Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C83242F44511EFBF30906D762E951A.roa
File: 97C83242F44511EFBF30906D762E951A.roa (raw, json)
Hash identifier: PccuuwQx8C/jbSp69wtiCuQgpiX+COlsIHgydJC/xok=
Subject key identifier: D0:A5:8D:C4:CC:85:DF:B6:77:54:30:63:1C:5F:07:D4:78:18:58:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C83242F44511EFBF30906D762E951A.roa
Signing time: Wed 26 Feb 2025 13:28:41 +0000
ROA not before: Wed 26 Feb 2025 13:28:37 +0000
ROA not after: Sat 19 Feb 2028 13:28:37 +0000
asID: 17561
IP address blocks: 154.82.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91077 (0x163c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:28:37 2025 GMT
Not After : Feb 19 13:28:37 2028 GMT
Subject: CN=67bf1709-29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:ee:71:cd:68:e1:31:88:67:14:4e:d1:e4:
e2:75:dc:af:92:a4:79:54:5c:3a:47:c4:a7:9a:64:
d3:4a:6b:42:d5:55:79:0b:6a:0f:33:99:42:b9:45:
e5:4d:19:a0:99:e5:74:33:b1:7c:3c:34:c2:be:89:
4c:17:bf:5a:a6:25:93:6e:ca:7d:68:cd:33:03:53:
e7:51:26:6c:08:33:34:5a:83:24:8f:c8:37:6c:da:
e3:8a:19:27:9f:53:fd:d9:e7:b1:53:e5:84:f7:4d:
2c:02:7c:c4:72:bf:23:9e:4d:f6:c5:a9:bb:68:0b:
73:b6:a1:d2:f3:3d:33:96:ad:1b:91:f0:cc:d7:9b:
89:06:17:55:d8:bb:68:67:ee:2c:96:09:ea:ab:66:
fc:86:b6:4f:d8:b6:b6:a8:f1:a8:f3:ea:62:80:6d:
a7:bd:23:bb:13:a5:ad:80:6b:51:17:0d:7d:d8:be:
bf:14:2b:22:b9:6a:68:ae:2a:e5:38:bd:e1:65:0e:
12:5a:2d:70:22:4f:ad:10:61:64:95:b8:a5:fe:dd:
cc:bc:5a:57:39:ed:04:0d:a3:45:9a:df:00:d7:91:
15:a2:79:45:5b:6e:c9:a0:81:d2:8d:93:dd:fe:a6:
77:7e:5b:60:d9:ff:b6:b3:cc:01:b0:21:05:d9:47:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:8D:C4:CC:85:DF:B6:77:54:30:63:1C:5F:07:D4:78:18:58:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C83242F44511EFBF30906D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.179.0/24
Signature Algorithm: sha256WithRSAEncryption
73:17:a4:0b:fd:a4:79:06:03:b3:0f:5f:57:93:3c:e4:02:ae:
da:56:8d:15:09:a8:07:51:d9:43:39:8d:f0:60:3c:08:90:f7:
95:9c:03:93:50:3f:17:07:3c:4e:1c:ea:65:4f:64:8a:90:ff:
10:1d:cb:4b:e0:1e:d6:40:cc:50:c8:20:41:a5:26:27:63:af:
00:b2:ec:1a:99:2c:7b:b7:21:62:35:60:02:40:3b:40:55:c6:
b7:83:5d:d7:70:d7:a3:15:40:9d:fd:d1:4e:92:14:f4:b9:c6:
d4:8a:b6:21:2a:93:b7:88:18:a0:e0:5a:56:a1:17:59:b5:ab:
e8:32:c4:71:6d:9e:07:c0:31:c6:c7:a2:63:7e:af:0f:d8:11:
b3:20:08:57:70:66:b6:66:58:15:6b:6b:a5:32:59:2b:b5:14:
21:30:1e:17:6e:29:dc:e8:c8:7c:98:50:f6:d5:b5:27:27:98:
81:e2:5c:29:1d:c1:f2:56:31:dd:f9:0f:23:7a:dd:56:a5:28:
bf:08:30:3c:ae:f1:0e:11:2d:82:47:21:02:8e:8d:bd:cc:65:
0a:c1:9b:1f:09:f2:e2:d5:bc:5d:7f:42:f4:50:53:5f:f2:65:
d3:c6:91:cd:98:86:43:27:39:17:8e:52:bf:e9:e9:aa:d9:fc:
de:cf:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:50 2025 by rpki-client