Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A2B8184FE4F11EF85C70E96762E951A.roa
File: 8A2B8184FE4F11EF85C70E96762E951A.roa (raw, json)
Hash identifier: GmyN9zX6a9JaDynZmldVf0zNVhSZeyGbt4tcDbq9n50=
Subject key identifier: BB:E7:A5:72:45:AB:67:7B:30:EB:2A:7E:72:D3:85:85:D1:3D:C5:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017374
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A2B8184FE4F11EF85C70E96762E951A.roa
Signing time: Tue 11 Mar 2025 08:05:05 +0000
ROA not before: Tue 11 Mar 2025 08:05:01 +0000
ROA not after: Mon 14 Apr 2025 08:05:01 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
154.201.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95092 (0x17374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 08:05:01 2025 GMT
Not After : Apr 14 08:05:01 2025 GMT
Subject: CN=67cfeeb0-8614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:c1:43:52:01:5d:4f:d6:4c:f4:9d:68:fd:
ff:84:76:02:fa:76:07:a0:fc:58:79:e1:15:00:ea:
7c:d7:ab:f2:92:88:46:fc:51:b9:43:91:6e:e8:08:
59:86:c7:9f:e3:be:d9:e9:40:d9:d6:b8:98:ea:84:
a8:5d:a7:bc:25:31:35:af:72:96:dd:6e:38:6e:29:
11:09:06:22:ff:20:88:70:56:47:77:94:be:5f:72:
04:3f:dc:00:7b:68:2f:5f:4c:fd:5f:25:35:af:05:
94:65:72:5a:94:07:72:21:65:e0:9c:c8:8c:0f:db:
f3:1f:b2:16:31:71:a8:b0:75:7e:88:9f:2a:fb:38:
03:29:fc:cf:b6:c8:db:e5:68:06:c6:9b:b7:2f:f0:
52:6d:96:85:99:c7:ce:83:28:45:36:bb:cd:7c:57:
78:22:b0:f9:f5:1c:a0:ce:b7:a7:68:0b:34:95:e8:
3c:de:49:98:6a:6c:00:45:e3:b3:f5:4d:67:04:1a:
3f:ba:52:3a:f0:75:b0:73:93:08:15:a7:d1:22:d5:
62:67:29:55:0d:c4:41:67:f2:41:2d:ed:92:79:eb:
ea:aa:b4:21:6f:94:9e:63:5b:12:d3:6e:31:35:3e:
c5:ca:3a:37:a9:54:2a:6e:3c:a4:98:39:fa:76:d9:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:A5:72:45:AB:67:7B:30:EB:2A:7E:72:D3:85:85:D1:3D:C5:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A2B8184FE4F11EF85C70E96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0-154.201.55.255
Signature Algorithm: sha256WithRSAEncryption
1c:04:9e:9d:38:1d:36:b1:17:11:42:50:9a:9f:17:50:5c:6b:
7a:ad:4a:f0:4f:94:62:51:0c:ef:b2:0a:f8:bf:42:89:98:01:
e5:90:03:aa:34:ad:db:d4:c8:d6:98:1c:85:da:c9:e9:8d:7e:
37:d4:ae:e0:4c:24:79:d3:c7:dd:b9:1d:63:0e:ef:52:76:db:
63:3b:c7:c3:66:03:4e:9d:77:e0:d5:c3:7b:c9:11:b6:c5:22:
3c:ea:d0:ca:05:21:72:e2:e7:e1:de:5e:46:23:46:e6:aa:cb:
dc:dd:fb:84:e1:1d:bf:69:d7:ae:b0:ca:b4:44:e6:ac:09:2c:
31:6a:23:c2:11:93:a0:bd:01:c8:a4:7f:3c:dd:7f:68:e7:cd:
e4:39:11:c3:56:e5:09:90:a7:0a:2a:85:f6:6e:e9:48:7c:85:
c7:f3:d2:1e:35:9b:92:a4:ad:a6:de:57:14:a7:ba:8f:c8:0a:
ea:a0:cb:31:4e:2c:7c:aa:9e:81:dd:8e:f7:9a:94:74:ee:32:
87:24:ac:35:cb:cd:b9:08:58:e9:69:31:e5:6a:92:85:e7:86:
a2:19:af:ef:6a:7c:21:98:a5:2d:00:ad:c4:ac:86:4d:22:d9:
b9:ac:23:4e:a7:42:2b:17:ab:bb:9f:83:46:59:91:83:8b:91:
f1:29:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:31 2025 by rpki-client