Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59850262F47211EFA2A6E6A4762E951A.roa
File: 59850262F47211EFA2A6E6A4762E951A.roa (raw, json)
Hash identifier: ZTreM0M6HAYB6MP4CWWJoe3NzbOxLJEe7BmLMzyUjbs=
Subject key identifier: DE:D0:F9:DD:F0:EA:07:76:98:21:DC:77:7A:0A:87:14:FD:26:44:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01656E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59850262F47211EFA2A6E6A4762E951A.roa
Signing time: Wed 26 Feb 2025 18:49:04 +0000
ROA not before: Wed 26 Feb 2025 18:49:00 +0000
ROA not after: Sat 19 Feb 2028 18:49:00 +0000
asID: 17561
IP address blocks: 154.218.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91502 (0x1656e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:49:00 2025 GMT
Not After : Feb 19 18:49:00 2028 GMT
Subject: CN=67bf6220-75ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:13:e7:23:31:21:70:10:e0:6a:b5:8b:10:
3a:e5:91:63:9d:6c:eb:4f:3c:92:8d:38:3a:94:78:
d1:be:99:3a:86:c7:d9:8c:a4:a1:b3:8c:1a:c2:50:
f2:37:56:69:d6:02:19:ca:41:09:ff:f1:29:00:a8:
96:8a:2e:a9:1e:36:df:ac:64:a6:af:a1:06:0b:19:
c8:34:72:2d:a6:bd:2c:aa:09:15:ec:b7:b4:67:ea:
12:81:fd:8f:94:33:d2:ed:b9:23:a3:13:09:b9:f4:
98:ba:8c:15:70:1d:b2:0e:1f:7a:23:e7:7c:a3:08:
3f:4c:8f:61:d8:b4:7b:f8:a2:d2:5d:7f:a1:68:ff:
7e:93:a0:ad:87:e0:2c:54:b1:e7:c6:66:75:9f:df:
5b:96:15:56:7b:cf:64:e5:64:ed:6a:ea:84:87:74:
3e:23:10:f7:d8:02:72:db:3f:87:8c:53:5a:23:38:
82:26:13:6b:ad:8d:41:91:13:aa:5b:c9:39:8e:6a:
2c:f5:64:ae:13:68:c7:7c:7a:64:b2:9b:69:f0:4c:
72:e3:e0:0a:a5:92:a8:60:eb:00:0c:a7:d4:52:4f:
26:3b:f9:57:44:e6:22:1b:4c:71:52:07:a5:80:00:
4d:ba:21:ed:64:dc:f0:d5:c5:27:2a:45:46:11:21:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:F9:DD:F0:EA:07:76:98:21:DC:77:7A:0A:87:14:FD:26:44:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59850262F47211EFA2A6E6A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.12.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7f:2a:79:25:f3:a3:13:e3:d7:d1:73:e1:59:20:d6:47:0d:
d1:fd:d9:3b:a1:14:f1:df:d7:1d:10:03:50:f2:0a:8a:b2:a0:
9b:04:9d:60:b7:91:68:41:39:48:ed:d9:27:16:40:79:14:fd:
b8:a0:87:0a:3a:aa:ea:70:e7:98:0e:c9:ff:2b:1a:84:44:90:
58:27:3d:4e:cd:85:8d:8c:ef:8c:7b:af:3e:55:75:eb:56:a3:
fb:f8:57:de:01:0c:17:68:26:59:9f:21:27:65:3b:20:60:69:
3d:1c:a1:dd:9a:69:a0:c4:3a:66:40:8e:47:52:2b:d4:d8:3f:
fb:27:d8:4c:a1:b7:a5:a0:51:bd:a5:02:8f:4a:1c:3d:f0:30:
95:8e:38:30:80:25:04:6f:90:01:e6:e1:80:7e:9b:00:ff:6c:
c3:43:19:07:c3:14:7a:3e:9a:3e:d5:d5:54:22:78:39:4e:85:
da:5e:e2:5d:e8:53:36:0f:3d:b8:ee:72:33:df:63:22:da:e4:
da:fa:59:cd:ce:c3:87:fe:44:1e:95:d1:bd:f4:f1:9f:dc:64:
f6:23:2c:ee:fd:05:1b:13:09:d6:30:26:4a:15:87:65:39:b8:
b2:1b:f3:08:d0:7f:44:85:ba:ec:c1:54:fe:71:36:c7:1b:3b:
80:d3:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client