Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977AD59CE2CF11EF840F55A6762E951A.roa
File: 977AD59CE2CF11EF840F55A6762E951A.roa (raw, json)
Hash identifier: 1bO5yq1qw/8HmHh6i5y0ifRcTmhNNvQXS95NZ/GxgEg=
Subject key identifier: EB:33:1F:CE:BE:E3:3B:03:FA:8C:08:F8:41:1B:07:DB:1A:FF:3F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015096
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977AD59CE2CF11EF840F55A6762E951A.roa
Signing time: Tue 04 Feb 2025 08:11:10 +0000
ROA not before: Tue 04 Feb 2025 08:11:06 +0000
ROA not after: Wed 30 Apr 2025 08:11:06 +0000
asID: 18229
IP address blocks: 154.210.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86166 (0x15096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:11:06 2025 GMT
Not After : Apr 30 08:11:06 2025 GMT
Subject: CN=67a1cb9e-6721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:f8:d2:04:40:d2:57:79:69:39:d4:22:c6:
e7:73:38:c0:09:05:a6:46:6e:94:b2:be:cd:fd:bb:
00:4a:26:41:c8:93:14:b3:a8:a7:5b:93:1b:47:71:
cf:18:d1:a5:1b:a8:91:46:c3:4a:d1:1d:59:f6:8d:
93:ad:66:03:9d:f5:fe:05:db:70:f3:1a:10:5a:68:
95:58:ad:ed:7e:69:da:a7:3a:2e:9e:87:3e:26:14:
87:9d:eb:75:0c:04:09:8e:05:c9:98:92:16:32:39:
9b:4e:6b:fe:92:77:88:0b:ad:4c:cb:d4:7a:9e:fd:
43:aa:82:50:8d:f9:00:c8:58:18:a0:26:f7:ab:9f:
87:a3:92:52:32:e7:83:77:5d:56:06:cb:a1:a3:56:
73:69:7e:5f:c3:21:14:d5:94:67:3a:e7:b4:33:0b:
6b:22:5a:c4:8f:91:01:b8:a6:76:2f:0f:0b:58:bf:
8a:a6:b7:c7:f4:a6:c9:09:21:14:a8:9e:60:e5:79:
20:4f:f8:fb:1b:79:ed:c4:37:42:77:a6:eb:b6:d2:
07:e7:c9:2a:6a:f5:e7:49:25:46:36:05:1e:9a:84:
a9:3c:62:48:f9:88:02:48:30:2d:e0:40:f2:34:55:
8c:a3:bc:07:cc:49:ad:b0:ef:26:33:95:01:e8:a4:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:1F:CE:BE:E3:3B:03:FA:8C:08:F8:41:1B:07:DB:1A:FF:3F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977AD59CE2CF11EF840F55A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:33:c7:6f:a7:bd:ac:54:3a:96:fd:24:80:d5:7b:1b:31:72:
9e:86:c5:24:de:6f:d2:76:cf:c0:66:58:d0:a0:e9:d1:a7:e3:
07:c1:ce:64:60:74:ca:9e:e4:f2:c9:a8:a7:2e:3d:c8:2f:10:
47:c9:14:ce:8e:18:1f:18:2b:62:3b:0d:6f:bb:80:f6:72:2d:
f2:4f:b8:3b:37:43:b2:32:9f:ff:b3:78:ad:7b:49:21:26:85:
af:c5:75:03:fc:fa:71:30:1f:46:eb:05:1e:49:4a:c2:aa:84:
8c:d4:02:cb:45:75:17:56:60:3f:54:6c:6c:11:31:2c:d4:b5:
59:15:fd:b4:25:a6:b5:2e:2b:6b:1c:61:24:03:c9:85:27:31:
b7:93:7f:18:61:12:c3:9a:13:40:76:71:cb:74:6d:3b:46:6e:
8f:96:10:1a:ac:ff:36:be:7c:95:5d:96:df:d7:26:05:48:69:
59:47:6a:89:b9:4f:8d:7e:b4:3d:b2:ac:78:80:db:2f:c9:a1:
80:f0:1c:7b:f9:82:f0:f7:0e:c6:4e:20:df:9d:19:b5:a9:f5:
67:7e:a8:dc:fa:db:52:fe:da:82:69:23:2a:83:02:cb:54:1d:
ac:43:b0:e7:c7:10:d2:ee:7c:2a:7c:85:89:95:c3:0b:10:af:
32:ed:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:25 2025 by rpki-client