Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/509B0E50F68711EFA98DA778762E951A.roa
File: 509B0E50F68711EFA98DA778762E951A.roa (raw, json)
Hash identifier: Cwv/mcSfCiZ9xk/5l8scWgEz9bzBjtoBY0lux2otAiI=
Subject key identifier: B7:7D:80:B9:EB:CE:27:B1:E3:82:D3:E3:D2:F8:40:48:94:6F:6F:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/509B0E50F68711EFA98DA778762E951A.roa
Signing time: Sat 01 Mar 2025 10:24:10 +0000
ROA not before: Sat 01 Mar 2025 10:24:07 +0000
ROA not after: Sat 05 Apr 2025 10:24:07 +0000
asID: 203020
IP address blocks: 154.208.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 10:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93646 (0x16dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:24:07 2025 GMT
Not After : Apr 5 10:24:07 2025 GMT
Subject: CN=67c2e04a-4b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:8b:ac:88:73:72:a2:eb:53:a0:d5:17:cf:
b3:87:67:f2:a4:05:ee:e6:29:c0:20:49:eb:88:42:
d0:28:0a:78:72:48:a2:93:c3:a0:fb:2c:63:8a:47:
b1:03:5d:d6:91:b0:ec:cc:91:de:04:b6:e4:0c:0a:
04:a3:a3:4c:ab:b5:38:83:f2:91:35:9a:f2:70:aa:
e9:05:88:eb:09:d3:81:d2:cb:fa:f5:56:da:dc:d3:
6c:37:ec:4a:ef:39:2b:83:45:d1:57:8c:e7:ba:38:
ad:0b:b7:b7:34:24:db:24:46:08:4d:be:a3:1e:65:
01:8b:23:d9:47:91:d7:ca:e1:53:48:74:e3:71:17:
fd:65:c7:e9:65:55:0f:18:d3:01:c0:35:bd:fa:9c:
75:17:15:0b:04:2f:1f:a6:a6:f0:2c:de:86:7c:02:
f1:da:9b:b6:28:35:44:c5:e6:e1:24:81:7f:65:18:
df:50:38:58:d5:25:0d:6d:24:5f:25:50:7e:cd:2d:
ff:ca:c8:54:fa:f4:c1:63:36:99:cc:17:72:d7:74:
f4:49:7e:c8:c0:a4:fb:2f:50:a6:e4:94:ec:e7:6b:
69:fe:03:c2:64:12:cb:66:4e:07:bd:29:3e:19:7e:
59:69:0a:60:df:6e:60:34:ba:25:f9:d2:59:34:92:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:80:B9:EB:CE:27:B1:E3:82:D3:E3:D2:F8:40:48:94:6F:6F:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/509B0E50F68711EFA98DA778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.128.0/23
Signature Algorithm: sha256WithRSAEncryption
57:47:32:8f:d0:87:e9:cd:e1:d8:72:13:57:c9:ec:6a:ba:08:
04:95:d6:71:39:df:74:85:0b:60:8e:a3:66:fe:02:18:a8:e1:
10:8c:85:d9:ad:a6:53:00:c4:75:30:3c:c6:5a:c4:88:99:4d:
ab:a3:37:01:3d:2c:69:87:4b:7e:83:10:f4:d1:50:e7:06:46:
81:82:b3:78:d5:83:56:32:75:b0:95:95:cb:56:aa:7c:58:2b:
a2:57:47:b5:9f:9b:a9:2b:85:78:57:ea:bd:33:e1:30:f3:2e:
d7:ec:24:22:52:04:48:37:59:d7:fe:35:a9:db:a8:8f:eb:8c:
92:13:28:24:d5:c6:01:75:a1:12:0c:b1:f3:26:de:f8:21:a3:
12:32:ed:0e:1c:a2:f9:13:20:fa:93:80:1b:ec:8b:a7:db:49:
c1:c0:cd:3e:d0:57:b0:8f:f2:58:6b:f5:f6:ea:73:02:e5:24:
6b:63:65:99:cb:55:14:e7:a6:d1:ef:a7:6d:c7:20:fe:eb:3a:
64:5c:af:70:48:5c:e3:88:f2:f2:c2:82:09:7c:a2:cc:3f:2c:
37:86:4e:e1:1a:9a:2f:33:9c:9d:d1:cf:0a:cb:91:b0:cc:75:
f0:6b:31:7e:77:cb:5f:f6:d1:95:6e:c9:f3:4d:1b:83:d2:48:
af:4e:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client