Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D17DC0F2E411EFA2CEF076762E951A.roa
File: 45D17DC0F2E411EFA2CEF076762E951A.roa (raw, json)
Hash identifier: bfHCGZTQi+x5Fcsi9xYV/DS5GGzlXSIyhggbDWJcQd0=
Subject key identifier: 3B:D3:55:5E:D0:0F:59:A1:2F:1F:87:E3:0E:A3:BF:53:82:96:98:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D17DC0F2E411EFA2CEF076762E951A.roa
Signing time: Mon 24 Feb 2025 19:19:31 +0000
ROA not before: Mon 24 Feb 2025 19:19:27 +0000
ROA not after: Mon 07 Apr 2025 19:19:27 +0000
asID: 138915
IP address blocks: 154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89320 (0x15ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:19:27 2025 GMT
Not After : Apr 7 19:19:27 2025 GMT
Subject: CN=67bcc643-8da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:8a:af:34:43:5d:d2:af:69:6a:6e:32:35:
c3:80:0d:13:57:d6:73:2a:9d:cc:6a:bf:29:93:df:
26:57:59:19:76:c6:5a:8b:25:26:a8:28:3c:02:83:
9d:ca:3f:f1:fb:1b:d3:83:d3:24:a5:90:44:b5:dd:
c1:7b:19:91:ee:a2:0b:e3:86:85:0f:bb:2b:ff:fd:
62:08:ea:ac:01:a6:9e:f4:bb:fe:6b:64:0d:96:47:
38:8b:e9:e8:c0:9e:cd:f2:69:0a:5d:ea:0a:dc:c2:
49:5f:0d:41:21:49:95:56:01:f8:f2:4e:1b:25:64:
65:64:70:e9:3c:8d:86:ca:6c:c0:13:8a:c7:a2:5f:
fb:d4:52:d0:95:f0:60:c1:28:c1:21:92:e9:62:41:
b4:7d:43:df:27:f7:39:8d:a5:88:66:67:ce:37:5c:
ed:af:f6:e2:4a:56:12:be:59:13:be:3c:46:c3:8a:
67:35:f6:bd:c3:29:35:38:21:1c:7c:ab:1c:29:9a:
e0:a4:7a:ef:9d:5c:dc:38:52:62:13:47:66:39:d3:
0b:03:f5:fd:7e:7e:55:d3:b6:89:16:65:a5:c0:c4:
79:c6:13:5f:75:15:e8:63:71:b8:85:27:50:61:74:
fd:82:e7:19:8b:aa:03:f3:cc:db:9d:2b:79:20:0a:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:55:5E:D0:0F:59:A1:2F:1F:87:E3:0E:A3:BF:53:82:96:98:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D17DC0F2E411EFA2CEF076762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:dc:7b:a0:66:0b:dd:dd:66:4e:78:9c:c4:95:28:53:4d:27:
57:02:32:c8:97:30:e4:5c:e9:f6:1c:6c:a2:46:09:ff:68:9b:
20:bf:8a:28:a6:db:c4:0b:5b:4c:ae:9e:46:59:e8:f8:87:20:
0c:87:d0:00:33:b6:3a:42:be:fe:98:50:55:7b:71:ac:a5:4e:
4f:58:32:10:2c:35:b3:0c:92:00:12:5d:80:ed:8a:74:a2:97:
21:3a:f9:e7:24:01:13:48:28:5b:0f:76:9c:c2:5b:2d:5f:07:
51:86:a8:3d:ab:49:a4:58:9d:27:1c:99:e8:7c:a1:e6:04:1f:
4e:cb:20:05:71:93:8b:62:e6:94:bf:1f:dc:60:4a:fb:30:9f:
cb:69:5e:24:c3:d1:2b:f4:ee:30:dd:37:20:66:c7:0d:a3:05:
9c:fb:ab:59:54:8e:89:ad:7c:b8:9a:2f:9a:6d:84:f0:33:20:
20:aa:db:3f:06:08:8a:37:bf:09:77:f0:ee:96:de:1f:8a:92:
80:ab:76:53:8f:4d:59:36:08:57:cb:7b:bf:76:29:71:16:f4:
e7:28:25:22:61:d2:91:e5:8e:83:9b:9f:73:a2:54:e9:a4:11:
bd:34:ba:ec:06:bc:d4:75:50:4f:65:83:d2:97:c5:be:7f:e9:
7c:38:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:13 2025 by rpki-client