Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F4C624C8AF11EF8138CAB9762E951A.roa
File: 25F4C624C8AF11EF8138CAB9762E951A.roa (raw, json)
Hash identifier: YbqZvM0A+9bgkXeNOWu9llZvUdLm8zlOBkFHBsu9/dU=
Subject key identifier: C3:7E:75:8B:52:9B:6A:68:EB:E4:29:2E:58:3A:87:9C:35:E6:DA:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013198
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F4C624C8AF11EF8138CAB9762E951A.roa
Signing time: Thu 02 Jan 2025 02:13:25 +0000
ROA not before: Thu 02 Jan 2025 02:13:22 +0000
ROA not after: Mon 13 Dec 2027 02:13:22 +0000
asID: 17561
IP address blocks: 154.220.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78232 (0x13198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:13:22 2025 GMT
Not After : Dec 13 02:13:22 2027 GMT
Subject: CN=6775f645-3c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:87:d8:27:5c:bf:8e:60:9a:b7:3e:47:2d:
3a:14:22:99:89:cd:9a:a6:4b:74:9a:53:44:f5:bc:
86:79:8a:ed:1c:e2:e7:72:a6:bc:d7:49:f1:d2:e6:
32:f0:77:de:65:14:a0:17:89:2e:86:e9:df:53:2a:
98:91:48:c6:5e:70:67:f2:94:ec:1b:cc:7b:dd:12:
31:95:07:19:92:9a:c7:08:b6:73:37:dd:c1:14:4f:
fc:af:d5:4b:4b:30:89:95:40:ac:94:2b:ed:9a:62:
ce:3f:2c:ab:fe:67:dd:63:20:51:48:9b:32:a8:55:
09:8f:9a:39:94:07:79:f5:66:59:ad:1c:40:24:fa:
ab:9b:c6:f4:3c:50:bf:55:cd:f2:a2:9f:9a:46:69:
33:30:24:7c:fd:f2:d4:2c:83:e4:0e:c2:86:92:d2:
53:d3:4c:ee:da:63:70:88:28:98:56:77:47:ee:cc:
38:94:62:fb:85:69:48:0c:b4:e5:e2:ec:7b:e8:ba:
d3:bb:06:ee:36:1f:b6:66:5d:79:bd:f3:bb:06:e5:
f2:95:28:8b:85:f2:52:67:39:5a:2e:c0:2d:67:4c:
69:5e:90:2f:ae:bc:74:30:28:0e:e0:3f:f0:07:d6:
b8:a0:3d:13:07:64:9e:cd:5f:b0:93:dc:60:64:a8:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:75:8B:52:9B:6A:68:EB:E4:29:2E:58:3A:87:9C:35:E6:DA:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F4C624C8AF11EF8138CAB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:d8:94:e2:86:96:94:9d:2d:71:8d:a1:dd:01:5f:e6:c5:
86:fa:ac:26:5f:ea:41:98:48:6c:d9:56:42:70:6a:b2:bb:56:
bf:53:37:ae:5b:e9:0d:f4:78:a4:13:4c:0d:9a:f8:d5:c9:82:
36:27:70:a7:4f:99:f3:72:ee:1b:17:b6:f1:fc:a8:97:31:ce:
7a:82:1b:25:a4:38:bb:a8:9f:bb:ce:50:02:7a:88:0d:70:0b:
eb:89:e7:a6:8f:62:97:0c:10:0e:1e:83:c2:b5:b9:fa:2b:97:
22:c1:26:da:ae:f4:4c:30:8c:cc:f4:33:54:b0:a9:a1:d4:5c:
b6:d1:01:f2:2f:e1:33:b1:10:9f:27:57:7f:c5:5f:e5:71:6e:
c2:e2:e2:2f:6e:a3:82:09:db:e9:41:ad:02:ad:f9:02:6a:00:
74:b7:95:be:4f:71:1f:3c:af:fd:80:4e:9f:f1:78:26:e3:1c:
96:fc:9f:0a:be:82:57:33:52:d7:0f:04:31:cc:4e:5c:62:4f:
4d:e4:11:78:11:77:2a:a3:a6:cf:26:dd:02:2c:00:bb:af:ec:
dc:7e:28:55:6e:a3:bc:f2:2a:f8:56:c6:20:b6:7b:4d:7a:8e:
ce:12:dd:2e:62:f1:66:0c:21:f6:78:33:29:ad:91:e0:8e:3d:
14:f0:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:27 2025 by rpki-client