Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E3EF42DB2811EF918C7A8C762E951A.roa
File: 59E3EF42DB2811EF918C7A8C762E951A.roa (raw, json)
Hash identifier: s7QNywF3HO5vPKTCq/CVSvMCcHt/STBYokoVlCX/plU=
Subject key identifier: DA:9C:E6:B6:B5:A4:F0:49:32:CC:4A:C5:26:F3:12:C7:DA:07:88:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E3EF42DB2811EF918C7A8C762E951A.roa
Signing time: Sat 25 Jan 2025 14:26:22 +0000
ROA not before: Sat 25 Jan 2025 14:26:19 +0000
ROA not after: Wed 26 Feb 2025 14:26:19 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84444 (0x149dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 14:26:19 2025 GMT
Not After : Feb 26 14:26:19 2025 GMT
Subject: CN=6794f48e-c875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:18:a0:18:0e:27:51:49:78:06:77:c1:02:
61:38:6a:12:e8:dc:36:ed:01:5d:13:54:6f:84:aa:
89:74:13:c3:62:93:3b:07:8a:d8:0d:c4:50:d2:fd:
15:1f:e5:b3:45:df:ef:f9:f3:88:5d:a4:fe:ab:fa:
2f:35:62:e9:5f:d0:5c:52:65:37:c0:a4:26:fd:56:
32:4e:b5:95:5b:50:2b:91:6e:63:3f:2f:2c:5a:d9:
1a:a2:cc:f1:84:0e:3b:be:95:f9:ba:b9:1c:b8:0d:
a6:06:c8:90:a7:ff:35:3c:5f:33:a1:f9:c8:23:55:
7c:09:9c:f4:e3:63:aa:e4:86:9a:61:f3:1c:9c:a7:
40:5f:4c:ab:4f:50:a9:7e:82:0c:6e:43:61:3e:6b:
b9:ad:57:1d:20:83:57:e3:4a:7f:d0:11:c9:0f:ea:
e9:c1:40:12:5b:34:b2:4e:13:6b:ea:8d:e0:b7:70:
ff:fc:39:5a:77:4b:7d:44:f9:4d:9a:a4:8e:16:06:
5b:cc:c6:aa:5b:48:2d:cd:a3:8d:09:fd:78:d8:a3:
cd:02:38:69:0a:6a:b4:d2:65:0e:3a:53:cd:de:21:
ac:84:44:06:76:1f:35:53:52:ba:70:a4:38:bb:0b:
4b:fd:55:ae:4c:41:83:1a:4c:d4:24:64:d6:d4:7b:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:E6:B6:B5:A4:F0:49:32:CC:4A:C5:26:F3:12:C7:DA:07:88:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E3EF42DB2811EF918C7A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
99:fd:e2:25:45:42:76:94:a4:4b:de:08:2d:fd:ba:ae:a9:53:
88:13:c4:fa:47:19:12:cd:fb:c7:db:60:f7:20:3d:7f:ba:e9:
b5:98:ff:55:58:6a:9f:4f:d3:43:9a:57:5a:2e:fe:e3:0b:62:
83:59:66:32:a5:ca:1f:02:de:9e:73:f1:2d:f3:30:25:57:68:
4f:93:a0:14:8b:71:36:49:32:77:97:cf:e7:e7:0a:34:ed:42:
25:97:4a:1e:03:38:32:ed:b1:29:7e:5d:17:91:b4:36:9f:88:
89:65:4a:ce:5c:76:8f:1e:12:9c:cd:d9:97:20:af:9d:8d:fc:
34:e8:f6:cd:c7:a4:0a:1a:72:70:cc:e5:c4:ca:b5:f7:00:e9:
2b:0d:3f:f2:58:13:7c:1a:57:30:e5:88:e1:aa:4d:af:72:37:
f9:59:f6:0e:74:39:26:18:b1:4a:61:ae:70:14:52:bd:ad:d7:
e3:5d:3a:76:c2:e0:3e:04:a1:06:46:40:af:b3:bc:54:02:dc:
e3:70:c2:8c:53:ec:72:c6:1b:46:f0:5d:fa:3a:1a:87:f4:a9:
25:b5:67:fe:76:05:1e:03:0a:58:a2:4e:bf:13:35:98:9a:8b:
19:ff:94:08:50:83:5b:26:46:2a:49:6d:25:57:bd:d7:ee:a0:
fb:50:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:43 2025 by rpki-client