Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E7781CCF6F11EFA32EFBB3762E951A.roa
File: 85E7781CCF6F11EFA32EFBB3762E951A.roa (raw, json)
Hash identifier: H+ky8n+oshxAwYjbGM8BBAXPMDuvYhXeUR/tcQBYums=
Subject key identifier: 55:F0:D8:30:FD:80:3A:C6:89:6C:8C:3F:2F:8B:EF:64:3E:24:68:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E7781CCF6F11EFA32EFBB3762E951A.roa
Signing time: Fri 10 Jan 2025 16:25:37 +0000
ROA not before: Fri 10 Jan 2025 16:25:33 +0000
ROA not after: Fri 12 Dec 2025 16:25:33 +0000
asID: 984
IP address blocks: 154.81.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80472 (0x13a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:25:33 2025 GMT
Not After : Dec 12 16:25:33 2025 GMT
Subject: CN=67814a01-d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:8d:55:91:2e:07:e2:a2:df:a0:ea:99:b6:
25:36:b4:cc:16:98:17:ec:0d:63:83:30:36:da:93:
a0:74:1b:22:61:5f:a5:01:4c:9b:a7:5a:b4:df:7e:
7c:11:4e:c1:45:21:1f:74:15:48:ad:a1:23:22:c8:
0d:a4:61:6c:3f:3c:c3:0d:d9:06:7d:36:58:6c:37:
0f:ed:2f:0f:8a:4b:71:f1:0f:df:84:8d:1f:d1:3e:
d0:17:2f:54:17:20:91:81:f6:07:50:fe:62:ef:53:
c0:c0:57:59:fc:1e:53:ce:0d:8d:ec:d0:8b:1d:6e:
81:0c:e7:a3:18:be:95:92:b8:18:bd:9d:21:08:2f:
b6:7c:a7:24:1d:ab:35:65:e0:29:9f:50:06:83:ce:
0d:49:60:d1:05:49:bf:b2:d4:45:64:c5:79:d8:69:
ac:ef:8b:6d:54:32:cd:5e:4e:ee:4e:e2:08:21:03:
a9:4c:26:83:61:b7:94:dc:53:e6:42:a5:96:cd:75:
e4:88:cb:9a:f5:26:dd:31:ee:a9:90:94:4b:6e:fd:
2c:c0:a0:27:8f:60:70:04:ed:32:41:80:f6:41:af:
65:ea:0b:8c:91:7c:69:c6:69:1a:c9:87:28:e7:e3:
47:07:0b:ef:16:c3:c2:89:29:d3:e8:8f:2e:b8:a9:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:D8:30:FD:80:3A:C6:89:6C:8C:3F:2F:8B:EF:64:3E:24:68:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E7781CCF6F11EFA32EFBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.163.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7a:c8:d2:8b:81:86:b0:93:90:da:6e:1a:f3:ba:87:29:98:
22:79:68:8f:5a:a7:f0:6d:03:d9:35:7f:3f:c7:ba:a0:76:09:
f7:72:28:90:56:8d:b7:a6:b7:3b:f6:ad:b8:38:dc:a6:99:bf:
10:5b:7e:bb:a6:ac:bb:84:33:59:cf:8a:5d:c5:96:ef:10:bd:
14:73:c4:f2:d0:d9:38:98:c5:15:76:87:8e:9b:2f:96:11:ed:
29:c1:b5:4a:b0:59:a2:15:42:61:91:e1:28:af:45:c6:e3:2f:
8e:96:4f:47:05:45:49:fb:14:4b:79:5c:4f:b1:aa:80:68:57:
be:90:a6:96:cb:5b:0a:e3:87:d3:cc:12:81:4a:a5:8f:b8:8d:
f5:56:8a:89:b3:15:39:dd:97:2b:3c:cb:7a:10:02:3a:53:f0:
3d:b4:db:fb:8b:4b:47:63:33:1a:18:a3:c5:15:c5:cf:04:54:
2e:1c:a9:5d:c6:ed:1c:f6:18:19:b2:f0:2e:72:98:6f:88:9b:
5e:fa:96:37:d6:f3:78:dc:28:ea:ba:93:4b:06:c3:f0:a4:d4:
e7:9a:e1:03:3d:e5:60:d1:88:e4:11:5b:34:ee:12:88:bd:25:
07:9a:27:2b:ee:36:0b:88:bf:96:47:27:16:6b:7b:ea:9d:f1:
98:09:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:09 2025 by rpki-client