Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315AE7FAF99711EF9901E4BE762E951A.roa
File: 315AE7FAF99711EF9901E4BE762E951A.roa (raw, json)
Hash identifier: Rij+ml1UqlkGWpUKjF2xV2xdNCuXbCdxY59QyDp8bW8=
Subject key identifier: 39:72:38:6F:B7:28:0F:66:3D:AB:64:30:9C:2B:10:43:71:56:42:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017248
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315AE7FAF99711EF9901E4BE762E951A.roa
Signing time: Wed 05 Mar 2025 07:55:24 +0000
ROA not before: Wed 05 Mar 2025 07:55:20 +0000
ROA not after: Tue 15 Apr 2025 07:55:20 +0000
asID: 138915
IP address blocks: 154.203.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94792 (0x17248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 5 07:55:20 2025 GMT
Not After : Apr 15 07:55:20 2025 GMT
Subject: CN=67c8036b-f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:b7:34:23:47:65:07:6e:1b:76:a0:93:88:
ac:3d:c4:8d:9f:9c:41:b3:f2:fe:ee:07:8a:0f:1a:
4e:05:3c:5c:18:fb:5e:bf:47:74:17:5f:ce:c9:8a:
86:18:bb:59:bb:f2:f6:51:9e:1d:0f:92:71:c5:b2:
d0:47:fe:68:d3:12:e7:2a:be:38:42:04:b8:b9:6c:
cd:80:3e:59:a1:60:72:5d:61:47:ad:97:7e:09:b6:
4b:08:54:ac:0a:cc:64:81:ff:30:7f:96:7d:28:f9:
6d:2c:52:fe:16:45:b7:86:c0:8f:6b:b0:3b:f1:6e:
3c:68:57:3c:8a:08:20:f6:65:ed:b4:3e:fd:7b:f0:
fb:58:89:2a:ca:8a:71:35:e8:c1:65:7b:97:aa:5b:
5a:02:fc:ce:b3:80:25:e6:68:9c:98:2a:64:dd:e8:
71:60:11:92:ce:bf:6e:33:36:73:f2:4e:1f:d9:50:
a8:eb:ce:5c:5c:a1:26:27:76:b9:c4:9b:94:29:c6:
70:57:6a:9e:75:31:3c:95:69:5e:fa:32:31:5b:6f:
2b:72:e7:a8:dd:a1:bb:8b:ba:b0:94:50:e2:81:40:
41:55:2a:98:08:95:be:08:8f:78:96:d0:85:b1:dc:
4a:f4:07:4e:ec:cc:8b:37:93:08:fd:ac:30:cf:0a:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:72:38:6F:B7:28:0F:66:3D:AB:64:30:9C:2B:10:43:71:56:42:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315AE7FAF99711EF9901E4BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.143.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:fe:85:f6:76:c9:2b:91:2e:b4:b0:51:06:28:95:cc:60:ac:
a7:be:c0:56:47:6f:26:a6:f3:b7:fc:bb:51:b2:bc:37:37:1c:
91:21:c6:a9:22:d3:14:7d:7e:23:ff:0c:66:60:91:38:2c:7b:
dc:18:92:0a:21:9f:96:0a:f6:28:91:38:82:3d:b0:a8:c2:45:
62:a3:ae:ad:49:52:ba:ca:c5:07:ce:62:15:9b:0b:1c:9c:3c:
17:e0:d0:1d:25:c7:ea:81:a3:96:a8:1c:3b:3d:74:91:48:65:
ac:14:f8:bf:d8:d0:4d:95:da:c4:2f:15:62:d3:b7:2e:bd:ea:
e2:aa:04:69:93:20:fb:d7:13:43:1b:de:8b:4c:db:2b:e3:b5:
3b:92:85:fb:ae:7d:8d:f5:40:45:8a:21:30:81:da:41:86:0e:
c2:81:6e:c9:31:a8:4d:28:b4:75:28:57:1b:70:35:e7:66:76:
0d:b1:ff:1d:ad:95:fc:4a:28:84:e6:4d:90:b7:cb:fa:07:d3:
26:38:6e:ae:28:f6:8c:0c:4f:d5:94:f6:ff:81:d2:a6:88:0a:
eb:40:40:d5:28:21:4b:98:b1:39:79:c6:bf:22:bc:1b:fa:d7:
dc:90:5b:b9:d5:39:80:09:7d:b4:d8:a2:62:ad:0a:31:ec:2b:
85:75:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:00 2025 by rpki-client