Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A116F08C93D11EF85895BBD762E951A.roa
File: 2A116F08C93D11EF85895BBD762E951A.roa (raw, json)
Hash identifier: u2zWo3k8VKXhPczt+eur/r9BYIYCQt/QLC2qlqAgkcQ=
Subject key identifier: 25:9A:64:B9:41:AA:D8:07:B2:E8:A8:17:D7:43:26:4C:EA:87:D1:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01340B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A116F08C93D11EF85895BBD762E951A.roa
Signing time: Thu 02 Jan 2025 19:10:01 +0000
ROA not before: Thu 02 Jan 2025 19:09:57 +0000
ROA not after: Mon 13 Dec 2027 19:09:57 +0000
asID: 17561
IP address blocks: 154.223.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78859 (0x1340b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:09:57 2025 GMT
Not After : Dec 13 19:09:57 2027 GMT
Subject: CN=6776e489-93f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:17:e7:c7:e1:03:67:9d:6a:82:77:22:fa:
f8:1e:75:1a:d6:86:75:41:31:17:01:0d:f4:94:ef:
c5:0b:07:23:b0:06:68:b7:e3:ef:7e:8b:26:0e:44:
27:1a:07:f1:8c:15:8f:27:ac:20:57:7f:be:55:24:
84:c4:ef:73:a4:df:5a:2a:34:17:ee:39:b2:4c:18:
30:b6:d7:f1:1c:96:91:da:c1:08:f5:87:75:4a:14:
be:cc:b4:d5:19:96:d6:d8:e0:be:63:c4:9e:57:f5:
f2:5e:1b:13:d5:e7:75:36:16:1d:fa:cc:e5:0f:44:
48:23:3e:99:a4:d3:ac:bf:c5:e2:d8:4a:47:30:72:
2e:b3:6a:03:69:a2:8a:80:6b:f9:fd:36:1c:18:bb:
ec:eb:c2:bb:02:95:5c:e3:d6:b2:35:7f:9a:43:f9:
bf:7c:b2:87:46:f4:cd:5f:da:b1:c4:1c:c5:cf:49:
c0:ab:a4:cc:e3:47:4c:61:3c:60:bb:4f:4a:9c:f3:
f2:17:71:a5:19:0b:f7:71:54:3c:6a:ca:bd:c0:54:
5f:41:7e:0b:54:ee:c8:0e:0f:90:27:85:04:ca:54:
8d:a6:28:2b:e6:3c:2a:be:27:0e:dc:1a:fe:2c:e2:
46:46:52:86:38:05:97:a0:12:05:74:cb:1b:ab:d7:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:64:B9:41:AA:D8:07:B2:E8:A8:17:D7:43:26:4C:EA:87:D1:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A116F08C93D11EF85895BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.233.0/24
Signature Algorithm: sha256WithRSAEncryption
76:53:b0:59:f7:c3:dd:23:85:e7:cf:08:af:b3:8b:f7:95:bd:
b2:7e:56:bd:ed:0b:02:30:bd:49:25:69:a2:51:14:f8:0b:fa:
8e:b7:ff:6d:33:ab:03:8e:11:59:81:10:eb:13:c6:48:13:38:
0a:a5:c3:83:0a:40:5f:d5:17:08:23:36:a4:75:5f:f4:12:01:
22:ff:72:02:2c:e1:e3:88:4c:6e:82:5d:88:ff:02:65:8e:ed:
cf:5b:af:8f:53:6b:02:ed:df:6e:39:27:99:04:72:7b:e7:1f:
7d:ab:ea:d2:f9:cc:a3:4b:2d:f9:bb:3d:8b:58:38:11:ca:66:
b8:f7:59:92:b1:8e:08:26:b8:d8:6e:0f:da:ef:df:70:66:74:
21:31:83:c4:0d:c2:31:4d:4f:24:bd:1c:62:df:9c:44:06:cb:
d9:39:71:6c:64:c1:6f:1d:9b:3d:7c:46:f1:c9:68:95:49:be:
5c:ba:d5:2e:e7:8e:49:57:3e:78:16:84:f6:1a:7c:51:3a:fb:
92:12:3a:0a:0a:32:2a:80:a0:3a:0f:24:39:c2:85:ea:99:60:
b8:42:3b:40:74:bf:8f:7a:a9:46:b3:29:82:d0:83:9c:52:7a:
08:ce:e7:54:85:f1:3b:0b:6c:2e:3d:11:0c:19:40:25:70:88:
b8:90:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:48:01 2025 by rpki-client