Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87682670F47511EF8A0727BC762E951A.roa
File: 87682670F47511EF8A0727BC762E951A.roa (raw, json)
Hash identifier: a2ckBdW2knpdACwQ9DvTq8X76bglVfa7y34z/NC+JhI=
Subject key identifier: B5:48:45:C4:6E:44:65:54:7F:0E:67:11:66:99:52:C1:5A:35:C9:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016581
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87682670F47511EF8A0727BC762E951A.roa
Signing time: Wed 26 Feb 2025 19:11:49 +0000
ROA not before: Wed 26 Feb 2025 19:11:45 +0000
ROA not after: Sat 19 Feb 2028 19:11:45 +0000
asID: 17561
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91521 (0x16581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:11:45 2025 GMT
Not After : Feb 19 19:11:45 2028 GMT
Subject: CN=67bf6775-f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:cc:b5:2a:39:b6:0b:ae:08:e8:39:c0:5b:
69:3c:b0:22:64:3d:c5:26:70:f9:54:35:a5:7f:6c:
02:4b:e5:1c:6a:a8:60:74:04:bf:1a:b2:b9:86:1c:
2d:f7:12:c6:c0:29:f0:ba:bb:b0:05:fe:a9:5d:4e:
5e:35:f3:1d:b0:1e:cd:28:72:1c:13:7f:47:43:49:
4e:ba:ba:42:b0:20:84:2f:87:51:56:98:c1:35:42:
b4:b7:28:a5:8d:a5:b1:a8:0b:ee:4f:29:75:4d:78:
46:31:96:8b:ad:71:12:58:4b:8e:b9:42:3a:53:63:
10:b3:88:12:a4:19:bf:d3:2f:05:30:4b:73:30:fc:
12:ec:f4:34:2a:22:a8:bb:32:c7:b7:d2:ef:bb:3b:
78:a7:bd:ed:f3:5a:ed:df:46:a8:07:b0:6f:d2:84:
a6:ac:46:4d:db:9c:74:1a:1b:6e:30:a8:f3:9d:52:
f6:95:b1:55:c6:41:91:88:8f:82:ec:25:ca:2a:f6:
a4:f6:ee:b2:2f:43:d2:a8:7f:52:69:fa:be:62:12:
3b:08:95:e0:73:9b:a8:c2:d6:a3:0b:ae:2f:2d:74:
44:bf:3a:ae:85:d7:b7:2d:6d:4e:d0:c7:1d:eb:7e:
1a:46:18:e6:cc:d6:25:3e:3b:dd:76:b4:2f:78:03:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:45:C4:6E:44:65:54:7F:0E:67:11:66:99:52:C1:5A:35:C9:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87682670F47511EF8A0727BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:67:10:eb:af:61:7d:54:4f:dc:bb:49:d3:2a:23:47:8d:d9:
4d:0d:e3:96:5e:9c:e1:ce:02:f1:9f:83:90:88:37:59:ef:11:
93:f5:e5:47:ee:92:e5:72:c2:f6:40:e7:31:e6:79:aa:e6:e9:
c0:2b:22:d3:7e:cf:dd:51:72:88:b5:db:49:f7:c0:c6:ba:1a:
8f:1d:4c:64:34:7a:cb:25:22:26:76:d3:2b:01:6d:4c:29:d9:
a5:0c:2d:0d:26:dc:7f:34:b3:e7:c7:12:d0:7e:61:a4:93:f7:
8a:81:c2:72:f1:9b:f5:42:d5:85:8e:94:7e:3b:e2:4f:4a:7f:
46:4a:9b:ac:f5:20:71:ec:59:95:bd:4c:2b:33:e7:fc:c9:db:
be:ec:93:0d:c2:1d:26:c8:79:7e:3f:ee:ce:6e:58:32:ab:27:
15:37:c8:10:7a:cc:5c:d3:92:e9:c7:5a:10:08:5a:98:d3:b8:
b2:c2:e5:17:01:92:02:76:52:06:7b:8e:55:e0:24:de:5a:92:
d8:dd:32:e4:8b:2d:12:0e:dc:b2:42:c2:8d:62:8d:26:0b:ac:
87:c9:70:1a:35:6f:6a:67:4f:c9:3d:df:b2:a2:de:12:8f:ee:
cd:cc:92:13:4c:b1:97:42:17:fe:6e:73:1a:eb:36:9a:45:36:
30:ee:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:14 2025 by rpki-client