Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279A1406F44311EFB87DA55A762E951A.roa
File: 279A1406F44311EFB87DA55A762E951A.roa (raw, json)
Hash identifier: rOyRFoB8sl4gCL23GHwlWr3+T/XL3rdIBK5q8k/eR84=
Subject key identifier: 58:7B:53:A2:BA:22:DA:1D:F2:68:3D:0D:CC:23:3F:D9:0E:DB:67:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016391
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279A1406F44311EFB87DA55A762E951A.roa
Signing time: Wed 26 Feb 2025 13:11:14 +0000
ROA not before: Wed 26 Feb 2025 13:11:10 +0000
ROA not after: Sat 19 Feb 2028 13:11:10 +0000
asID: 17561
IP address blocks: 154.82.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91025 (0x16391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:11:10 2025 GMT
Not After : Feb 19 13:11:10 2028 GMT
Subject: CN=67bf12f2-982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:f9:ff:1a:3f:38:5a:cb:79:16:a3:2e:97:
67:0f:97:eb:29:bb:66:f0:a6:96:77:a2:51:e1:06:
95:1b:c3:a6:81:63:5d:6e:d8:61:2e:92:e2:f5:b2:
7b:e7:11:16:34:a3:e5:c4:19:c8:f9:56:d5:bc:ee:
23:a1:3f:c0:59:6f:7d:8a:2f:15:fd:87:d5:50:0a:
bb:80:3f:1c:0c:17:07:37:70:e1:ae:1c:0f:0a:92:
51:4c:43:eb:e6:cc:6e:14:2e:8a:07:e4:e6:78:22:
20:55:c4:f3:40:fd:59:0b:57:b3:7d:14:aa:0a:46:
93:c4:51:e5:9f:d9:d9:4c:cb:97:ec:a3:ab:fa:04:
ac:a9:cb:7c:eb:f0:90:af:aa:0c:74:84:c8:6f:80:
5c:1e:bd:13:92:8b:65:ef:c2:62:d9:38:54:2d:7b:
b1:ff:71:a6:5a:0b:7b:da:d5:a4:41:a6:3d:b6:bd:
43:e3:a9:e4:75:d1:57:66:ad:9f:b9:9e:96:d7:9a:
67:71:67:cf:57:c4:e3:e8:fa:38:39:f1:80:36:7b:
11:66:3f:b1:3e:0d:fb:f8:08:f9:26:12:62:01:30:
f0:2e:90:a7:a7:fe:33:58:75:f5:40:a3:e0:bd:6d:
6b:b9:af:71:ee:5d:a5:1a:fc:c8:ba:6a:62:7f:88:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:53:A2:BA:22:DA:1D:F2:68:3D:0D:CC:23:3F:D9:0E:DB:67:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279A1406F44311EFB87DA55A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.173.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2d:12:02:02:36:93:23:80:06:84:14:48:2e:28:d0:5e:29:
56:7e:e9:aa:be:d2:22:0d:2f:5a:c8:3b:e2:d8:61:f0:29:ca:
f3:cc:83:76:50:7d:ad:f2:39:99:fa:62:56:27:f2:9d:67:83:
27:2c:ec:de:c7:cf:60:d3:5d:0d:8d:a3:9a:9b:3c:e2:fe:a9:
74:f2:59:21:d7:aa:66:f5:16:75:76:1e:c7:5e:33:02:b0:8f:
b7:a0:14:f1:cb:93:af:45:8c:07:3c:bc:cc:b3:d5:ed:58:96:
41:4f:b9:84:9d:c1:e9:0e:5b:51:30:ab:04:6e:05:58:7c:db:
af:fd:ae:b6:04:25:ff:d6:b2:9f:f9:b0:14:35:3b:dc:4b:dd:
37:2f:f7:30:d9:6c:6b:67:d6:88:f0:5b:f0:a2:ec:08:c4:a1:
46:bf:12:d6:1a:e7:86:64:55:ef:14:51:79:62:ef:88:6d:c6:
9f:b3:2e:f4:96:b2:c0:eb:41:3e:b1:19:3b:1e:70:c0:0d:1d:
13:a3:18:2d:89:62:57:76:d8:d4:bb:55:e3:a2:31:f8:e3:7d:
af:69:24:e2:0a:ef:00:4f:59:c3:1d:ef:15:fb:1e:f7:12:5a:
c7:cf:24:bb:1e:1b:b1:4a:77:7b:06:ad:03:2b:03:c1:cb:2c:
ef:07:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:05 2025 by rpki-client