Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778AD6D2FFE511EF88C5374A762E951A.roa
File: 778AD6D2FFE511EF88C5374A762E951A.roa (raw, json)
Hash identifier: 8gdMoeRcXMJbsuwdowSPf8xenmIobKQUg5Tkln+/qTY=
Subject key identifier: 37:56:DC:CB:91:C6:A2:D3:27:86:80:EA:65:98:56:1B:C1:4C:E6:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778AD6D2FFE511EF88C5374A762E951A.roa
Signing time: Thu 13 Mar 2025 08:30:49 +0000
ROA not before: Thu 13 Mar 2025 08:30:45 +0000
ROA not after: Sat 19 Apr 2025 08:30:45 +0000
asID: 57043
IP address blocks: 154.199.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95265 (0x17421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:30:45 2025 GMT
Not After : Apr 19 08:30:45 2025 GMT
Subject: CN=67d297b9-cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:12:ba:43:32:81:14:ea:07:42:d1:37:9d:
a9:c5:a9:0e:03:59:9d:a0:b4:2f:f6:1b:44:ac:23:
1d:f3:03:d0:6f:0a:60:3c:2f:5f:89:a5:11:61:98:
77:e6:e1:85:c6:27:fc:fd:cf:e9:17:e4:5b:44:c7:
11:a2:cd:53:2b:31:31:3c:0a:92:73:32:70:a3:b0:
dd:a0:7e:0e:71:24:24:72:a2:8b:15:2d:1d:65:ac:
f4:06:dd:29:e0:80:22:16:39:ae:4f:48:25:bb:d3:
89:5f:fe:17:72:0d:59:ee:f9:9c:33:1c:f3:ed:bf:
6a:40:7e:7b:dc:73:77:12:d2:05:51:48:f2:ed:ce:
88:d3:14:dd:c8:71:bd:93:fc:7b:96:1c:8b:60:69:
69:e0:f9:34:10:37:48:f9:a1:4d:04:23:36:be:c0:
ae:54:98:02:23:36:e2:15:0b:fc:a9:b7:6a:5f:2f:
4a:f8:83:8f:11:d1:9a:09:2e:52:03:5c:41:97:e1:
3f:6f:7f:41:76:64:fb:b8:fe:91:77:61:54:cd:97:
12:ba:b6:95:57:07:f3:e6:cf:5e:ff:2d:b8:0f:b4:
82:f2:72:0c:95:4b:46:8a:67:fc:8c:a5:db:2c:21:
d8:00:52:9d:be:2f:6c:c0:a3:2b:c0:6c:b7:1f:1a:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:DC:CB:91:C6:A2:D3:27:86:80:EA:65:98:56:1B:C1:4C:E6:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778AD6D2FFE511EF88C5374A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:68:aa:65:e7:03:3b:c0:90:ff:37:07:0a:7f:33:84:48:35:
57:ec:e6:fa:d0:85:68:72:f9:d4:4a:aa:9f:db:d5:4b:70:f4:
69:1c:b7:39:e0:83:13:b3:24:37:c7:e1:c2:cb:3b:20:14:d2:
50:53:e1:7f:8b:10:6d:ef:d1:07:f5:64:cc:0e:75:ce:8c:46:
0d:b6:a6:57:fa:bb:71:14:bc:f2:4a:97:9d:47:9d:b1:e6:91:
47:62:fe:bf:d4:2e:ee:95:24:f3:c3:b5:03:f0:7c:fe:3b:0c:
be:c2:c6:97:56:64:10:38:df:f2:5e:86:51:53:1c:e4:48:a2:
f9:b2:af:59:7a:83:c2:66:7e:4d:9b:48:1b:7b:29:d1:80:48:
35:17:09:9f:b7:4f:9f:8c:2a:f0:5f:69:42:93:52:80:78:1b:
e8:17:93:cb:e8:c3:95:18:a4:ad:9e:cd:11:27:2b:35:52:b2:
f8:3f:a0:62:32:3e:69:9f:73:38:05:30:d3:3f:23:d2:d9:d7:
38:fc:f7:da:ed:52:60:4f:a0:10:9e:e7:d3:96:ba:75:f9:f9:
7f:68:73:a2:bd:f3:5f:be:89:08:fa:fb:19:5c:83:df:40:1f:
8e:70:0a:af:99:a6:b9:a2:9a:29:20:98:3e:a6:9c:ae:1a:7f:
d0:c2:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:45 2025 by rpki-client