Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216E1B5EF2E011EF84413C5B762E951A.roa
File: 216E1B5EF2E011EF84413C5B762E951A.roa (raw, json)
Hash identifier: qq+K7zwHO3luHChk/LCMopT/6HdwfN62S71P9V11Cg8=
Subject key identifier: 50:87:13:DD:89:11:57:35:AB:71:73:D6:F1:AC:5B:9E:FB:A3:C2:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216E1B5EF2E011EF84413C5B762E951A.roa
Signing time: Mon 24 Feb 2025 18:49:52 +0000
ROA not before: Mon 24 Feb 2025 18:49:48 +0000
ROA not after: Mon 07 Apr 2025 18:49:48 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89272 (0x15cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:49:48 2025 GMT
Not After : Apr 7 18:49:48 2025 GMT
Subject: CN=67bcbf50-c8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:9e:dc:58:8a:fe:b0:a6:85:f5:24:87:0e:
24:3d:35:67:02:16:f6:62:1a:90:2f:66:2b:29:8b:
ef:60:1d:46:8a:fd:b4:53:f3:c4:4e:bc:ea:0a:1b:
b4:c8:d3:4e:ab:1a:03:66:df:32:47:78:5d:d8:15:
cd:99:7d:b3:99:0c:aa:8c:ef:c8:d3:b1:fd:1c:c2:
b1:4c:17:9b:2f:17:3e:05:51:9e:56:8a:6d:e1:11:
6c:8a:b1:1f:31:30:41:66:26:b9:18:e0:7d:20:12:
5f:c2:28:71:5d:ae:02:00:2f:a8:50:08:2b:5a:5e:
21:52:1b:d7:a6:26:38:71:b6:c7:78:18:5e:88:c8:
59:96:87:6e:fd:5f:c8:c0:11:d9:ef:4d:5c:84:34:
08:f9:8e:b0:18:c9:fd:fb:f1:40:2a:99:f8:77:4e:
8b:a4:00:4a:f3:a9:d3:ec:52:4b:2b:66:99:a1:b1:
2f:3b:b7:b9:e3:de:96:3c:94:0b:59:54:5a:c4:f9:
71:5d:8c:de:1f:9f:12:7c:81:e4:0f:59:23:1c:18:
eb:24:f2:28:49:b7:ed:50:c6:50:29:2a:8f:b9:33:
e5:78:66:70:32:d3:11:65:74:3b:f3:7c:96:75:03:
99:bb:9e:f2:0a:1b:78:f0:c2:19:61:fb:d3:5e:3b:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:13:DD:89:11:57:35:AB:71:73:D6:F1:AC:5B:9E:FB:A3:C2:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216E1B5EF2E011EF84413C5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:21:b6:5c:b8:2c:19:c9:d6:f4:6c:31:2c:aa:f3:d0:d0:2b:
18:f6:84:86:89:a8:ec:07:0e:cf:19:dc:13:bc:38:98:3e:e6:
47:47:0a:60:3e:5b:53:d4:bf:25:32:fa:ec:2b:49:01:d3:24:
05:41:ac:08:5e:74:bf:94:b2:21:82:b8:15:10:57:b3:47:be:
97:c9:40:fc:48:54:3e:e9:78:c3:8c:6f:a3:ef:fe:62:d7:93:
6a:1d:89:b2:14:63:e4:e6:a3:22:58:a2:d9:0a:65:51:2a:a7:
46:78:cf:36:6b:3b:cf:f7:fa:b6:c6:7b:7c:6f:37:6f:3f:d4:
d8:a0:83:2a:5a:8b:0a:b9:5d:38:ac:48:e7:5f:56:ce:b2:18:
20:4a:23:f7:19:7a:d9:9a:2c:3d:49:bd:de:dd:22:38:c9:85:
74:02:ef:5a:86:db:f4:dc:08:8e:f1:3b:47:41:db:22:fe:8b:
ff:53:9d:76:ee:e5:37:7c:b7:bc:1d:df:bd:9c:d1:7e:35:2d:
03:01:7e:de:c9:8a:30:49:7c:55:a4:ce:0e:06:82:07:d3:1b:
a1:52:b5:22:b6:d5:52:14:25:d2:8d:90:04:2a:cc:51:3d:22:
ac:42:83:ce:3c:35:1e:a7:5e:ad:c5:60:76:c5:42:d7:80:2a:
f1:c5:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client