Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BABCD7A092D11F0AB9DA851762E951A.roa
File: 6BABCD7A092D11F0AB9DA851762E951A.roa (raw, json)
Hash identifier: Mp+Ub5DhCTX5migcVMuhNrF2JEZ1H5FiSRmUmvlp/u4=
Subject key identifier: A8:B2:54:D1:C7:67:6D:87:11:C3:D3:F9:5D:FD:66:A3:81:26:FC:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BABCD7A092D11F0AB9DA851762E951A.roa
Signing time: Tue 25 Mar 2025 03:58:33 +0000
ROA not before: Tue 25 Mar 2025 03:58:29 +0000
ROA not after: Mon 14 Apr 2025 03:58:29 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95705 (0x175d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 03:58:29 2025 GMT
Not After : Apr 14 03:58:29 2025 GMT
Subject: CN=67e229e9-ac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:b3:24:a4:6e:1d:e7:ca:c3:90:9b:4b:fe:
91:a7:ca:70:43:c9:02:68:96:d3:5d:6e:99:63:fc:
8e:59:ce:a5:b4:f2:d4:4c:63:87:20:9b:db:8b:72:
df:b7:6f:9a:a3:15:17:ee:7e:c8:0c:79:31:be:40:
93:33:5b:1c:f8:fa:06:88:0c:cc:c1:ac:49:c6:4c:
65:2d:8a:68:fd:9d:5f:b5:b3:b3:49:1e:23:e1:ca:
ef:5e:bd:c6:dd:cb:60:93:fb:a1:6e:9d:bb:04:f6:
82:e0:0a:72:25:03:b2:c9:49:fd:89:61:1a:22:bf:
73:8d:e5:12:2a:5a:b1:29:33:ca:a2:e5:36:60:f1:
67:83:a8:6c:f4:e5:62:ce:f0:ac:9b:4e:d1:50:47:
5e:2f:8a:3a:da:e5:6a:a6:d8:76:e4:e2:29:69:b5:
d4:bf:2c:44:b9:2c:02:85:39:7a:36:56:8f:b7:17:
87:8a:04:38:5b:4d:df:0c:a0:76:62:34:60:ff:a2:
c5:f9:ce:12:fd:b2:05:d6:f8:36:e3:06:a8:08:65:
7e:ef:a9:e8:08:dd:d3:fa:5b:31:d2:2d:87:6f:cd:
88:e8:39:fa:de:af:88:fe:e4:67:ad:19:a4:7f:9e:
13:53:94:fb:ce:6d:55:7e:db:27:7a:50:ea:69:e3:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:54:D1:C7:67:6D:87:11:C3:D3:F9:5D:FD:66:A3:81:26:FC:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BABCD7A092D11F0AB9DA851762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:b5:56:a9:8b:b8:fd:df:3a:17:09:b3:79:ce:1b:7f:96:39:
b0:6e:ef:bc:e0:00:d4:a7:f3:95:85:fd:b0:02:5e:cf:4d:bd:
d9:85:0e:0e:a8:13:0c:5a:83:42:1d:50:af:08:f2:08:df:01:
40:f9:dc:61:d1:ce:e0:4e:ea:64:c5:98:08:ed:ba:81:47:28:
2b:5f:d3:7f:70:db:87:c0:2e:2b:89:20:ba:65:b9:12:d0:e3:
b8:a9:8e:51:f9:cc:ec:1b:c2:e4:85:70:d7:72:c3:5f:da:ab:
f9:fd:02:62:a8:53:64:80:a5:05:3a:6b:cf:04:62:9d:10:55:
b5:11:38:df:1a:cf:91:fe:89:90:0d:c1:bb:0e:69:ce:0b:76:
0c:4d:5d:bc:d9:0b:5c:11:8f:61:24:0c:b9:1f:c3:d4:35:60:
43:9e:d5:0d:37:ca:78:6c:f0:09:b6:c8:df:22:17:37:af:b1:
00:1c:1d:dd:5b:96:54:e2:9a:6c:2b:10:9b:d9:fe:33:c8:3c:
d3:ce:68:e3:81:b6:4f:c1:7f:19:f5:20:6d:f1:da:18:17:2f:
a5:7b:1a:93:54:c9:71:48:b5:21:92:fe:d9:d7:25:e4:c7:82:
94:c1:9b:ec:b0:f4:ec:33:5f:e3:d4:73:09:46:55:c4:76:b9:
a8:c8:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:41 2025 by rpki-client