Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/623F11DEC8AF11EFA2382BBC762E951A.roa
File: 623F11DEC8AF11EFA2382BBC762E951A.roa (raw, json)
Hash identifier: gi9jzEhCmEEKnMwysMmFm5Xm6JmqUWOk9eus6ykEMiA=
Subject key identifier: 48:9F:49:FD:9C:1C:97:42:47:D8:22:60:71:AF:12:DA:DB:18:1A:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01319A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/623F11DEC8AF11EFA2382BBC762E951A.roa
Signing time: Thu 02 Jan 2025 02:15:06 +0000
ROA not before: Thu 02 Jan 2025 02:15:03 +0000
ROA not after: Mon 13 Dec 2027 02:15:03 +0000
asID: 17561
IP address blocks: 154.220.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78234 (0x1319a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:15:03 2025 GMT
Not After : Dec 13 02:15:03 2027 GMT
Subject: CN=6775f6aa-9fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:0b:07:17:ee:81:01:59:c6:7c:f6:64:ce:
9b:63:8f:ba:92:fc:8a:e7:29:ad:ce:fb:df:eb:43:
ea:b3:3b:64:39:43:06:c8:df:a2:2f:05:e4:fb:d3:
af:03:80:5b:6c:29:d7:7c:28:6f:14:20:64:91:82:
0b:65:ce:43:5c:35:76:d6:79:a4:5e:8a:0b:84:07:
f4:08:af:7f:d1:34:34:15:b6:c8:99:1c:7c:ed:c2:
0d:0c:49:02:68:34:f0:cd:d4:84:80:33:15:34:20:
65:c3:63:de:d9:6e:48:ed:81:68:76:b9:a2:bb:f3:
cd:8e:f0:29:77:c8:05:5b:41:bd:05:e7:82:9a:63:
6e:c1:be:0c:ed:b6:eb:04:a0:71:60:0e:7c:13:ae:
68:9c:34:96:9e:26:7c:39:a4:19:01:71:20:86:3c:
c7:83:06:ae:99:28:6a:90:96:ac:fb:4b:42:6c:98:
f9:2b:7f:73:7b:6e:14:59:bd:79:78:ef:e6:6b:fe:
70:15:e3:4f:ff:73:0f:9a:1e:26:f3:10:07:dc:0d:
7a:25:27:89:28:f5:84:51:96:c6:4f:81:e4:11:ef:
5d:bb:a6:c9:81:18:1b:59:05:df:99:17:7e:fb:4e:
d8:da:3d:4a:fa:19:94:87:b0:cd:1d:38:36:35:7d:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:49:FD:9C:1C:97:42:47:D8:22:60:71:AF:12:DA:DB:18:1A:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/623F11DEC8AF11EFA2382BBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8a:4c:27:96:4b:04:f9:b9:e5:7f:d7:22:33:16:73:0d:60:
11:43:45:36:f2:01:df:b1:af:43:d1:b1:97:e2:d6:ce:c6:ba:
28:7d:bf:64:04:2e:45:9f:9a:c0:e6:c5:84:97:68:cb:39:cb:
b7:ac:a4:04:62:15:04:92:f7:30:29:80:d0:20:8c:52:52:16:
a1:16:4e:ca:5a:09:52:c9:3c:01:8b:ce:47:75:b9:ed:fb:6b:
40:03:23:80:9e:9f:19:f6:6c:31:60:73:29:82:01:5f:c0:f3:
59:e2:fe:7c:74:d3:84:a2:40:d8:6a:5c:63:b6:6c:71:f4:ed:
be:2b:c8:5e:7d:e5:54:db:c4:4f:ce:ee:49:98:70:42:5c:50:
73:e3:1b:95:f1:42:32:8d:7b:e3:8d:73:30:26:e4:79:08:ec:
bd:82:64:6e:86:ae:3a:24:da:6e:df:17:8a:47:dc:0b:9a:45:
4b:09:dd:e9:09:59:70:27:c4:c7:dd:ec:24:f5:17:61:15:63:
54:24:82:b8:af:a2:1c:24:d2:ab:4a:ac:0b:f4:90:01:e8:c0:
ec:55:75:f2:85:b5:47:66:41:8e:6c:75:3c:cf:15:50:b9:c3:
49:a3:a2:6b:34:05:2f:12:d8:77:95:6c:d8:ac:b1:af:b9:08:
1b:9f:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:42 2025 by rpki-client