Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9509D340F44911EF9B68188B762E951A.roa
File: 9509D340F44911EF9B68188B762E951A.roa (raw, json)
Hash identifier: QFJTtwY904GigMbdI0QBfOrL6niyKFOtLRt8iHHOX6k=
Subject key identifier: 0B:5F:33:5E:94:AD:E0:7B:39:C6:68:01:9A:E7:4E:5C:E1:CE:8C:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016405
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9509D340F44911EF9B68188B762E951A.roa
Signing time: Wed 26 Feb 2025 13:57:14 +0000
ROA not before: Wed 26 Feb 2025 13:57:11 +0000
ROA not after: Sat 19 Feb 2028 13:57:11 +0000
asID: 17561
IP address blocks: 154.82.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91141 (0x16405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:57:11 2025 GMT
Not After : Feb 19 13:57:11 2028 GMT
Subject: CN=67bf1dba-e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:06:f1:cf:64:94:12:36:b7:5c:76:09:ab:
8e:b2:f2:1a:ee:bc:55:17:93:dc:33:ee:0a:0f:ea:
66:99:e5:e4:2f:db:ed:73:39:f3:f5:7b:61:ea:7e:
d6:eb:e5:e2:b0:66:72:c1:1c:b6:62:3c:50:a6:6e:
08:84:b6:2b:5e:1a:0e:7b:d7:cb:3f:e1:a6:19:89:
88:5d:87:41:57:c7:ae:78:35:2d:bd:86:88:c5:6c:
02:08:66:10:cf:21:5d:a5:25:5b:63:75:98:14:33:
b3:74:e7:2b:ec:b2:4b:55:02:45:a0:a5:8b:ee:12:
8e:50:1b:85:88:d9:c6:4b:51:28:00:71:33:17:7b:
ae:6f:c9:48:cb:1d:54:f9:a5:fe:b0:ed:35:53:c5:
c6:b1:1b:6a:7a:39:55:df:7e:4f:6b:38:f5:5c:a5:
d5:82:90:fb:0e:f9:3a:93:67:e3:15:b2:6d:00:c4:
f7:ab:24:78:8d:30:f4:14:e4:bd:4f:c9:04:33:86:
b5:a1:10:5d:66:ec:23:f6:f1:ce:82:fd:f6:50:dc:
bf:6d:35:05:ab:5d:00:70:f8:02:97:e7:65:73:bc:
e6:b2:15:3d:f1:46:cc:17:a4:c6:b0:26:20:55:8a:
37:de:75:ae:94:c4:b6:eb:22:fd:2f:57:bb:43:22:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5F:33:5E:94:AD:E0:7B:39:C6:68:01:9A:E7:4E:5C:E1:CE:8C:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9509D340F44911EF9B68188B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.190.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5e:9e:ee:25:44:be:71:ba:05:82:10:69:1a:c9:7b:01:ac:
c1:e9:fb:22:84:4a:fa:f9:fb:ab:00:0d:2d:89:11:45:1a:07:
d4:e3:a0:a0:fc:d8:d3:7d:d3:63:08:b1:6d:27:85:d1:46:fd:
40:b5:3a:48:a7:e9:a2:ce:07:3f:6b:f1:84:ff:10:73:77:06:
31:8e:51:a7:6f:93:10:7c:c8:7f:3e:7b:7a:21:a1:1d:da:4f:
d7:5c:3b:c7:23:54:d5:ae:ca:fc:13:79:95:56:a5:8b:54:58:
8d:00:56:52:eb:40:b3:53:b2:69:f9:17:4c:fc:d6:7a:a1:23:
1b:f8:3d:4e:5c:d2:ce:4f:dc:52:67:0f:d9:e0:6c:6e:7e:b5:
7b:d2:d0:f8:2f:05:61:20:e6:fc:e8:a3:af:e3:13:10:46:ab:
ba:fe:96:03:10:fb:1c:a2:d5:95:45:de:34:f0:81:fe:8f:e9:
64:5c:21:68:1c:4d:3f:6f:8c:f6:74:0d:db:67:dd:f6:67:3e:
54:f7:67:63:8e:8a:0c:e9:09:89:37:d5:dd:0f:39:c0:cc:a4:
cf:d7:38:59:12:78:44:79:ad:47:3c:d6:fe:f9:2b:e8:8e:15:
f5:4f:df:fb:73:4c:c2:a1:fc:92:4e:df:1b:e1:09:20:f0:a7:
12:86:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:24:02 2025 by rpki-client