Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E08284F45A11EFB7011F81762E951A.roa
File: 91E08284F45A11EFB7011F81762E951A.roa (raw, json)
Hash identifier: hLoBrqJDaw6rj97n6TepZSTsxOKMInAWeE7hHGWYh/8=
Subject key identifier: 45:CC:C5:A5:5E:93:4C:6A:A5:17:BB:48:F6:4F:0C:24:D4:0D:46:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016501
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E08284F45A11EFB7011F81762E951A.roa
Signing time: Wed 26 Feb 2025 15:58:50 +0000
ROA not before: Wed 26 Feb 2025 15:58:28 +0000
ROA not after: Sat 19 Feb 2028 15:58:28 +0000
asID: 17561
IP address blocks: 154.82.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91393 (0x16501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:58:28 2025 GMT
Not After : Feb 19 15:58:28 2028 GMT
Subject: CN=67bf3a3a-6e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:b8:66:20:f3:44:d1:5f:d5:ed:9b:1c:39:
7a:e4:40:20:32:d3:89:74:94:0b:61:80:bb:7a:2d:
88:b2:fa:b3:04:26:f6:f0:83:df:37:ee:55:d5:6a:
e7:12:ba:bf:ea:57:f1:b6:f3:45:c5:11:ed:6c:36:
43:ae:a5:ca:25:4b:8e:c3:9a:76:0c:92:e9:80:27:
f8:5d:a4:53:d6:e1:68:aa:74:6f:b8:22:44:8d:07:
18:44:a7:8c:ce:f6:3a:54:e3:2f:db:8f:90:fa:52:
9d:ab:d7:1d:a2:11:29:c7:bc:2a:2c:be:7b:ca:ba:
28:b7:ef:b3:90:a8:94:b5:e5:2c:08:24:6e:04:6a:
c2:3c:b6:e6:eb:12:54:e9:59:21:e6:10:54:9d:79:
6b:4f:d3:74:ef:d8:0b:02:69:56:42:c3:cc:25:39:
b4:2b:b6:5c:9c:ab:9a:8a:27:e3:6f:6c:f4:db:11:
4a:66:3e:0d:c0:55:59:d6:6d:0f:c5:25:86:5b:ed:
5f:6f:af:24:81:d3:1b:c8:c0:d3:e5:6c:5f:64:cc:
b5:ae:67:4a:b3:55:d4:ae:d8:a8:81:ff:a4:03:8a:
b0:c7:5e:20:0e:9a:f7:e6:a2:11:33:90:d9:e4:10:
35:b4:dc:d1:d5:41:97:f3:ca:75:cf:e6:e1:86:a9:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:C5:A5:5E:93:4C:6A:A5:17:BB:48:F6:4F:0C:24:D4:0D:46:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91E08284F45A11EFB7011F81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.245.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fb:6b:29:f3:99:48:3a:f9:1c:58:82:e3:28:e2:dc:ef:c3:
97:f6:c8:a0:92:44:b6:5a:4e:e3:ed:09:1b:13:3e:18:ad:80:
0e:47:d4:1a:2e:b3:20:ec:05:e7:7a:8c:19:36:95:4a:17:93:
8e:0d:19:b9:d2:03:e1:fc:14:8b:92:a3:fb:45:e3:14:e9:14:
19:06:95:7c:60:e5:db:8d:73:a8:56:1e:ec:ac:b6:3c:73:3b:
72:c5:1e:0a:06:ea:ed:6b:41:ae:b1:50:8c:18:3a:09:3e:a1:
94:0d:fe:69:b8:e1:52:44:96:d4:f7:25:7b:21:6d:d1:11:91:
c5:f8:c0:4b:1a:cb:8b:fa:56:3e:87:66:bd:1e:bb:9d:44:6c:
2b:5c:45:2d:5c:d8:6e:9d:30:cd:aa:28:4f:75:8f:bf:9a:5d:
18:10:e8:78:95:5f:14:56:f1:3f:0a:04:b4:17:86:5c:48:57:
4c:e0:2f:99:5c:74:3a:a0:1f:6d:04:f4:57:6e:6d:84:5a:5d:
db:09:ab:55:de:2a:e1:35:95:9c:b9:a0:e7:94:70:2b:86:02:
76:4b:92:fa:ac:84:aa:32:32:91:2c:e5:1c:45:a0:ee:d4:0f:
3e:49:8c:57:4e:99:fb:12:5d:f0:cb:e7:91:c3:77:e6:c5:0a:
0f:20:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:04 2025 by rpki-client