Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790141B0CDB611EFA44978BC762E951A.roa
File: 790141B0CDB611EFA44978BC762E951A.roa (raw, json)
Hash identifier: q3/ny2aPLzbz4MYVyw4YVjYVJecScSyBaYKuIK8hnZ4=
Subject key identifier: B4:0A:B3:E8:77:1B:55:19:43:73:D2:BC:26:3D:4F:6F:CD:F8:55:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790141B0CDB611EFA44978BC762E951A.roa
Signing time: Wed 08 Jan 2025 11:48:27 +0000
ROA not before: Wed 08 Jan 2025 11:48:23 +0000
ROA not after: Tue 16 Dec 2025 11:48:23 +0000
asID: 984
IP address blocks: 154.200.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79546 (0x136ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 11:48:23 2025 GMT
Not After : Dec 16 11:48:23 2025 GMT
Subject: CN=677e660b-f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:87:b4:4e:8f:bc:bf:09:a1:5d:56:1d:63:
65:67:fe:87:d4:2d:ae:cc:dd:57:12:44:59:1a:32:
58:2d:00:f8:5e:0c:56:c5:5b:06:1e:cf:c9:46:df:
56:cd:2b:d4:1a:e0:15:a0:31:95:a7:e7:f9:d8:2b:
cb:bf:ec:62:52:ad:4e:59:cf:05:87:08:1e:09:3f:
74:76:02:b3:94:ec:00:83:a5:58:5d:72:a5:06:90:
21:d0:c9:93:9e:23:61:32:16:f9:64:81:d4:03:d0:
36:cd:2e:47:14:97:16:3d:32:fc:96:38:c0:54:2f:
a8:5d:25:b5:00:ac:1b:a5:c3:cf:f1:ed:d8:eb:43:
49:c4:68:36:b0:39:99:76:37:2d:62:a3:49:44:34:
b1:52:64:e2:2c:cb:bf:af:a6:18:8a:9b:f3:4c:07:
52:9a:e2:1c:92:1c:c0:3d:4b:61:cd:03:fe:54:67:
d4:1a:bf:ae:d2:af:b6:5a:9c:df:e3:4e:be:a3:ee:
49:db:74:a0:78:48:93:e6:55:95:8b:1d:e7:93:df:
2f:a8:3d:b8:d6:70:1f:d2:16:b7:82:06:ce:d9:d4:
6c:f3:32:a3:13:23:83:43:0e:49:26:42:6f:b3:5c:
e5:65:8e:f9:58:ec:07:03:a8:fd:44:1d:23:e5:4b:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:B3:E8:77:1B:55:19:43:73:D2:BC:26:3D:4F:6F:CD:F8:55:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790141B0CDB611EFA44978BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:88:ab:89:64:5e:1d:0c:42:9f:0b:46:c6:00:3a:3d:41:66:
d4:18:f4:3b:16:69:b6:50:00:5c:52:c4:e2:1d:aa:0c:56:50:
1c:f2:0f:9f:30:5c:88:20:03:c8:d0:b9:55:0f:cc:47:6f:98:
68:db:e0:55:84:c9:7e:e3:16:e3:db:f9:e0:7f:94:e7:65:aa:
b4:18:86:84:01:c7:92:ba:b0:85:01:a7:b4:14:b2:62:aa:f5:
32:9f:a5:0b:cd:a6:15:6c:fa:d6:5d:a6:a5:70:21:4e:24:64:
6d:9b:6a:e6:7c:19:98:a5:a3:03:fb:70:56:48:4a:e6:7d:f1:
97:ce:ec:74:f8:62:5c:bc:03:32:37:b7:84:69:59:7f:c9:ea:
59:34:e1:b1:a8:4a:ae:64:4e:7b:cf:e2:8f:90:c5:1c:dd:fc:
56:a3:42:2e:48:b5:4c:91:2b:c0:c5:21:05:2d:af:e2:70:3b:
6b:4d:50:09:bc:62:b3:9f:7a:27:06:b7:a1:3f:cc:08:b8:ed:
15:a2:32:12:18:aa:32:cf:c2:ee:8d:ee:f1:de:08:ab:3a:a0:
e5:db:60:fa:92:06:f7:49:98:c9:11:a9:8a:b1:e3:86:d8:cb:
0a:d9:40:86:ac:93:d6:d7:7e:56:a0:01:da:f4:b3:67:c4:5e:
ed:20:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:28 2025 by rpki-client