Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A183DD2F47C11EF9EE8006C762E951A.roa
File: 7A183DD2F47C11EF9EE8006C762E951A.roa (raw, json)
Hash identifier: NwE8gU6jeHiEjXQN0vw2yiEN8mgTrbD3jDlaqMuL3w4=
Subject key identifier: 4D:31:4F:C1:20:F3:E7:18:DD:A9:D4:76:18:FC:AF:08:AF:89:7B:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A183DD2F47C11EF9EE8006C762E951A.roa
Signing time: Wed 26 Feb 2025 20:01:33 +0000
ROA not before: Wed 26 Feb 2025 20:01:30 +0000
ROA not after: Sat 19 Feb 2028 20:01:30 +0000
asID: 17561
IP address blocks: 154.218.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91607 (0x165d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:01:30 2025 GMT
Not After : Feb 19 20:01:30 2028 GMT
Subject: CN=67bf731d-b195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:5b:47:9e:d5:cf:91:b6:a9:ca:99:0c:24:
16:3d:f1:a0:70:b1:5f:fd:60:83:c4:10:f1:26:b2:
97:21:15:33:d1:20:df:24:ad:5f:41:bb:69:3b:ca:
ee:19:b9:9e:24:54:2f:7c:ed:e0:07:f8:08:79:8a:
42:d4:89:62:2c:63:f1:73:07:1c:0c:9f:62:75:f1:
89:0b:c8:bb:56:80:c6:05:f7:15:bf:ff:0b:35:41:
8e:6a:a9:14:e5:b8:18:2e:25:73:f5:1d:fa:b5:d0:
93:fb:19:28:19:ac:11:f6:17:25:6d:6a:4c:52:ff:
ab:3a:6a:2d:ce:c4:d4:64:9e:bd:2d:4f:4b:ab:61:
73:a4:36:e1:af:d8:e6:e8:c2:00:76:ee:f5:23:90:
dd:92:27:9c:d5:4a:e1:b0:0b:7d:05:63:00:df:72:
51:7c:d9:11:38:5d:12:fc:68:75:0e:9e:eb:ba:6b:
fc:b0:01:c9:a0:88:b9:56:97:c4:bb:0b:34:c7:59:
9f:fe:05:b2:45:d9:81:00:12:39:d8:0c:1b:88:be:
d2:2a:50:70:ea:3b:27:c9:a4:82:8a:55:99:b4:d5:
66:75:10:e7:65:83:a4:fa:9e:62:7c:53:bb:10:e6:
67:33:39:87:fd:c5:d7:af:4a:ea:13:64:63:e8:19:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:4F:C1:20:F3:E7:18:DD:A9:D4:76:18:FC:AF:08:AF:89:7B:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A183DD2F47C11EF9EE8006C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.57.0/24
Signature Algorithm: sha256WithRSAEncryption
36:87:10:8d:79:4f:18:77:63:72:4c:00:cb:6c:7e:44:f6:83:
ef:bd:b6:bd:9f:67:67:85:8f:e1:6c:25:3f:1b:84:e9:f4:81:
fa:79:29:1e:81:72:41:a0:74:d1:a1:b9:50:29:dc:f2:73:e2:
da:fa:6f:fa:74:29:94:ea:6b:ef:2c:8c:70:84:77:1f:4b:2a:
42:a3:36:04:42:7b:b7:1b:2b:1c:52:60:c7:0a:ee:bb:e8:04:
86:74:d1:2a:0a:a8:4b:4c:6a:b6:ef:44:1b:01:ee:95:5c:9a:
c4:1f:0b:5d:b8:dd:46:44:88:36:3e:6f:4a:08:e9:a6:f5:9b:
ad:b6:76:b7:ec:e4:45:7a:de:0d:f1:26:12:40:37:c0:0f:a2:
b5:3e:b5:16:ba:ad:33:ed:85:39:31:59:ea:7b:59:83:d3:df:
95:37:50:d2:6e:12:d9:6b:0e:5b:73:96:f2:d9:ad:99:03:bb:
25:9c:e4:22:8e:d8:29:d6:51:46:95:14:b1:24:56:26:00:d3:
b4:b4:5b:84:d1:18:84:72:23:06:b0:96:2e:43:c5:80:d6:93:
0b:a9:08:86:56:41:75:35:d8:f7:a6:27:e9:7a:8c:32:09:11:
a5:4d:7b:dc:d5:87:06:06:3f:4e:79:9d:91:1f:26:8e:85:16:
72:ef:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:33 2025 by rpki-client