7e:a8:44:35:
dc:32:61:05:fd:8b:1a:35:64:80:b3:28:f8:59:21:
73:f5:3a:c3:b6:60:53:a0:91:97:c3:84:7a:d4:7c:
5c:24:a6:40:d5:ae:fa:1a:1e:ec:ad:37:96:3b:2b:
6f:f4:23:10:83:88:60:ad:77:35:d7:37:7f:34:b3:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:85:24:99:AE:A3:A2:BE:C6:B3:3E:80:82:D0:07:3A:F7:23:D5:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D16A2B2DB5F11EF963BA478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.5.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ae:c4:c3:4a:86:83:0e:9c:b3:95:d0:41:38:e1:18:db:4d:
7a:28:28:52:42:e2:d6:06:41:df:4c:a6:12:15:33:a0:94:b2:
32:6e:99:2d:fe:1c:f1:16:30:a4:ec:04:b3:0b:fd:15:49:99:
97:f7:49:a0:72:05:fb:9c:cf:b0:8c:28:c3:cf:35:9b:35:d0:
f4:d0:61:e5:6e:21:7d:9b:0c:8d:aa:98:29:8b:2e:0e:5e:2d:
54:71:2c:00:4d:f4:99:37:90:cf:9b:06:e3:10:be:64:17:12:
13:14:55:e5:62:1a:33:55:66:91:c8:9d:33:2f:c2:dc:65:65:
92:a6:78:46:c7:c8:78:7d:fd:52:73:ef:1f:dd:0a:6d:b6:da:
0a:17:2b:0c:72:1a:27:89:cd:37:14:c5:2e:48:13:de:c4:8f:
e8:a9:f9:85:33:65:93:31:bd:60:0e:63:2b:6e:41:f9:d2:e9:
b4:bb:80:a5:63:77:96:a3:93:49:4b:5d:f8:cc:c4:15:22:cf:
9d:51:6e:68:2e:22:fc:50:bc:e4:2d:38:8f:8f:f0:7d:f4:e0:
fe:e9:2f:3c:35:a4:ac:4e:59:9c:95:35:cc:26:c8:f7:e7:53:
fd:ea:fa:be:ae:5b:df:f5:57:22:74:81:dd:06:24:f1:74:1b:
01:b1:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:32 2025 by rpki-client