Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2915FEA003DC11F0BDC22DBC762E951A.roa
File: 2915FEA003DC11F0BDC22DBC762E951A.roa (raw, json)
Hash identifier: MOKSGwTJE2DfkHM6t2AAYF1Ab+z7gf+3l8VMTFipg8E=
Subject key identifier: A8:49:82:15:27:03:CD:AA:73:F3:D1:86:0A:25:B3:F0:FE:ED:EB:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017484
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2915FEA003DC11F0BDC22DBC762E951A.roa
Signing time: Tue 18 Mar 2025 09:34:16 +0000
ROA not before: Tue 18 Mar 2025 09:34:13 +0000
ROA not after: Fri 18 Apr 2025 09:34:13 +0000
asID: 57043
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95364 (0x17484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 09:34:13 2025 GMT
Not After : Apr 18 09:34:13 2025 GMT
Subject: CN=67d93e18-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:2b:65:f1:27:0e:c3:2e:e8:57:a2:b8:d9:
c1:9b:95:94:33:7a:4b:81:d3:07:27:9c:a2:59:8d:
de:66:d9:4c:f5:b8:48:e8:8d:a4:23:60:ea:fb:25:
71:0f:60:d7:b3:19:53:e7:87:1b:69:b1:71:f3:9f:
0d:33:05:39:4b:69:ee:77:7e:d1:49:99:3d:ed:4d:
93:44:51:19:2c:7c:46:e4:10:64:2a:d8:c7:7d:1f:
93:bc:af:f3:9e:e7:73:0b:8c:28:a3:16:f4:03:a2:
0c:13:f8:f2:9f:1f:cf:2f:da:07:bd:a9:50:9e:91:
cb:da:a8:24:af:ca:10:0f:d0:87:67:b2:87:12:72:
db:27:54:a7:eb:42:13:6e:27:a2:59:3d:c4:31:f6:
99:85:1c:0e:46:69:47:39:92:4c:f8:76:49:cf:dd:
d2:e3:22:8e:15:8d:9b:b8:5d:8d:bc:d5:64:d5:ff:
25:5e:09:46:71:c2:6f:d6:9e:9a:f6:a5:16:81:23:
78:7e:29:00:9a:5f:1b:15:76:07:6f:9a:1d:de:16:
1c:5e:83:b4:ff:f0:5e:f4:4f:2b:8b:95:51:84:40:
c6:01:87:49:15:8d:05:60:9f:9e:c5:f5:79:6c:90:
3c:50:ec:60:85:22:9f:05:f5:7c:5d:56:0e:a5:47:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:82:15:27:03:CD:AA:73:F3:D1:86:0A:25:B3:F0:FE:ED:EB:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2915FEA003DC11F0BDC22DBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f1:1d:c2:c5:4d:f0:cf:3f:4e:bd:10:65:4c:1e:bd:f3:4e:
fb:9e:a2:63:94:b7:08:17:8c:ef:22:e0:2e:5e:8c:fc:58:31:
f4:b5:71:3f:17:87:b1:ce:6a:85:99:af:0d:84:92:11:f4:ad:
27:e9:3c:59:d7:9b:aa:e2:17:00:f3:6c:81:18:1c:fa:6f:7a:
da:75:de:b7:6e:eb:99:b6:34:fc:af:40:1b:31:fc:21:95:b9:
20:e2:89:09:d8:52:97:83:0b:7d:11:7b:d1:cf:85:9a:10:57:
f4:b1:a1:0b:7d:c6:f6:97:ba:08:6f:4f:01:18:7b:fe:00:86:
93:f6:06:df:a7:f3:61:8b:51:46:b4:30:89:b4:ef:d3:eb:87:
32:14:af:16:96:ee:8d:cc:47:4c:8c:d8:6c:c7:dc:24:66:dd:
7c:04:a8:91:04:74:c1:ec:02:ab:0e:85:bd:29:97:5e:64:e4:
b6:93:0d:b4:2a:92:04:b2:94:d6:78:1a:66:4d:71:a2:91:3d:
58:14:46:ff:04:85:2d:3f:24:cc:9b:a1:58:f1:61:66:a2:67:
79:d7:5f:7a:32:20:f8:02:5e:ce:c8:f9:32:14:c6:b4:5e:3d:
8d:44:59:6e:55:81:4d:c3:41:b5:83:8d:01:1d:8a:73:4f:77:
b9:90:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:42 2025 by rpki-client