Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB1C8C2CF6D11EF878E08A7762E951A.roa
File: 7BB1C8C2CF6D11EF878E08A7762E951A.roa (raw, json)
Hash identifier: J/difxFR5SgauNV93JjqTIWgNd5q2i3WbHSM3/7LXak=
Subject key identifier: 73:B9:71:72:70:E2:BB:0A:E9:D0:26:AF:9E:2B:B1:06:2A:AE:10:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB1C8C2CF6D11EF878E08A7762E951A.roa
Signing time: Fri 10 Jan 2025 16:11:01 +0000
ROA not before: Fri 10 Jan 2025 16:10:57 +0000
ROA not after: Sun 12 Dec 2027 16:10:57 +0000
asID: 17561
IP address blocks: 154.81.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80456 (0x13a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:10:57 2025 GMT
Not After : Dec 12 16:10:57 2027 GMT
Subject: CN=67814694-c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:d7:6b:9f:35:06:3e:18:c5:8b:72:cf:e0:
f7:d3:7c:7d:3a:4f:bd:ec:41:10:17:3c:f1:8d:45:
06:4e:a9:9c:18:01:9a:8b:e7:05:83:69:0c:9c:46:
6b:28:81:0d:de:da:9d:28:23:8a:ff:a2:55:63:c0:
41:a7:57:a1:a5:c9:ea:6e:ba:b2:bb:c2:a1:4f:a5:
9f:0f:79:aa:91:f5:28:55:83:a8:ae:73:2f:53:fa:
d9:af:6b:b6:1c:24:d0:8e:22:89:ff:24:06:43:ba:
e6:76:3b:cc:15:95:2e:1a:be:56:cb:2f:46:3e:83:
0c:b3:1c:1b:3c:55:c6:17:3e:a5:47:e0:0c:f7:ba:
5e:41:26:44:7d:dc:81:c9:09:7d:bb:4d:4e:e8:1f:
fb:62:4d:b4:ba:04:eb:02:58:db:01:83:a3:52:51:
3d:37:c2:2d:de:d4:5b:a9:d6:7d:dc:b2:ff:89:f0:
61:97:a4:b4:1b:d7:40:2c:70:ab:3b:57:65:f2:73:
0e:ca:1a:f1:a5:1c:ae:c9:c8:42:07:a3:5d:50:fc:
dc:f0:26:d1:70:4c:3c:1f:7c:81:35:55:7b:62:81:
97:29:a5:8b:3c:9f:c4:dd:5d:fc:43:ad:b6:7b:5b:
c2:41:0f:d6:a9:42:b5:bb:a2:db:db:ef:0d:77:ea:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:71:72:70:E2:BB:0A:E9:D0:26:AF:9E:2B:B1:06:2A:AE:10:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BB1C8C2CF6D11EF878E08A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:35:4c:cd:59:8f:02:21:0b:5b:22:2f:a6:17:5f:76:d1:6e:
80:68:4b:50:20:56:e5:35:57:58:2c:ad:e8:f2:67:44:60:37:
14:cd:5a:31:da:46:b5:ac:37:3b:ed:98:e7:1f:13:fc:99:a0:
84:b5:35:41:ae:cb:1b:c5:46:dd:62:73:1d:67:db:6c:49:45:
99:ab:b8:9a:a0:d6:20:72:86:1a:a8:47:96:56:e4:f9:34:e9:
73:3e:ee:05:9d:67:2d:81:65:39:f1:5d:02:8b:7b:f9:0c:90:
eb:45:76:7b:7c:5d:e4:47:ad:a2:07:28:82:31:09:ba:d3:41:
7a:94:b4:d6:9d:6c:92:16:d0:d3:10:5d:19:0f:16:65:3f:d5:
4f:dd:73:25:52:fa:17:9c:55:8b:a2:d1:c2:67:43:4b:e6:b9:
f4:7a:e9:1e:9f:b7:75:d1:55:55:38:28:9d:aa:16:1f:fc:ef:
ac:13:27:a6:6b:a9:a3:c6:a0:2a:ec:75:6e:fd:de:99:b6:12:
af:b0:d1:eb:e0:be:dc:0f:be:5c:c4:11:de:7f:e8:0f:bc:db:
56:3d:ce:c9:49:37:44:51:db:33:d6:8f:c5:ac:e2:48:e6:64:
60:ef:f9:2d:29:09:de:c5:bc:b2:7c:9a:96:b9:66:96:70:41:
8e:84:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:14 2025 by rpki-client