Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCFDC18F47811EF80E49151762E951A.roa
File: 8CCFDC18F47811EF80E49151762E951A.roa (raw, json)
Hash identifier: py02WfTdX1cdky6XKDYKQWeiCzJ1z0idomJ9h+eBumA=
Subject key identifier: 9A:27:1A:01:A9:AE:E9:EB:71:84:64:DF:DC:3C:A2:B0:E7:B4:0A:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCFDC18F47811EF80E49151762E951A.roa
Signing time: Wed 26 Feb 2025 19:33:27 +0000
ROA not before: Wed 26 Feb 2025 19:33:23 +0000
ROA not after: Sat 19 Feb 2028 19:33:23 +0000
asID: 17561
IP address blocks: 154.218.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91563 (0x165ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:33:23 2025 GMT
Not After : Feb 19 19:33:23 2028 GMT
Subject: CN=67bf6c87-3478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:81:6e:89:67:2b:b2:72:ea:08:d9:81:95:
da:24:18:46:8f:89:96:35:cd:ce:95:5b:bb:59:53:
7e:ce:29:54:cc:a4:04:87:84:ce:8d:bd:f9:83:e6:
15:86:f7:74:05:fa:b9:89:69:7e:ae:96:4a:e0:0b:
a2:a6:f6:30:f8:9c:71:0c:6e:4c:3a:b3:56:bd:02:
13:83:4f:88:0e:35:64:73:dd:cc:72:2b:ce:73:e4:
a2:42:5b:90:29:fe:17:fd:e8:38:6d:fe:ad:f3:10:
6a:e7:69:fe:ce:fb:3c:7d:ad:82:1b:2c:4f:30:7a:
d8:31:2c:b5:93:67:54:92:c8:cc:c4:7c:5a:ca:48:
42:61:93:82:ff:4d:b8:48:62:36:67:77:f2:e8:87:
5a:fd:dd:cf:b4:f3:1d:2a:ea:ca:e8:0c:97:f2:ca:
2f:d8:7a:a9:f9:52:e2:43:8f:8f:4e:e2:8f:96:2f:
6d:91:9a:10:d0:eb:03:fe:83:46:c3:7f:da:2a:56:
41:25:2e:b0:da:65:14:6b:71:0c:27:c7:95:42:3b:
74:0d:ee:03:dd:0d:03:81:13:bd:df:f3:ac:ca:1a:
97:75:90:77:17:fd:ed:80:7b:de:6e:af:f7:ca:12:
91:08:b0:86:be:58:eb:74:6a:6a:2f:ac:bf:36:f8:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:1A:01:A9:AE:E9:EB:71:84:64:DF:DC:3C:A2:B0:E7:B4:0A:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCFDC18F47811EF80E49151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c6:9b:db:83:b8:65:a3:09:93:3f:34:7c:93:18:03:60:dc:
ed:70:16:11:7f:18:31:a1:b3:79:b0:5f:74:5a:33:f4:7f:b2:
db:35:ad:a2:bf:d8:e9:4d:e2:68:ab:eb:0d:27:9f:62:c0:4d:
be:bf:e3:88:8f:8c:a5:07:b9:c5:9a:1d:5e:f8:4d:e0:28:06:
c3:99:75:20:ff:a0:11:82:4f:b4:d8:6f:a6:59:5e:f7:ed:d9:
80:a5:3e:c0:50:78:6f:43:93:37:69:7e:e9:16:f9:68:de:d3:
e4:ed:67:8f:08:f8:46:48:d9:63:b7:ff:a2:49:31:8f:44:cf:
a7:80:51:ed:87:53:da:69:b4:f7:d3:cd:12:af:c4:11:42:ad:
cd:a9:eb:2b:bc:b0:97:9d:a0:f6:3d:3c:fa:f3:94:8f:33:4e:
58:b8:f1:08:1f:ad:e2:7a:e0:e7:d4:97:53:e7:2c:a9:b6:14:
87:7e:62:1e:8d:de:d6:ab:2e:e4:47:64:8e:56:8d:37:ee:40:
04:b1:24:25:16:f7:e9:c3:a1:f4:ab:d2:0e:30:5f:47:fd:3f:
36:25:17:d8:20:93:da:c8:04:2c:fe:79:bb:66:04:43:6b:f8:
b8:ff:a9:76:a5:2a:d6:0a:6a:83:ea:d1:2a:c9:62:2e:66:00:
dc:43:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:30 2025 by rpki-client