Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E37AEC93F11EF88509B4C762E951A.roa
File: 869E37AEC93F11EF88509B4C762E951A.roa (raw, json)
Hash identifier: SwA63u1IyZd3OvjEOvzGhDxa0GkSLJBJZsUAdzsvO1M=
Subject key identifier: BF:D5:13:EE:49:07:C3:85:C7:0B:80:55:D2:33:FB:91:36:5D:31:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01341D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E37AEC93F11EF88509B4C762E951A.roa
Signing time: Thu 02 Jan 2025 19:26:55 +0000
ROA not before: Thu 02 Jan 2025 19:26:51 +0000
ROA not after: Mon 13 Dec 2027 19:26:51 +0000
asID: 17561
IP address blocks: 154.223.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78877 (0x1341d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:26:51 2025 GMT
Not After : Dec 13 19:26:51 2027 GMT
Subject: CN=6776e87f-6f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:45:7b:f2:8a:68:e6:67:c0:df:e6:b7:90:
1b:29:dc:7a:ce:77:7e:1b:15:01:7d:48:d2:9e:a0:
6b:c5:78:a6:90:7a:af:8f:2a:5d:0a:ef:29:e1:ef:
8b:62:ba:1d:11:df:2e:41:1e:fb:4b:db:1c:d3:69:
2a:39:5c:82:5b:63:2f:5a:72:e1:b5:40:15:8a:d1:
fe:a8:0c:06:46:17:f4:15:b5:03:97:7d:69:a2:f1:
70:12:b5:e0:47:00:6a:64:b8:b8:14:76:bb:f6:2b:
19:40:33:d4:91:96:44:44:fb:f1:7f:91:5f:7c:16:
83:da:d8:ae:b1:9a:3b:a1:43:66:ac:c9:a6:8e:42:
7f:97:43:f9:c4:5b:88:cc:a4:30:9d:86:a3:d0:0f:
b8:5d:4b:2b:57:07:b5:d6:8c:29:c3:ec:9b:f6:3a:
9b:ff:16:e5:f9:ce:69:94:65:7e:b3:e1:62:1f:a7:
f3:27:97:53:44:4c:36:30:56:c0:90:2c:a5:53:b6:
b0:1b:f5:1f:9f:ac:74:1e:34:d1:b5:24:0c:b1:30:
44:12:94:3a:25:df:f5:54:3e:e3:5e:7b:aa:d4:c3:
6b:eb:74:3d:9b:b4:ef:53:bf:ef:c0:19:cd:4a:04:
d9:24:8a:1c:20:fb:ff:da:cb:f4:ff:7f:73:26:87:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:13:EE:49:07:C3:85:C7:0B:80:55:D2:33:FB:91:36:5D:31:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E37AEC93F11EF88509B4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b7:8d:8f:d8:85:e0:54:00:5d:ae:e9:90:f8:71:6c:74:91:
5b:14:d0:1b:09:c2:0d:db:81:74:14:88:8f:8c:ac:c6:c6:b2:
a0:1f:73:19:25:c8:e0:74:e4:ab:88:93:fa:35:6b:c9:e5:a9:
4b:ce:2d:1d:3a:25:13:ca:89:31:5e:e4:98:58:54:28:f5:5b:
fa:ad:73:c3:bc:19:c4:d2:9b:20:c2:c9:8e:42:12:0b:01:77:
60:a8:0d:7c:c1:fc:1e:37:97:fc:36:6a:dd:6f:ef:91:10:cd:
ac:15:9f:67:77:c5:7e:c7:f9:e5:1f:4b:dd:98:a6:6e:7a:70:
b4:92:b8:64:d1:a1:54:90:f7:b3:ef:e4:c0:c8:55:be:b8:cd:
3e:59:ba:2e:d1:90:9e:bf:df:c7:16:65:65:75:4f:75:7d:62:
bc:fe:8a:9d:98:a5:bd:95:73:1b:31:1a:77:1b:b4:13:61:cc:
eb:b1:41:03:90:af:74:72:5e:d0:75:21:46:f3:74:1c:6a:c7:
8e:1b:c6:4e:1f:91:ed:38:a6:86:86:68:8e:76:8c:d2:fe:6c:
76:67:bb:14:fd:0c:6d:bd:0f:d5:0a:5b:61:a8:e5:2a:d2:80:
13:bc:a8:7a:1c:9d:85:76:36:05:48:45:e6:b6:bd:2c:29:2c:
27:8c:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:25 2025 by rpki-client