Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E1352F53F11EF8966FDA6762E951A.roa
File: 313E1352F53F11EF8966FDA6762E951A.roa (raw, json)
Hash identifier: ujVUB8R35XXyK+G3RpBtylD/TBJAK1aeJ20vMqX/cAM=
Subject key identifier: 09:1C:83:78:44:DF:E9:BA:E0:44:CB:56:56:1A:00:5B:57:72:DF:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016992
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E1352F53F11EF8966FDA6762E951A.roa
Signing time: Thu 27 Feb 2025 19:15:23 +0000
ROA not before: Thu 27 Feb 2025 19:15:19 +0000
ROA not after: Fri 11 Apr 2025 19:15:19 +0000
asID: 63139
IP address blocks: 154.203.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92562 (0x16992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:15:19 2025 GMT
Not After : Apr 11 19:15:19 2025 GMT
Subject: CN=67c0b9cb-7469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:ea:ee:7e:81:2e:f1:41:0f:26:01:4c:52:
e6:77:0c:f1:3e:51:62:bb:4d:78:86:7f:c7:fc:33:
4f:10:4d:13:c0:d6:77:fa:1f:6a:e2:75:cd:d7:0b:
c8:89:d1:57:b6:0a:7a:ef:dd:3c:7d:92:47:23:c3:
3a:43:d1:72:0a:74:52:c5:fc:cb:0c:fc:c1:03:8b:
3d:b1:31:6e:f5:fa:27:34:7b:60:dd:42:8a:d9:25:
88:93:77:77:5c:d1:c5:dc:84:57:d8:fb:a9:e8:74:
f5:03:c2:4b:60:1c:89:10:36:17:83:02:06:fa:14:
60:06:65:9a:2b:19:c3:69:4c:1e:62:23:46:ce:2a:
74:d4:8c:ae:14:93:33:f4:7b:fd:cd:62:14:10:ca:
f1:c4:5b:9b:43:86:5b:41:75:98:f2:10:b9:a2:6a:
a1:ea:af:5e:c1:8f:8d:70:2d:37:47:0b:f9:f3:48:
d0:45:a8:ea:0a:c4:5a:f8:ba:a9:9a:bf:1c:f6:89:
c3:c7:70:8d:8c:32:bd:d1:57:ae:08:81:f2:eb:d3:
4a:e9:bd:96:a9:7f:f5:cb:d6:60:b2:23:d6:8f:68:
7f:e1:3c:8a:78:dc:fc:0e:c5:64:4d:ac:ac:5f:f9:
8c:6a:24:03:d5:fd:4f:af:8b:c3:ae:8a:19:1e:86:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:83:78:44:DF:E9:BA:E0:44:CB:56:56:1A:00:5B:57:72:DF:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313E1352F53F11EF8966FDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ae:75:a0:0f:90:45:26:b6:ad:04:cd:9f:e0:e7:66:6c:2d:
31:b3:de:b2:02:69:e8:dd:94:af:d3:de:2b:22:dc:0f:0d:b2:
b9:49:25:b9:8c:fb:2a:27:13:a9:10:f5:c9:66:4d:d0:6f:04:
bb:d9:b0:40:c3:2a:f0:2e:80:19:e7:a4:6c:93:76:46:d5:5c:
db:a0:98:38:b3:db:5c:58:47:e4:01:e3:b9:3c:74:6a:d5:6f:
ea:5b:64:ad:ea:46:bf:ab:bb:14:1b:7a:24:cb:58:1f:bc:8b:
48:8c:98:5a:41:04:bf:f4:93:05:c9:14:ef:41:e0:1f:b7:cc:
e3:a5:04:10:3d:d4:d6:c4:c0:83:c5:b5:92:54:fa:92:72:db:
3c:fa:0c:92:17:84:56:06:93:3c:f7:77:33:54:7d:9d:0d:74:
38:5d:5b:87:37:43:e9:dd:42:22:4f:69:04:85:e7:b8:5b:85:
2a:17:96:3f:72:a2:ea:b0:33:28:da:49:24:55:2f:79:db:fb:
14:c0:08:15:90:ec:97:80:b9:11:2f:b5:fd:9a:60:f0:e2:c4:
3a:65:54:25:cc:4a:b7:4a:46:0a:1a:ba:c2:ee:9c:3e:71:04:
7d:48:72:f5:4a:61:27:f1:e2:47:97:6e:28:04:28:eb:37:45:
5f:78:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:55 2025 by rpki-client