Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424D6730F2CC11EFB0D25D56762E951A.roa
File: 424D6730F2CC11EFB0D25D56762E951A.roa (raw, json)
Hash identifier: gJFhJFLOzRMy+Nw3eQdXVZRS8WBar1+6JbqH09SI8w8=
Subject key identifier: D1:10:3A:13:2C:FE:51:5C:13:43:53:53:15:46:DC:6D:30:93:55:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424D6730F2CC11EFB0D25D56762E951A.roa
Signing time: Mon 24 Feb 2025 16:27:37 +0000
ROA not before: Mon 24 Feb 2025 16:27:33 +0000
ROA not after: Fri 03 Oct 2025 16:27:33 +0000
asID: 55020
IP address blocks: 154.210.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89191 (0x15c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:27:33 2025 GMT
Not After : Oct 3 16:27:33 2025 GMT
Subject: CN=67bc9df9-0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:91:1a:3d:5a:27:95:b6:2b:71:4b:b3:36:
18:ac:e6:1e:dd:c5:12:39:8f:0c:4f:c6:40:5a:d5:
20:cf:0e:2f:2b:bc:d8:1b:da:aa:1c:b8:09:b2:09:
df:55:e2:ae:ed:d0:33:d2:4c:17:e1:84:1f:6c:07:
14:92:ec:bc:e3:b4:f3:50:95:38:27:68:49:ff:02:
90:fe:cc:0b:5f:7d:ab:93:ce:52:a8:76:12:10:79:
c3:42:72:3d:87:d4:f3:03:f4:22:80:87:e6:f9:e2:
7c:7e:28:75:33:82:b6:43:ff:3c:14:c5:71:72:ab:
03:c5:1f:58:75:6f:4f:31:c7:05:79:ef:cc:2c:2d:
73:6b:21:b5:f7:75:22:1e:c4:17:55:83:89:73:a5:
0a:68:ed:82:81:f5:ce:2e:e2:cf:82:59:5a:db:1a:
7a:79:a4:38:30:17:ca:5d:7f:98:9c:72:0d:b1:6d:
77:e0:20:d1:db:d9:a7:57:27:f8:af:0c:dd:09:22:
96:83:71:6f:e9:74:32:85:64:de:14:0a:ab:08:6f:
e7:17:c0:ad:6a:c6:23:8e:3a:dc:1b:8f:a6:b4:10:
aa:15:6c:f0:07:7d:ac:39:4d:78:3a:2f:ad:6b:59:
75:27:b3:c4:9e:28:7d:ed:5a:6b:01:61:2f:ec:38:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:3A:13:2C:FE:51:5C:13:43:53:53:15:46:DC:6D:30:93:55:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424D6730F2CC11EFB0D25D56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c2:8c:d6:9d:53:76:b1:70:15:03:d9:a0:69:f3:b9:28:30:
49:99:e5:d5:50:18:27:ba:8e:9e:c8:03:54:0f:aa:2c:a1:8f:
f5:43:95:04:51:2d:88:b6:df:95:41:9f:97:4c:fb:76:6a:e2:
20:e5:40:4e:c9:c5:14:b1:c8:ae:11:93:ca:6b:51:bf:2c:e8:
65:2d:00:e5:fe:ff:d4:b9:f5:e0:8c:1a:ba:1d:c6:77:80:13:
de:27:41:1a:2c:51:66:b0:20:10:58:91:b9:1f:22:c1:18:ff:
5f:c2:b3:53:e4:4e:59:ef:8e:12:d0:1a:d4:cf:07:7e:f8:69:
cb:d4:9a:af:a6:17:ec:81:61:a3:79:ed:fd:20:44:76:ab:fa:
69:97:5e:1c:4b:0c:f5:92:59:cd:c1:41:d2:4e:a4:f0:00:3a:
33:fa:8e:36:22:76:32:0c:25:66:3a:9c:88:eb:f1:4d:bd:cb:
04:26:06:0e:b6:a5:46:77:be:95:24:65:a8:77:c1:08:4f:8d:
d0:2c:ef:f1:3c:26:ed:4c:1b:8f:c8:29:6a:4e:b8:1e:ef:03:
55:91:55:56:4d:da:db:54:bc:05:3f:aa:f0:ff:9c:4a:93:b5:
85:ca:ee:78:81:4b:d8:83:99:ab:d0:21:1b:84:a9:02:3e:57:
79:a3:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:22 2025 by rpki-client