Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F1C0D6E06F11EFAD1D77AA762E951A.roa
File: 26F1C0D6E06F11EFAD1D77AA762E951A.roa (raw, json)
Hash identifier: s9PNztbnTB/cSvQ3I9oOSG5QeTAu+co5/zpoNco3wsQ=
Subject key identifier: D8:CE:89:11:D7:D0:7D:02:D9:4D:28:0E:D9:6E:CD:F7:20:28:61:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F1C0D6E06F11EFAD1D77AA762E951A.roa
Signing time: Sat 01 Feb 2025 07:35:47 +0000
ROA not before: Sat 01 Feb 2025 07:35:43 +0000
ROA not after: Wed 09 Apr 2025 07:35:43 +0000
asID: 25818
IP address blocks: 154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85648 (0x14e90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 1 07:35:43 2025 GMT
Not After : Apr 9 07:35:43 2025 GMT
Subject: CN=679dced3-44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:c4:e7:c2:b2:f7:a1:dc:4e:94:2d:15:c2:
0a:30:96:25:46:f9:84:bc:d6:f8:0c:02:37:94:85:
22:64:8f:95:16:68:9f:ff:bc:a3:e9:a4:4f:64:25:
8a:39:b5:98:c2:6f:d8:ae:27:2f:cb:ff:69:8c:82:
77:43:7d:30:49:8b:5d:17:e3:a6:07:5a:e6:08:43:
a6:38:1a:0b:46:73:53:21:38:94:96:42:ca:00:f6:
0d:03:52:b5:8c:dd:9f:2a:55:ee:47:c3:d0:d3:06:
cb:8a:06:18:3a:22:92:17:c4:40:ab:ba:60:16:15:
5a:6f:c8:87:4a:a4:88:b7:0f:6b:3e:85:2c:71:33:
f8:d1:70:1e:41:49:a3:8c:6c:31:88:b2:f8:64:c9:
cb:c6:92:ba:54:68:d5:40:32:91:06:0c:d1:b2:cb:
12:20:5a:48:a5:95:35:35:af:37:6a:74:9d:14:7c:
70:5d:12:4e:70:bf:7c:70:ec:e2:38:c0:46:f6:9c:
8b:36:b0:b4:90:18:e9:11:22:b2:fe:f1:c7:24:42:
46:3b:9f:4a:48:f6:94:72:de:7f:84:b0:95:33:e2:
83:3c:7c:71:ec:5c:d2:32:39:a2:17:6e:48:c7:7f:
97:c4:63:91:29:b2:a2:4e:d8:1c:e2:18:a5:41:91:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:89:11:D7:D0:7D:02:D9:4D:28:0E:D9:6E:CD:F7:20:28:61:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26F1C0D6E06F11EFAD1D77AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:a3:a7:23:69:c6:7d:80:29:40:93:d3:24:c1:dc:07:b3:1f:
f6:ed:fa:3d:bb:49:ae:47:da:20:11:82:1c:78:e9:39:b9:db:
80:71:be:f0:bc:fe:ea:98:92:53:42:30:60:7c:5c:c4:3c:22:
3f:77:bf:88:48:53:72:f4:a7:bf:c2:2f:97:53:47:72:17:15:
a8:66:44:69:45:8f:e1:e4:7d:4d:86:e3:f0:3b:f8:8d:a9:9d:
a1:8c:ad:e9:41:94:aa:f4:e8:84:c1:1f:6c:f3:f9:8e:ba:40:
f5:f1:07:c5:66:f5:21:c4:8e:1d:96:a5:97:fe:eb:63:0d:2a:
8d:b4:15:b0:23:8a:7b:9a:bb:52:56:02:34:f6:08:6e:ce:b7:
fc:c6:d5:a7:0b:69:bd:19:75:e2:95:ba:a2:88:a1:2c:13:d8:
be:e7:de:7e:d3:a8:6f:d3:5d:7e:fe:96:55:ff:5d:08:dd:6b:
01:ef:a2:ae:fe:f8:17:b2:60:70:58:f4:70:49:95:aa:9e:84:
97:c3:18:12:ad:ae:a1:2c:50:7f:87:c0:4c:27:c1:d4:71:e7:
11:c7:4a:ad:76:14:c3:f0:c4:7d:89:56:ca:2a:54:79:b5:bc:
3b:18:05:0b:fe:76:0f:34:86:f7:34:67:1f:38:33:b0:b2:d6:
2d:ac:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:38 2025 by rpki-client