Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A09383AE31C11EF9124DEA4762E951A.roa
File: 7A09383AE31C11EF9124DEA4762E951A.roa (raw, json)
Hash identifier: PqQPFBawHECD84oTarc0LSaJRilb7QVPHkO/RYjUofc=
Subject key identifier: D9:36:94:59:04:5B:8C:77:C4:F0:BE:FC:94:C8:5D:07:69:99:EC:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01514D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A09383AE31C11EF9124DEA4762E951A.roa
Signing time: Tue 04 Feb 2025 17:21:32 +0000
ROA not before: Tue 04 Feb 2025 17:21:28 +0000
ROA not after: Wed 30 Apr 2025 17:21:28 +0000
asID: 6453
IP address blocks: 154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86349 (0x1514d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 17:21:28 2025 GMT
Not After : Apr 30 17:21:28 2025 GMT
Subject: CN=67a24c9c-63ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:06:f5:22:31:a0:0d:d3:bd:aa:41:66:95:
26:bf:29:7e:cf:6e:f0:24:49:47:52:49:6a:4f:f6:
45:a5:4a:2e:b1:25:2b:03:f3:02:b5:07:08:ff:f6:
0a:4b:a8:ed:a1:5b:f6:a9:46:84:ef:b1:9c:f0:f7:
18:91:31:b0:d1:ac:0a:e7:29:14:75:69:fe:a0:ec:
8e:ac:33:69:85:23:df:80:20:78:3a:e2:4d:60:f7:
0c:69:3a:6d:2e:bb:d6:e6:f0:77:81:ec:f1:2a:e8:
1c:18:27:d6:6f:89:2e:29:f0:48:30:db:2c:da:6d:
92:5e:85:11:25:2b:03:fd:cc:79:a3:d2:cc:fa:50:
42:60:82:36:de:ba:59:a5:9d:3c:d1:a1:a5:f3:9e:
a5:82:16:b6:1f:ae:d9:05:9d:3f:8e:b5:6b:ca:f5:
8a:34:86:fc:11:b5:40:21:a9:c0:25:f3:7a:16:3e:
14:7a:4f:e4:76:69:f1:d4:6f:0d:81:20:50:16:26:
64:40:ba:ac:25:5a:48:79:0a:45:bd:59:62:c6:7b:
10:29:d6:60:2a:4f:c5:33:7f:60:4b:13:b5:98:d6:
d9:e4:4e:fc:a5:d2:49:a4:07:2b:fe:91:38:c7:3b:
10:d2:9e:38:09:23:26:01:4c:7a:99:67:ef:59:cd:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:94:59:04:5B:8C:77:C4:F0:BE:FC:94:C8:5D:07:69:99:EC:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A09383AE31C11EF9124DEA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:40:81:b6:ce:b7:a0:2e:9a:c5:96:27:a4:17:02:f3:3c:7c:
f3:28:67:5c:00:d9:e9:9c:9a:63:7a:d0:11:82:4f:d0:cc:e9:
8b:a6:61:50:77:a1:4b:d9:a0:b3:d6:2d:ac:46:80:9e:55:04:
0b:05:69:24:c9:a2:93:0d:08:65:41:e1:ed:e8:2f:8b:37:bf:
66:d6:10:3a:50:25:9a:55:5a:9d:e6:ed:eb:a5:8f:63:a1:84:
93:8b:56:d6:1b:da:5b:1f:1f:ea:f4:63:31:f8:53:9c:80:f6:
7d:10:72:54:e7:e0:fb:62:66:44:36:8c:06:3f:89:ae:7f:99:
86:a2:bb:4a:02:a0:ed:40:7f:8e:24:82:e2:64:d4:85:b8:1e:
8a:8a:2f:2d:4c:53:05:85:23:01:79:39:9a:75:b0:10:d7:e6:
88:5f:cc:16:a5:b4:78:9c:24:0c:83:c0:8f:a4:c3:e6:8c:64:
da:7a:12:02:1a:b2:61:a8:fd:b8:d7:5a:52:6d:5f:74:dc:14:
0d:47:21:36:9a:4c:6e:70:40:eb:b5:6d:84:6c:07:ef:1e:43:
33:c1:64:ec:f5:fc:16:1a:18:59:ed:78:77:ed:9d:34:dc:74:
fa:60:29:20:62:a2:36:d8:ca:9a:34:51:9f:19:85:a4:eb:d7:
46:25:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:54 2025 by rpki-client