Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D1BDB4BAF711EF84652B66762E951A.roa
File: 59D1BDB4BAF711EF84652B66762E951A.roa (raw, json)
Hash identifier: m93p9ptQw2yrNi5u/Dz0zUG1tWbW3Lzv3huWJxyIlJA=
Subject key identifier: 2B:14:0F:B5:3B:13:E6:9F:E7:33:05:8A:E9:F1:4C:FA:46:01:DF:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D1BDB4BAF711EF84652B66762E951A.roa
Signing time: Sun 15 Dec 2024 15:15:00 +0000
ROA not before: Sun 15 Dec 2024 15:14:56 +0000
ROA not after: Fri 20 Jun 2025 15:14:56 +0000
asID: 31863
IP address blocks: 154.197.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72575 (0x11b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 15 15:14:56 2024 GMT
Not After : Jun 20 15:14:56 2025 GMT
Subject: CN=675ef274-b064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:7e:1e:fc:9a:78:02:5b:51:0f:f1:aa:4b:
ff:3e:3a:3f:7f:28:52:44:59:0e:3f:f0:46:6b:96:
b0:3e:c4:bf:50:e0:35:51:93:2b:3b:35:6b:1c:a5:
30:17:fb:42:fc:29:5c:fb:dc:99:e1:c6:73:dc:10:
6c:fd:87:e5:da:6a:da:f8:ff:60:3b:55:78:4d:3f:
f5:f7:51:af:aa:cb:d3:24:b0:4f:db:a7:d5:29:44:
54:ef:04:e7:1f:97:ff:a0:cb:f6:08:75:78:30:9b:
33:8b:63:65:d7:67:4d:6e:48:45:2d:69:67:ee:40:
13:a2:20:04:dd:a9:4a:a4:f9:e3:34:34:71:90:0a:
1e:04:0d:5f:bd:d9:86:80:ed:ab:a3:be:04:19:ea:
59:62:26:93:b5:a5:ef:bf:f0:e8:ac:69:40:49:c4:
47:01:9c:80:8d:bf:e3:8d:72:48:c1:67:0f:0a:79:
82:e1:9c:a6:03:dc:d9:c3:9e:ca:05:60:87:4f:ba:
00:ee:69:84:5a:b7:ad:01:b6:9d:9e:2f:73:1e:15:
15:5c:34:e5:27:88:cf:c1:82:68:89:cd:bf:51:c3:
12:3d:e8:16:f7:29:53:53:df:b3:c9:0c:43:ef:fb:
f2:bb:ef:19:b2:06:ee:97:a7:ba:4d:20:c4:60:94:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:0F:B5:3B:13:E6:9F:E7:33:05:8A:E9:F1:4C:FA:46:01:DF:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59D1BDB4BAF711EF84652B66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f7:c4:59:0d:1f:71:44:6b:6e:45:37:20:31:27:44:db:8f:
7b:01:5e:68:2f:c5:b5:83:a2:dc:97:fb:8f:e0:41:ad:6b:23:
91:06:b5:bb:be:f1:0f:53:9f:a7:6c:d8:9f:fd:10:41:ff:e2:
30:d0:aa:7e:28:c1:a6:55:f7:74:57:60:47:d6:96:b8:4b:44:
f2:fa:f2:ed:0b:42:17:03:47:c2:12:c8:3f:bd:c5:1e:1f:f1:
48:2d:41:0e:be:f1:c6:19:9c:e6:48:6b:a5:2d:b5:a4:3e:cf:
8f:7d:ae:c8:d2:8f:f4:ae:8d:97:68:02:81:d6:a3:d6:3c:f6:
46:4b:eb:07:72:08:85:ff:63:c2:d6:86:54:64:2f:70:c5:2b:
d2:60:83:d1:b5:47:b2:ed:fb:93:4c:53:32:82:cb:74:e8:dc:
df:19:80:bb:f2:b2:ff:d2:63:f1:9e:c5:42:d1:b6:a9:31:4c:
03:b8:e5:66:f4:b1:a3:5a:00:21:4c:cb:f3:6e:53:23:5d:66:
00:71:e2:fd:46:32:9e:2b:2d:3d:e2:75:11:e2:04:b9:b9:4c:
1b:28:02:cd:a8:54:ca:da:47:08:c9:bc:7e:f9:e6:f6:34:a1:
7c:62:e6:99:6a:16:77:a2:09:51:21:7a:29:56:1f:ea:96:6d:
e8:92:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:32 2025 by rpki-client