Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C7C274D2DD11EFBC891159762E951A.roa
File: 50C7C274D2DD11EFBC891159762E951A.roa (raw, json)
Hash identifier: lKUZTOYQikOe8b42FQyN40OQ8Dn/NFxEv7TARlGkflo=
Subject key identifier: EF:E6:2D:F8:43:D7:AB:7C:B6:B0:1C:30:6F:FB:DB:E8:2D:BA:6C:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C7C274D2DD11EFBC891159762E951A.roa
Signing time: Wed 15 Jan 2025 01:09:06 +0000
ROA not before: Wed 15 Jan 2025 01:09:02 +0000
ROA not after: Fri 12 Dec 2025 01:09:02 +0000
asID: 984
IP address blocks: 154.81.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80752 (0x13b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:09:02 2025 GMT
Not After : Dec 12 01:09:02 2025 GMT
Subject: CN=67870ab2-6505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:90:82:cf:92:4d:bf:6d:3e:88:3a:56:d9:
24:f6:7f:8b:0f:b8:1d:ca:88:89:33:62:e8:e5:fd:
94:9c:7e:c2:96:e2:23:32:fd:f8:10:5d:ba:dd:62:
5a:64:f4:be:66:b2:43:78:94:a7:62:7b:ed:a6:83:
1f:15:54:c9:5c:c4:8d:65:f4:10:6c:70:f0:2c:cd:
3c:68:20:1a:fa:28:06:8e:03:34:44:d6:2a:39:25:
99:f4:0f:47:f5:ea:c0:09:a5:de:69:d6:e6:0f:51:
a7:9e:00:ba:51:c6:e9:be:2a:85:cd:4b:c8:e1:a8:
43:c0:53:ab:b2:b9:3c:ea:1c:6c:41:86:e5:c8:6a:
1a:f9:db:09:88:8f:bd:ee:75:a2:d4:09:59:bb:a7:
4b:26:5e:c1:9f:5b:c6:6e:de:c9:b8:27:91:30:21:
80:2b:f0:da:5c:bf:54:a9:df:b8:e3:1d:a8:28:13:
a6:1f:a2:f1:cf:b8:d1:dd:50:cd:80:87:18:f1:fa:
cd:bd:f4:50:04:4d:97:d9:0d:9b:e4:f4:f4:96:c8:
cb:b0:ff:8f:54:92:77:8b:2e:7b:88:1c:60:65:a1:
44:66:2d:f2:cd:ac:1c:25:f1:54:cf:d1:31:5f:07:
5d:c6:06:3f:64:30:b9:86:d6:d9:d0:c4:0c:e6:53:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:2D:F8:43:D7:AB:7C:B6:B0:1C:30:6F:FB:DB:E8:2D:BA:6C:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C7C274D2DD11EFBC891159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4e:fa:f3:6b:f3:44:68:0b:ef:f6:35:f0:63:af:58:15:ea:
74:a9:3c:6b:38:be:93:2d:70:40:15:31:69:3c:1f:23:57:e6:
75:4c:20:7c:49:ab:9a:e6:0b:63:27:53:72:74:16:62:26:0d:
49:8b:20:dd:a5:86:fb:b2:95:4e:f4:df:52:1a:29:0f:d7:07:
5b:85:d5:79:cb:31:12:cd:e0:79:12:a0:e9:80:49:3f:b7:1f:
8c:47:2a:93:7b:e5:db:f7:b2:8f:8f:cc:9e:5e:0a:38:ef:81:
8e:e1:4a:16:4a:36:bb:af:e2:f7:8b:e9:91:77:f8:cc:c1:bf:
e7:4e:59:1e:22:28:31:31:75:fa:64:9c:f4:73:a5:74:32:7a:
3a:ea:ce:ae:16:13:05:e8:98:24:3c:5c:22:74:62:2b:eb:93:
ba:10:0f:09:8e:80:2b:67:44:3a:32:e7:0a:ff:93:fb:35:7c:
47:e2:0d:41:55:aa:cb:c3:e8:a8:05:10:a6:33:57:25:5c:0c:
2a:63:ae:ee:d2:a2:11:0c:79:9a:1d:94:42:5e:f3:79:f5:f6:
8e:c4:cf:1e:54:f9:f9:af:b8:e7:17:9c:73:b7:4a:c2:0d:10:
f9:59:a7:cc:df:fa:02:b1:e7:b5:eb:b0:37:6d:7e:1f:79:e3:
98:52:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:14 2025 by rpki-client