Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B171390EF9011EFA4466B41762E951A.roa
File: 5B171390EF9011EFA4466B41762E951A.roa (raw, json)
Hash identifier: MO/fFyjlL+os8J5VK8R0xBe5b4ESYluJ+m8zy+QhRcY=
Subject key identifier: 2B:7E:57:C7:1E:B7:F5:32:78:36:C5:4D:CC:5B:2A:CA:A1:05:96:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015900
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B171390EF9011EFA4466B41762E951A.roa
Signing time: Thu 20 Feb 2025 13:41:15 +0000
ROA not before: Thu 20 Feb 2025 13:41:12 +0000
ROA not after: Thu 20 Mar 2025 13:41:12 +0000
asID: 137899
IP address blocks: 154.202.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88320 (0x15900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 20 13:41:12 2025 GMT
Not After : Mar 20 13:41:12 2025 GMT
Subject: CN=67b730fb-ad88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:4d:e8:08:1f:b7:30:c4:3a:f9:d9:cb:42:
52:9e:3c:a4:ae:4d:04:c3:81:6b:50:50:b0:e2:9f:
6e:90:d8:d2:88:07:a3:26:ba:f5:50:2d:66:5f:4f:
d3:3a:58:07:8d:02:09:5b:0b:49:a7:77:e5:38:ec:
c8:e6:1f:30:e0:c0:49:08:39:4e:c8:8c:ff:ac:43:
e1:bd:b6:0b:ba:ff:c9:5c:a6:a7:a7:41:a4:45:8d:
ae:b9:46:90:de:e4:f8:87:94:a6:44:dc:d5:25:2b:
db:0f:0b:2f:ea:09:ff:60:52:b3:b7:57:b9:eb:7d:
f5:40:57:03:84:fc:ea:a3:80:0b:81:04:e6:25:64:
c6:2d:cb:80:e8:76:18:48:aa:1c:95:7c:7e:b0:e3:
19:2f:cf:4c:fb:35:0b:11:6d:e0:b9:18:3e:e2:a0:
90:b4:97:45:92:3b:0c:32:c1:47:a4:5d:29:88:1f:
21:76:1d:4a:2a:99:0e:93:47:22:2a:9f:f1:e7:66:
0f:1c:c0:63:3b:30:65:d9:27:3f:c2:9c:c4:d4:e4:
a8:44:05:f0:05:d8:71:4f:b4:94:8d:fb:96:10:ff:
41:c2:71:2c:08:f6:a8:ea:07:f2:c2:13:cf:6a:bb:
e1:7c:a3:90:e8:14:4f:73:4f:ef:3a:46:2b:5f:f0:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:57:C7:1E:B7:F5:32:78:36:C5:4D:CC:5B:2A:CA:A1:05:96:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B171390EF9011EFA4466B41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:72:8b:84:74:37:73:5f:a0:f4:d0:20:2d:bf:0c:7d:1b:c0:
73:a3:3a:36:18:88:3c:f2:ed:c7:84:c1:be:da:f2:01:48:c6:
a8:ba:ac:c6:0a:df:e9:db:de:74:11:7f:a3:e2:86:3b:2f:e9:
cf:60:94:46:83:47:07:3f:66:57:b9:e2:5d:d3:ce:fd:74:ff:
de:62:da:c1:8b:a2:22:28:0b:e6:ac:a6:26:3e:83:38:8e:78:
64:22:0c:54:a2:59:56:3f:a7:c6:6a:e7:73:80:ac:23:7b:61:
dd:fe:3b:f7:bb:ce:a9:94:ed:98:55:f4:4d:bf:0a:16:a7:ba:
67:8f:1b:d2:84:d6:58:be:a4:ce:e6:84:c0:c2:a8:d2:06:87:
5b:21:91:86:60:eb:39:4c:50:e1:17:fd:39:75:a2:17:0b:a5:
56:42:b3:dc:3d:2d:79:e9:80:f6:c8:86:66:5a:da:db:71:d4:
13:5c:c7:78:16:5c:20:b4:5d:ce:14:71:86:57:4a:5a:e4:0b:
6f:4a:59:cf:f9:58:23:b0:d2:49:56:8d:b4:09:62:35:9c:d9:
37:22:dd:9a:72:f9:e2:1e:64:6f:ab:23:6e:16:1b:3a:ee:22:
dc:59:1d:c5:86:d1:9f:b6:16:44:cd:d1:27:7a:58:18:eb:48:
59:88:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:35 2025 by rpki-client