Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B020FD0C8B311EFB766395A762E951A.roa
File: 5B020FD0C8B311EFB766395A762E951A.roa (raw, json)
Hash identifier: MyldI6k1j9sFUhxyZfJid955Sw7jtdAa18jmg8QJzPk=
Subject key identifier: AE:24:D3:67:11:D8:B7:B4:A8:37:B6:15:26:C9:3C:80:1D:DF:B8:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B020FD0C8B311EFB766395A762E951A.roa
Signing time: Thu 02 Jan 2025 02:43:32 +0000
ROA not before: Thu 02 Jan 2025 02:43:29 +0000
ROA not after: Mon 13 Dec 2027 02:43:29 +0000
asID: 17561
IP address blocks: 154.220.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78268 (0x131bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:43:29 2025 GMT
Not After : Dec 13 02:43:29 2027 GMT
Subject: CN=6775fd54-6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:d2:c9:ca:82:6a:2e:bc:86:ea:09:c8:a5:
c5:d5:36:09:85:26:fd:62:cf:f1:0d:a4:7e:1c:78:
d7:b8:e8:c3:f6:89:a0:f9:db:d9:8d:3f:ed:d9:49:
69:c7:f3:6c:44:48:db:fb:d8:24:c4:c8:f4:ae:66:
a2:e6:96:7e:ed:d9:89:3a:26:97:3a:4c:62:dc:7c:
0c:32:e5:d8:d9:58:d6:bf:51:1e:0a:a1:6a:e9:f4:
da:bb:d6:8b:e0:38:80:c0:cb:14:c5:11:3b:84:0d:
c2:12:2b:d5:88:46:6d:2a:fd:0e:a7:d8:1f:36:f6:
7e:6c:55:d9:81:48:c0:3c:9f:d6:7c:b1:bc:1b:3e:
88:f2:35:e9:bf:0c:d3:99:17:98:35:66:05:4c:c1:
7b:d9:a8:e5:e8:15:d1:36:28:84:ff:45:cf:29:9b:
28:7f:32:10:4f:22:7f:33:19:bc:23:c7:8b:fb:8a:
89:5c:8f:5b:89:5f:af:9f:35:75:79:a6:ff:14:c3:
a0:d7:04:48:d7:ec:f9:6b:58:64:5d:a8:5a:b9:b9:
3b:29:09:d8:fb:89:4e:73:37:1e:dc:11:25:55:b7:
4c:5d:15:bc:b9:ed:69:44:7a:e2:a8:d3:f6:d8:4c:
1c:fc:9e:75:62:4d:e6:31:a9:c0:6a:64:a7:44:37:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:D3:67:11:D8:B7:B4:A8:37:B6:15:26:C9:3C:80:1D:DF:B8:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B020FD0C8B311EFB766395A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:27:08:c6:47:c5:a5:0c:50:68:a2:f3:8f:8e:6c:ea:54:c4:
7d:86:82:b9:73:16:b6:ec:d1:58:6c:81:d2:0f:b7:41:08:31:
95:9c:a4:f6:99:e5:c8:25:db:de:0a:5d:e5:ae:a2:56:0e:e9:
29:bb:64:a7:e4:86:d6:76:6d:4d:dc:aa:e6:c5:9b:e5:a7:2d:
49:f3:6d:fc:e4:75:e9:a9:7a:f4:40:8f:84:54:bb:7c:8c:c6:
f9:98:70:c4:e3:87:43:70:fe:61:79:65:4a:49:e8:6f:be:71:
48:e5:4d:1c:bc:df:4b:a6:78:55:a6:a8:23:71:5d:40:28:5a:
5e:bf:92:1e:ab:e5:b1:66:2d:89:34:c4:27:5d:50:7b:5d:ea:
03:17:a2:11:a5:1b:66:2b:7b:e4:3f:7b:a0:59:9c:fa:aa:95:
f2:15:33:0a:61:cd:dd:17:d0:17:14:e9:a2:62:25:b9:39:cd:
1d:0f:a0:d4:ab:af:16:90:e3:8f:c2:ca:4f:16:ef:7c:0a:65:
f7:4f:d4:e7:a4:53:e6:5c:c7:ad:fb:9e:a8:84:35:c2:26:83:
69:d1:31:f8:9f:b3:0d:4f:5c:91:10:83:76:06:fa:5c:37:8d:
e7:78:02:2d:d0:2f:8f:b7:c8:99:0f:d1:b5:a0:54:9e:63:63:
b3:4b:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:05 2025 by rpki-client