Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8651FCD2E711EF81B28AA3762E951A.roa
File: 6B8651FCD2E711EF81B28AA3762E951A.roa (raw, json)
Hash identifier: jsMl6+Tp9f3KoXRWtuEEiU+DpuNdsJz8A7wtbPI5+Z8=
Subject key identifier: F8:BD:84:87:8D:F2:59:9C:BC:D5:6B:F3:9E:18:8E:6D:0D:20:4E:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8651FCD2E711EF81B28AA3762E951A.roa
Signing time: Wed 15 Jan 2025 02:21:25 +0000
ROA not before: Wed 15 Jan 2025 02:21:21 +0000
ROA not after: Mon 03 Jan 2028 02:21:21 +0000
asID: 17561
IP address blocks: 154.222.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80796 (0x13b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:21:21 2025 GMT
Not After : Jan 3 02:21:21 2028 GMT
Subject: CN=67871ba5-4cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:69:0c:69:61:d4:db:ed:cd:7e:58:2f:a5:
f8:d9:03:5b:99:9f:83:5f:32:e8:3e:65:3d:cb:d3:
cc:81:d6:9e:0f:fd:7e:5c:c6:55:32:c3:a2:fb:c8:
fe:f1:e5:b3:81:a0:90:f4:f5:0d:8f:49:a8:e7:93:
71:62:4b:d8:9e:f8:9e:83:8c:ef:e9:87:41:7e:58:
83:76:3b:9b:5a:04:00:5c:fa:e8:dd:b4:f4:bd:a6:
0d:89:4b:f2:13:87:86:7e:6a:ac:72:1a:3d:23:1e:
ea:8a:e2:ae:44:84:5a:a6:a6:d8:64:b9:e5:e1:18:
75:db:a1:88:ad:fe:db:19:14:3a:49:e0:fd:8a:36:
00:bc:29:06:20:b6:18:b1:f7:19:d5:b7:34:8a:f1:
55:1a:f3:5d:43:3e:31:43:8f:fc:80:b0:51:df:5a:
06:b2:02:50:2d:b9:d6:9e:3c:98:66:5f:22:da:8a:
9e:4b:2e:ec:51:1e:3b:e4:64:28:b6:48:06:b5:23:
ef:2f:8a:38:64:fe:a5:2e:70:2a:fe:db:60:40:4b:
34:3e:60:45:91:8d:ed:50:97:e9:0a:e1:f3:5e:da:
26:42:e0:1f:36:ca:4b:1e:ec:3e:96:6f:54:dc:56:
36:3b:a5:09:11:a3:87:22:0d:9c:dc:97:71:a3:d5:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:84:87:8D:F2:59:9C:BC:D5:6B:F3:9E:18:8E:6D:0D:20:4E:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8651FCD2E711EF81B28AA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.186.0/24
Signature Algorithm: sha256WithRSAEncryption
70:39:d0:c8:42:bc:13:58:49:fe:cd:90:06:27:9f:99:c1:6c:
0a:df:72:a1:1c:f2:99:d2:a2:4a:1d:db:d8:6d:b8:bf:12:6b:
bf:99:5b:61:42:9e:cc:e2:5a:1b:94:b0:34:0f:dc:85:fc:d1:
39:f3:c5:b2:95:69:71:c8:c7:5e:2c:7c:de:22:25:f6:53:87:
98:99:4c:48:64:a2:b0:21:04:c7:00:c4:7b:d8:7e:0f:e0:2e:
91:f9:3c:2b:38:0b:84:1e:1d:ec:8c:4a:af:da:4f:69:33:59:
f5:91:f4:9f:3b:0f:15:9c:21:28:a3:72:e2:c7:11:35:32:18:
40:38:06:10:b1:3a:ab:4c:70:ef:d2:2d:bf:07:8f:db:84:0d:
0e:b3:4a:68:26:d4:ee:26:7c:22:fa:d3:07:a6:d7:0d:df:c3:
b6:cc:52:62:31:3d:3c:f3:41:5f:e1:d7:6a:7d:76:de:dd:e1:
8f:5e:55:e8:62:be:40:b7:39:6f:73:e3:b1:4f:ac:c8:69:cc:
03:9f:d4:8c:b8:7c:0f:b5:09:1f:47:e9:5b:65:0d:a2:d2:d9:
a6:3c:d3:89:89:ca:83:a1:2b:c7:5f:12:06:1b:1a:e0:58:b0:
84:b1:05:d5:8e:89:74:ec:12:60:b3:0d:18:93:ed:7c:a7:78:
a4:fc:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:49:16 2025 by rpki-client