Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C372F8D2E711EF86DEE1A2762E951A.roa
File: 25C372F8D2E711EF86DEE1A2762E951A.roa (raw, json)
Hash identifier: xHGTVUPqzZdIulTH5ufciZsydOWqlMC5CwTXOPADmKw=
Subject key identifier: 0A:01:3C:C2:07:A8:B0:CD:45:CE:E7:C1:15:5D:66:00:4D:F2:D9:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C372F8D2E711EF86DEE1A2762E951A.roa
Signing time: Wed 15 Jan 2025 02:19:29 +0000
ROA not before: Wed 15 Jan 2025 02:19:25 +0000
ROA not after: Mon 03 Jan 2028 02:19:25 +0000
asID: 17561
IP address blocks: 154.222.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80794 (0x13b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:19:25 2025 GMT
Not After : Jan 3 02:19:25 2028 GMT
Subject: CN=67871b30-c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:bb:29:bc:42:4c:ed:0d:65:a1:b2:f5:42:
b1:79:28:0a:b2:ec:2d:73:b2:e9:77:2c:d5:aa:ba:
0e:97:ea:fd:b3:e3:79:5d:8f:53:e3:3e:e8:ce:5a:
c1:50:26:6f:d5:90:b7:80:d1:de:cf:70:3b:fe:2d:
f7:40:6e:a5:1f:3d:35:16:cb:fe:37:2f:90:e8:da:
eb:c5:3e:e6:d1:ad:9c:75:69:64:eb:64:d4:41:2f:
bd:64:80:fa:51:df:6d:eb:71:e9:7e:4a:a0:bb:29:
e7:2f:97:e4:e5:2e:b5:5e:cb:46:c7:c5:63:79:66:
47:d1:0a:7f:38:c8:97:e1:e1:b7:fd:fd:b8:b5:df:
29:48:87:da:68:98:d3:ff:df:a2:34:98:71:65:f9:
a6:be:75:8e:91:29:dc:87:1f:67:c0:37:d7:d2:93:
f2:76:fa:db:08:06:4a:77:ad:1f:b4:93:cb:71:0c:
0f:c0:3b:5b:4b:da:66:07:23:e4:92:eb:f2:20:0a:
c3:17:03:82:5b:04:13:d4:8c:a9:08:35:24:47:0d:
a2:c8:4b:8c:c1:9c:fc:64:fc:76:e2:38:81:28:0e:
fd:49:3a:c8:0e:2d:eb:47:84:5b:a6:c1:e8:12:2a:
8e:1c:ca:da:5f:05:26:10:05:52:af:b3:9b:8e:b0:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:3C:C2:07:A8:B0:CD:45:CE:E7:C1:15:5D:66:00:4D:F2:D9:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25C372F8D2E711EF86DEE1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:13:88:47:0b:0b:63:33:4a:42:85:74:80:ba:5c:be:c0:96:
35:72:82:17:3f:95:6f:af:9d:83:14:70:3a:fe:7f:25:01:bd:
ad:22:02:90:6a:6d:b5:44:b5:c5:dd:b1:82:66:e8:bd:9f:2c:
5d:fd:29:55:18:f9:b6:0f:64:15:b7:53:74:b6:10:0f:93:7e:
e1:ea:8d:97:a9:94:c3:c6:9c:76:d7:7a:2d:d3:7c:6d:88:31:
e4:ee:70:da:a1:8b:b1:fb:13:c6:f2:d3:14:57:96:e6:9a:8a:
59:d5:77:ae:bf:30:77:cf:e9:65:7f:92:f2:63:18:df:30:b0:
97:ca:33:10:d5:21:af:91:5d:47:e3:f1:51:66:c3:e9:f1:9a:
8d:eb:1e:e0:cb:d6:73:36:b4:e5:cb:ee:a5:b4:49:01:11:ee:
10:5b:4a:21:a1:d5:36:bc:c7:e1:12:45:af:8f:db:df:b1:9e:
af:91:06:80:ac:c4:45:a9:82:11:d4:f9:b4:c5:0c:7a:5a:32:
48:5a:a8:c1:54:3f:df:6f:c4:33:f2:2b:d8:db:4d:ed:88:1a:
a4:6d:e9:04:b2:06:ae:19:24:ab:06:8b:9c:50:71:f4:59:97:
d9:07:33:c2:aa:58:fc:8a:3f:93:db:d0:11:4c:ba:40:d4:91:
5f:25:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:28 2025 by rpki-client