Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/527C2AC8C8AC11EF8BDD5AA5762E951A.roa
File: 527C2AC8C8AC11EF8BDD5AA5762E951A.roa (raw, json)
Hash identifier: mTpcM1eY1lR0YoL9pxcdmDY5Oy305kt9mEx7bH4DDsM=
Subject key identifier: AF:71:15:3D:7A:24:86:68:95:29:84:36:8F:A6:D4:2C:E7:A4:EE:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/527C2AC8C8AC11EF8BDD5AA5762E951A.roa
Signing time: Thu 02 Jan 2025 01:53:12 +0000
ROA not before: Thu 02 Jan 2025 01:53:08 +0000
ROA not after: Mon 13 Dec 2027 01:53:08 +0000
asID: 17561
IP address blocks: 154.220.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78208 (0x13180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:53:08 2025 GMT
Not After : Dec 13 01:53:08 2027 GMT
Subject: CN=6775f187-9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:2e:03:78:c6:73:a5:ca:5e:4e:fa:37:66:
04:c3:b2:c2:55:47:91:37:3e:07:e1:38:b2:cb:e5:
fb:4a:bb:2a:eb:68:67:7c:d2:83:e8:56:e4:cb:9c:
e3:6f:f5:15:82:ac:3a:26:5f:2b:14:30:c2:55:1c:
02:1d:b8:ec:aa:75:f4:aa:cc:7d:ca:6d:9f:15:0f:
d9:f3:24:65:dd:c9:8f:b1:36:89:be:cb:8d:6c:96:
a0:80:a2:8d:27:e3:f3:5c:97:e9:5f:e2:7d:b5:85:
87:2d:19:e3:ca:06:f5:82:b5:a7:e6:76:f7:38:56:
35:4b:3f:e5:4a:86:e2:d7:25:2c:19:27:32:95:4c:
1c:2a:d3:78:9d:64:ee:de:97:cc:8c:d9:78:0c:7a:
a4:3b:a7:e1:cb:c9:77:22:c3:fe:0c:e3:64:07:b5:
8b:99:65:2b:2a:44:4b:77:bc:e5:0f:ed:f8:33:4e:
ea:e3:fd:e1:2e:af:c3:6d:99:42:e7:05:63:a3:4c:
5c:a1:b0:fa:2e:b2:a3:fe:e7:04:47:3d:98:bf:28:
76:bf:de:c0:b2:20:0e:f3:9a:53:67:f1:aa:c8:8e:
39:51:08:b2:ec:8e:52:6a:e3:96:42:52:7c:08:4e:
dc:1b:91:23:9c:bf:d0:a7:b8:1d:76:a2:ae:04:de:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:15:3D:7A:24:86:68:95:29:84:36:8F:A6:D4:2C:E7:A4:EE:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/527C2AC8C8AC11EF8BDD5AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8d:22:6e:0c:1b:6c:0f:c5:7e:f0:85:89:ed:f8:1a:46:32:
1d:a8:44:09:12:83:bd:4d:79:53:6f:0f:29:11:e1:68:fb:f8:
ae:d8:64:f7:a5:bb:4a:7b:92:18:79:31:70:77:75:f7:9b:b1:
28:4b:69:1b:b6:32:e9:22:b5:84:3f:a2:7a:58:e3:a3:e1:13:
ce:be:94:e2:16:fc:6d:d4:3a:47:7d:78:b8:79:75:6e:49:54:
3f:fc:23:d9:81:a6:01:0c:17:cf:a7:47:2b:5f:3e:12:dd:ed:
7e:0f:0b:a1:ec:9e:ef:b8:c4:27:c9:68:6d:fc:13:f4:ba:79:
02:6f:8b:a9:44:f2:57:0c:2d:e0:c0:06:13:85:ae:a8:1f:32:
0d:22:b8:37:a2:18:9d:d5:b7:aa:85:e6:d7:f4:53:8f:93:90:
2c:21:d8:15:c6:5f:59:16:fb:7d:70:9e:89:9a:c1:d2:bb:5f:
f5:26:3e:63:fd:08:47:87:0a:6d:b2:91:ac:5f:46:94:e1:da:
54:41:7a:dc:8d:3d:5a:df:9a:b8:6e:8f:22:25:d8:4b:24:14:
1c:b3:c1:9b:40:ee:0d:75:c1:08:fe:17:71:8e:ae:0c:49:15:
f2:f8:db:b2:a8:e6:b0:fa:c7:7a:60:10:f7:29:75:49:20:6a:
39:d8:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:21:14 2025 by rpki-client