Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47FBCF02E2CB11EF81A6A28A762E951A.roa
File: 47FBCF02E2CB11EF81A6A28A762E951A.roa (raw, json)
Hash identifier: EGYEpsprRd+XRsKbVA+xF4+RvraK44V8IPkoWwKfELg=
Subject key identifier: 66:FC:78:18:A8:F7:5E:B7:F9:9A:82:70:56:48:4E:AE:E3:9F:D4:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015080
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47FBCF02E2CB11EF81A6A28A762E951A.roa
Signing time: Tue 04 Feb 2025 07:40:20 +0000
ROA not before: Tue 04 Feb 2025 07:40:15 +0000
ROA not after: Wed 30 Apr 2025 07:40:15 +0000
asID: 18229
IP address blocks: 154.210.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86144 (0x15080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:40:15 2025 GMT
Not After : Apr 30 07:40:15 2025 GMT
Subject: CN=67a1c464-c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:84:39:0b:26:f0:76:7c:63:f4:21:49:90:
84:ec:0f:02:15:06:07:ab:08:cd:89:3e:06:14:36:
93:a1:fe:1d:e3:6b:41:f0:84:ae:21:e0:83:71:aa:
44:fb:c8:84:23:5a:e0:94:4b:56:97:52:3f:c2:f8:
4a:51:14:7d:b9:ad:57:e1:3c:47:22:ac:cc:04:a3:
57:39:0d:bd:75:93:b7:a2:20:90:a5:5a:e9:2a:bc:
0c:d6:08:8e:5b:f5:cb:aa:17:f1:ad:69:e5:07:cf:
0c:3e:d8:12:07:d0:64:80:e9:b8:00:57:61:28:ec:
03:d5:1a:a3:d4:d8:0d:00:00:69:25:87:e1:1f:79:
ee:0f:43:24:1f:ac:85:d1:94:0d:18:55:93:cc:62:
d3:3e:1d:68:1e:e2:35:3d:45:35:da:53:37:d6:06:
d0:24:5f:34:6d:12:00:2c:01:92:45:20:de:25:5a:
88:f1:72:66:1f:ce:60:54:8e:83:9d:fa:0a:b7:02:
e8:00:98:97:89:4d:88:14:a4:29:08:fd:8e:93:a4:
3a:46:9e:e1:ee:9a:5c:27:25:be:fb:74:47:ea:de:
c2:ab:2a:7c:e1:35:5f:7f:d5:7f:b3:07:f6:bc:a2:
c0:c4:df:64:50:02:24:ea:c5:c0:80:ea:4e:56:e9:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:78:18:A8:F7:5E:B7:F9:9A:82:70:56:48:4E:AE:E3:9F:D4:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47FBCF02E2CB11EF81A6A28A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fb:ac:b6:62:69:e1:12:ce:de:7a:de:45:ec:30:0f:06:b4:
46:65:98:76:cd:7a:f6:43:47:ef:3c:53:5c:c0:ba:35:b8:35:
c3:59:6e:e3:3b:8f:64:b6:f4:60:8f:65:13:4a:13:b3:2a:be:
44:49:90:58:64:3e:ce:c7:28:1e:1c:7b:5e:a3:4a:59:1a:58:
68:da:03:fe:f8:36:c8:c7:09:d2:e1:73:57:18:c0:62:c0:30:
88:b6:68:4f:4a:4e:3b:82:72:d3:f5:cf:50:68:11:6d:7e:a1:
f5:10:fb:bb:3e:ff:7b:a5:0a:18:be:c0:df:6e:59:2c:4a:96:
17:4d:75:e2:94:c8:63:e0:45:4d:50:96:26:fe:8e:e8:e4:88:
ac:0a:72:31:8e:3a:d7:3d:96:d4:75:14:29:18:c2:97:1a:7c:
87:25:91:56:43:50:06:69:72:ee:d2:7f:8b:41:cd:aa:73:bc:
cb:d4:cd:e6:1f:53:11:c3:76:67:4c:d6:21:95:43:51:a4:34:
bd:e8:28:bb:f5:5a:d8:b8:f4:b6:09:09:87:41:c2:b4:e3:a5:
00:b9:ff:5e:dc:b4:b0:8d:23:f0:62:71:49:80:d0:5e:d8:aa:
ad:73:91:fb:6d:4b:4d:83:52:5c:25:8d:12:1f:62:42:33:36:
35:70:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:01 2025 by rpki-client