Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BB86F2E53511EFBAA4025D762E951A.roa
File: 46BB86F2E53511EFBAA4025D762E951A.roa (raw, json)
Hash identifier: C0rxMqDc4qt7USo8eQEAXW8fQZ7SDxXdE79AAfV6pOg=
Subject key identifier: 39:03:80:32:9C:59:CD:A1:E4:8C:F4:69:7F:78:5A:9A:43:9B:C3:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015345
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BB86F2E53511EFBAA4025D762E951A.roa
Signing time: Fri 07 Feb 2025 09:24:06 +0000
ROA not before: Fri 07 Feb 2025 09:24:02 +0000
ROA not after: Sat 13 Dec 2025 09:24:02 +0000
asID: 984
IP address blocks: 154.220.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86853 (0x15345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 7 09:24:02 2025 GMT
Not After : Dec 13 09:24:02 2025 GMT
Subject: CN=67a5d135-759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:65:8f:02:25:7b:74:e1:80:ae:5e:fd:1a:
d0:a8:f7:40:80:47:ff:35:47:f6:90:7c:64:8a:e2:
96:34:c0:35:7c:15:86:40:93:5c:2c:d4:e5:71:d7:
53:ed:07:54:74:01:55:2b:64:d2:4f:35:b0:bb:f5:
49:b1:ff:a5:f6:2b:6b:bd:a1:72:43:98:c1:42:03:
33:f7:39:bc:52:a3:f4:e6:c9:2c:27:d2:8f:9d:81:
34:2b:c5:f5:cb:b8:6f:5f:e0:18:8c:be:1c:a4:bc:
82:79:26:6a:6b:3f:50:4f:3e:08:0f:a1:7d:e7:b5:
b4:a0:47:bb:48:e4:f5:c0:c1:43:6d:ca:21:fb:a7:
ce:df:41:a6:4d:8e:71:f9:26:90:72:d5:9d:cf:6f:
fe:ef:f6:bd:6d:b4:a9:ff:1a:ec:57:5e:4c:c0:55:
08:79:b8:88:9a:7d:46:9d:c6:98:54:85:3e:d6:90:
2d:21:76:1a:3c:54:2d:35:23:8d:11:9b:b9:38:4c:
2e:3a:28:ca:fc:e4:d3:f6:c1:e5:a8:cb:f3:29:c9:
6a:aa:6a:a5:a2:ee:9e:a1:83:a9:ed:4b:2f:89:39:
cf:22:98:7c:91:74:5f:be:6f:38:a2:91:45:f6:0b:
0d:20:6a:c2:b5:94:cc:98:f1:d1:79:6e:21:3e:0b:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:80:32:9C:59:CD:A1:E4:8C:F4:69:7F:78:5A:9A:43:9B:C3:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BB86F2E53511EFBAA4025D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.162.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3a:8f:47:ba:bb:b8:83:fe:54:b4:e7:00:47:21:cc:5c:06:
6c:7a:9a:69:b1:b1:02:bf:56:e5:38:2e:eb:52:51:68:9c:34:
b2:03:3f:86:33:39:32:a3:d7:02:58:8c:d6:50:cb:d5:a1:01:
6a:85:aa:79:59:b1:af:f0:eb:1c:93:70:93:90:34:73:b7:cd:
18:2a:d7:94:f8:0f:08:be:bd:9a:89:f9:cb:0e:c7:ca:aa:98:
51:af:79:7a:e3:93:b9:c8:dd:0d:cf:a5:15:69:78:e2:96:53:
75:85:40:7f:a9:04:0b:a4:25:1f:03:ac:63:10:3d:2f:79:f8:
45:d6:4a:71:46:8a:9c:a3:0d:8c:69:ba:ad:ac:b9:12:4c:26:
df:b0:bf:34:57:29:a2:44:ca:f4:d1:94:08:c4:d9:6c:59:f6:
a9:33:51:f8:f7:ff:04:af:ae:38:c5:e5:2d:0a:5a:d8:9e:71:
7f:6e:4a:b1:73:17:7a:f7:3d:44:73:dd:2d:0e:1d:6c:7f:15:
c7:2c:c3:d5:10:c9:d7:1b:29:ca:ee:24:70:16:4a:8b:36:14:
27:84:d6:b4:67:91:d7:88:d5:58:05:54:c1:d4:35:ce:eb:5c:
eb:b8:8d:c7:f4:90:93:06:b7:09:98:2d:9e:fa:9f:85:3e:6b:
cc:8e:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client