Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21193346CADB11EFA16C5F84762E951A.roa
File: 21193346CADB11EFA16C5F84762E951A.roa (raw, json)
Hash identifier: +X16MBPuEAGPH0AKvcKY3mELklt3XSq0HSeEx6sTV98=
Subject key identifier: 69:15:FE:4F:DE:73:53:4B:33:37:27:30:8D:0E:4D:46:E1:2F:FD:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01354F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21193346CADB11EFA16C5F84762E951A.roa
Signing time: Sat 04 Jan 2025 20:33:17 +0000
ROA not before: Sun 05 Jan 2025 20:33:14 +0000
ROA not after: Wed 07 Jan 2026 20:33:14 +0000
asID: 18233
IP address blocks: 154.197.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79183 (0x1354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 5 20:33:14 2025 GMT
Not After : Jan 7 20:33:14 2026 GMT
Subject: CN=67799b0d-34ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:b0:cf:90:a3:8b:f8:41:53:29:16:c6:16:
3f:1e:b8:0d:59:1a:fc:f8:c7:c7:2c:57:84:b7:07:
c2:cd:ac:89:0d:61:e5:a3:58:10:8f:30:da:db:f5:
04:4f:9d:d3:ab:bc:f8:d2:d8:66:70:f8:31:5b:54:
e1:d1:42:30:86:ff:34:31:63:9f:d3:6d:21:ac:06:
09:1a:74:fb:91:10:7e:15:98:50:51:03:33:6d:1f:
4a:89:8a:19:17:ef:ab:89:02:b2:5e:6e:e3:59:91:
08:00:71:61:e9:c5:2c:b3:58:3f:5b:a2:9f:c3:65:
e3:b6:61:6b:87:20:09:42:19:7f:b3:4a:ba:85:28:
ec:cd:0c:e4:20:b7:0f:11:24:3a:23:f9:49:f6:b4:
ec:cc:b2:c6:9b:3c:3e:04:d0:e0:7c:92:a1:fb:35:
f5:3a:be:e7:ac:3e:5f:a4:36:1b:bd:9d:c9:7d:86:
64:2a:62:87:41:d8:48:3f:67:0d:b5:37:3d:87:00:
8f:ce:82:e5:b4:7f:b6:12:e9:d4:3c:28:45:ee:50:
54:ff:eb:27:27:ef:30:cd:ba:48:27:24:9d:ce:ba:
48:f0:43:e4:74:65:0e:85:94:78:45:0f:b1:f2:db:
8b:a0:35:bf:00:9e:e6:ee:7a:be:32:d4:b0:86:1a:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:FE:4F:DE:73:53:4B:33:37:27:30:8D:0E:4D:46:E1:2F:FD:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21193346CADB11EFA16C5F84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:69:48:f4:5b:1e:26:4c:00:f7:c1:df:4f:e1:56:e5:06:95:
50:65:50:49:dd:6f:f9:15:a6:cb:63:35:fc:25:0d:89:e5:16:
6d:e3:96:4a:74:79:7b:71:74:09:e8:52:eb:a6:3f:a6:20:d2:
b5:ba:88:a7:22:14:ce:d4:18:2d:3f:bf:93:5e:89:9c:e8:42:
ed:90:05:45:70:07:c5:d1:c9:6c:85:33:44:6f:5d:0c:cb:46:
31:b6:a4:7c:a5:f3:b8:5b:ec:98:e9:1c:37:3d:ff:73:74:ba:
5c:eb:0a:b1:94:f2:52:6a:b3:23:db:95:4b:d4:5d:09:14:c8:
46:74:f5:30:e8:bb:ba:25:6b:62:e1:1e:e9:a3:ad:35:3a:c4:
e0:bf:e1:dc:e2:fc:f9:3b:2a:53:f7:66:ec:19:91:14:e4:fc:
41:f3:f2:1d:51:ec:90:31:02:ab:32:aa:64:fb:72:28:bf:75:
d1:e3:f0:91:e4:c9:17:be:c9:26:de:45:2c:d9:8c:8c:d9:bc:
c9:f2:7f:d9:01:55:43:c5:3f:b3:cb:58:cc:55:e9:d3:dd:4f:
67:68:b5:1b:7f:9f:a5:a3:7e:13:b2:15:0c:ae:4c:f9:a5:8a:
7e:f9:56:37:bc:eb:61:08:ad:2a:26:68:29:83:a3:3c:ca:65:
a0:9f:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client