Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DFD6B98E24411EF9E4B5276762E951A.roa
File: 6DFD6B98E24411EF9E4B5276762E951A.roa (raw, json)
Hash identifier: QpZ+rTvp82HRK49JQGCRUyosYf0RtsMTIX8JmvMGj68=
Subject key identifier: DA:F8:78:80:8A:8C:0F:EF:2C:91:99:72:07:23:E5:59:65:51:38:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DFD6B98E24411EF9E4B5276762E951A.roa
Signing time: Mon 03 Feb 2025 15:35:00 +0000
ROA not before: Mon 03 Feb 2025 15:34:57 +0000
ROA not after: Wed 30 Apr 2025 15:34:57 +0000
asID: 150008
IP address blocks: 154.206.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86083 (0x15043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:34:57 2025 GMT
Not After : Apr 30 15:34:57 2025 GMT
Subject: CN=67a0e224-f45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:aa:12:2e:7d:7d:32:7a:44:42:04:1d:f2:
45:d6:1e:0c:1a:d2:bc:6f:a8:44:07:bb:be:f4:83:
0d:e7:da:ff:f6:37:aa:f1:cd:96:47:ed:7d:11:98:
18:d9:e5:d1:7f:e5:66:c4:be:f2:96:21:41:8e:bb:
59:70:30:f3:80:f2:77:86:c5:c4:38:e9:44:ac:c5:
b6:79:51:33:1b:6b:f8:db:87:3f:12:32:6f:cc:33:
dc:b5:09:80:dc:22:ce:73:39:3a:1e:4d:8e:9b:d2:
52:86:24:9c:d3:d4:9f:bd:52:b0:0a:79:7b:6b:b1:
a3:d0:58:0e:9c:f2:3c:46:ab:19:5f:e7:15:86:08:
8c:39:a6:e3:48:fb:f2:95:81:67:53:b4:37:f9:bf:
5e:2b:f2:0f:19:98:a3:9d:46:f0:9c:5a:cc:bb:d6:
b2:60:30:b0:ea:9e:54:81:ef:3f:41:d6:ac:3a:37:
0a:36:92:01:ee:5b:0a:4f:03:7c:97:6a:4d:f4:ee:
c2:0e:6c:01:67:4c:5f:e9:e3:e6:81:48:48:16:49:
d9:3f:02:5a:b2:d4:26:ce:d0:21:c0:b1:f7:aa:b2:
23:66:52:41:d9:92:5c:9b:32:2e:b9:83:39:be:c9:
e9:96:e0:0f:17:6a:11:75:82:e1:87:69:57:9d:96:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:78:80:8A:8C:0F:EF:2C:91:99:72:07:23:E5:59:65:51:38:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DFD6B98E24411EF9E4B5276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6c:9e:58:09:dd:83:50:20:00:26:8f:60:06:4a:e5:20:45:
c1:af:cc:3f:60:6a:90:a5:e7:a0:1c:97:d6:27:0d:b9:44:fe:
dd:13:bd:b9:77:4f:99:4c:48:37:2d:ea:7e:b0:1b:c5:52:75:
4d:54:be:fe:1b:41:7d:f6:3d:b7:c4:c8:42:4e:a4:98:4f:0b:
35:08:65:8e:80:dd:be:9b:df:72:39:71:3d:79:18:74:21:a4:
89:35:81:cb:42:10:9e:68:53:00:ca:61:dc:60:4e:49:2f:58:
18:54:33:de:fd:0a:49:42:42:93:73:d9:df:68:38:cd:ad:81:
19:09:a9:54:e4:80:66:07:c4:d4:1d:e3:a5:bc:e4:dd:73:cd:
2c:d1:dc:d2:e9:f0:64:01:ea:eb:bd:1e:cb:30:ef:34:3e:49:
1c:8b:b2:6d:ce:a0:b4:25:37:04:cd:9c:b0:90:38:40:27:4e:
4b:e3:c7:2b:21:ae:3d:d6:92:47:73:81:2c:79:49:f2:7c:28:
88:1a:7e:92:90:5d:51:71:96:75:2b:07:0b:a3:2d:af:cf:c4:
37:c0:08:28:30:53:49:ab:3e:9a:d8:7f:25:eb:e4:77:df:85:
38:a9:d1:99:1b:f6:e3:5a:62:6c:f8:f6:21:d7:8f:59:2a:ed:
72:c9:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:08:27 2025 by rpki-client