Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD25CB6FFE211EF9504C5B4762E951A.roa
File: 5AD25CB6FFE211EF9504C5B4762E951A.roa (raw, json)
Hash identifier: JimbL99OIR136uVrZIQcXYfDylpmYLQvuESAVZcTJFg=
Subject key identifier: BB:E4:54:CC:F9:FA:7C:0B:E0:7B:66:52:1B:32:C5:9C:27:6C:BF:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017413
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD25CB6FFE211EF9504C5B4762E951A.roa
Signing time: Thu 13 Mar 2025 08:08:32 +0000
ROA not before: Thu 13 Mar 2025 08:08:28 +0000
ROA not after: Thu 17 Apr 2025 08:08:28 +0000
asID: 57043
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95251 (0x17413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:08:28 2025 GMT
Not After : Apr 17 08:08:28 2025 GMT
Subject: CN=67d29280-1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:92:05:91:fb:d3:9a:6b:80:34:d7:c2:01:
9d:0c:d4:e8:84:b8:f7:af:b7:2d:c4:72:e5:57:af:
5c:19:9e:c6:7f:e1:7f:77:08:16:64:63:de:43:35:
2f:bc:b0:cc:58:71:18:4c:4d:6c:62:7c:77:50:64:
ec:02:fe:2f:d1:51:46:6b:c3:70:a6:c4:e0:93:94:
20:d5:1d:cb:80:31:20:d4:3f:aa:9e:8d:4b:b8:58:
1b:f2:5b:47:b7:8f:52:f2:9a:6b:64:a7:67:4b:da:
de:5e:b1:e5:8d:a4:ca:d8:44:f3:dd:13:54:d7:f6:
b2:0e:4f:eb:de:8a:6f:21:d1:72:d9:f1:5e:21:4d:
37:ac:9e:74:cb:41:e7:53:6b:ed:21:fa:7d:68:52:
71:eb:e5:30:b2:fb:4e:c1:b7:3d:83:9c:31:3e:76:
2c:bd:c5:99:8c:ef:6b:fd:01:ad:2b:d4:87:15:10:
cc:3e:21:47:2f:a9:52:7a:c5:93:03:5b:b7:68:a5:
50:5f:d4:34:ee:81:65:16:8f:f7:be:b8:cc:31:a5:
ec:86:e7:a5:75:e9:b6:26:a1:5b:98:6f:d3:c6:1c:
d5:3d:1d:c1:74:53:f2:eb:a2:12:b8:40:5d:ab:30:
a6:0b:d9:73:f1:36:a0:e0:91:df:94:6a:ad:d2:e3:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:54:CC:F9:FA:7C:0B:E0:7B:66:52:1B:32:C5:9C:27:6C:BF:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD25CB6FFE211EF9504C5B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8f:56:6e:d1:87:23:81:73:bb:a6:bf:18:b9:c5:db:32:23:
c1:b9:0a:21:ad:e2:8c:b7:c4:b6:38:91:9d:b9:a4:28:3d:99:
0a:91:f5:8f:2c:a2:8f:7b:3c:84:c4:fb:23:39:78:b3:ae:52:
cb:c7:ed:44:10:ab:ee:4d:24:e1:3d:e5:5e:96:9b:d5:27:a5:
43:bd:eb:f9:a5:5c:4e:31:46:95:d3:cd:48:e3:84:e6:dd:e5:
7d:08:60:fa:3e:f5:2c:81:7e:14:79:3f:a3:8b:f5:82:ad:d5:
9b:99:5d:b6:a9:fe:fb:7d:ba:12:f1:f0:fb:0c:4d:0f:db:82:
ad:60:e8:56:14:20:33:68:73:76:20:56:03:de:c8:eb:73:15:
23:95:6d:6c:ab:94:12:34:e8:1f:06:f6:6a:d2:74:16:28:55:
a9:94:c4:2f:e1:bf:51:64:e7:53:84:5b:9d:af:d1:7e:d0:f8:
4e:86:70:1a:d7:0e:ab:a3:85:2b:4b:c2:f7:10:96:96:87:85:
ff:6f:c2:21:c7:d9:f3:a6:2e:e6:35:02:76:f9:40:af:31:64:
19:3e:e4:d3:81:36:33:39:cb:d1:30:05:08:9c:f7:6a:7f:88:
3b:6f:f8:36:62:57:ba:ba:ba:94:21:65:fb:4b:4a:07:a9:06:
f6:5c:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:38:09 2025 by rpki-client