Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850FA1A0F5C411EFBFD31EBF762E951A.roa
File: 850FA1A0F5C411EFBFD31EBF762E951A.roa (raw, json)
Hash identifier: TQSa2yP7uN1Vw9tztssBCW/83GzDFTpG6OVriAaSVzA=
Subject key identifier: 7C:8A:20:3C:2E:8B:4D:BA:DD:45:A2:35:F1:54:3F:F9:B1:6F:51:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850FA1A0F5C411EFBFD31EBF762E951A.roa
Signing time: Fri 28 Feb 2025 11:09:47 +0000
ROA not before: Fri 28 Feb 2025 11:09:43 +0000
ROA not after: Fri 11 Apr 2025 11:09:43 +0000
asID: 63139
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92880 (0x16ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:09:43 2025 GMT
Not After : Apr 11 11:09:43 2025 GMT
Subject: CN=67c1997b-b35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:40:74:a1:89:b1:6b:54:f1:0d:b0:15:9d:
0e:85:0d:8c:86:27:38:40:57:53:ae:06:f4:e7:60:
20:74:82:66:68:63:18:34:4e:1e:4e:24:cd:28:37:
56:d2:09:0c:54:7d:c6:51:d9:06:8f:cb:62:c6:18:
b3:0c:3b:e4:04:e7:43:a2:09:20:f3:27:03:5f:b8:
5c:c1:11:ce:fa:b0:a9:3c:cf:1c:73:14:96:3f:d9:
37:db:05:d6:ef:5f:09:00:a2:60:a6:7c:40:e1:4f:
9a:13:be:0f:df:04:76:dd:27:30:d6:9e:8b:cb:60:
b3:78:aa:e8:6a:78:bc:8c:82:24:ea:e9:1e:ee:b1:
a7:75:b0:d7:57:1d:b2:4a:33:cb:19:e9:b4:b5:5e:
05:c1:11:ff:07:62:1b:62:18:33:4d:a5:79:db:b3:
e7:c2:c7:77:cf:b1:6e:a4:5d:95:95:2a:b1:ec:5e:
69:46:f8:56:fd:b9:78:5c:d8:a3:33:d7:82:6d:e0:
2a:1f:d6:48:f1:97:01:88:71:74:32:49:f7:92:a8:
74:e5:71:d9:28:9c:71:e1:7e:88:3f:45:2e:88:60:
5a:35:24:10:f0:33:e1:31:f7:8a:06:70:8e:20:62:
fa:4b:33:51:22:dd:96:e7:c8:d3:e7:83:99:39:b5:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:20:3C:2E:8B:4D:BA:DD:45:A2:35:F1:54:3F:F9:B1:6F:51:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850FA1A0F5C411EFBFD31EBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
35:45:7e:26:37:78:c4:2a:87:23:29:a5:ec:ba:9f:70:06:fc:
5c:94:ba:72:23:32:4c:d2:73:7a:7d:56:44:ce:d7:d7:53:14:
26:42:98:89:dd:98:4e:31:e7:5a:d3:6a:dd:e8:de:c9:28:7d:
6c:78:f7:4f:f8:1f:11:57:07:27:62:f2:a7:b3:54:71:98:e9:
fb:08:cb:df:25:98:ea:d1:1d:58:89:34:2c:b1:46:f6:c7:af:
12:6b:16:1e:ae:c1:9d:c6:ca:54:ee:e3:c8:84:a9:a4:d5:2c:
a7:3a:79:e1:d5:05:30:52:7e:b0:c4:ad:74:7b:cc:1e:5c:4d:
23:39:75:28:12:0d:b8:4d:47:86:f8:45:4c:47:87:a8:40:e1:
ca:f1:45:fe:db:be:3f:c1:a6:b1:83:e0:fc:b0:26:cc:5d:78:
7d:83:b6:b9:e8:e3:63:eb:3d:a3:f9:d9:3f:8b:5b:74:ef:2b:
ac:65:08:fc:02:40:2d:5f:67:bb:40:83:8e:cc:ef:e4:51:c9:
f4:e7:b4:25:9c:03:fe:00:9c:2b:fc:d7:a8:73:6c:17:1b:14:
de:34:86:e3:47:8b:87:aa:9c:a7:33:d0:02:90:36:75:ea:f0:
fb:31:d6:03:d6:9e:d4:76:2a:02:91:ae:fe:df:6b:af:f6:e8:
08:13:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:26 2025 by rpki-client