Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988CB9B20D3311F0A142AB77762E951A.roa
File: 988CB9B20D3311F0A142AB77762E951A.roa (raw, json)
Hash identifier: BlQrc3IKfryFG2Sb8VMcekgx9FmmJ3fLvTLpP4Gq/D8=
Subject key identifier: 10:54:60:9F:8E:C1:D5:25:FC:52:93:52:71:F9:BA:97:41:00:08:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988CB9B20D3311F0A142AB77762E951A.roa
Signing time: Sun 30 Mar 2025 06:52:50 +0000
ROA not before: Sun 30 Mar 2025 06:52:46 +0000
ROA not after: Wed 07 May 2025 06:52:46 +0000
asID: 141718
IP address blocks: 154.193.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96007 (0x17707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 30 06:52:46 2025 GMT
Not After : May 7 06:52:46 2025 GMT
Subject: CN=67e8ea42-4823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:ee:b7:6a:f0:13:39:d6:51:30:29:4e:10:
c3:f1:bc:fd:9b:71:db:10:db:6f:f8:81:cd:a8:3c:
20:a5:95:72:4f:ab:3d:e5:b0:91:ce:91:82:aa:70:
f2:65:bd:ed:97:7e:0b:15:c8:7e:d9:23:29:12:9a:
85:00:a2:e0:8d:0f:b0:8c:c3:61:e9:f4:fd:40:6f:
2c:de:f3:dd:4e:7f:fd:82:52:63:05:73:fd:b2:49:
35:c2:86:9c:ed:6c:b2:27:95:03:02:62:2d:f8:0a:
f4:90:ee:89:e7:71:fa:ad:29:c2:60:50:64:da:bf:
1d:48:16:e2:4d:b2:90:d7:0a:0b:a4:27:34:89:34:
f5:8a:c5:6e:8f:42:43:68:93:c4:7e:1f:4c:aa:2d:
7f:89:88:cf:20:99:9b:08:ae:11:2c:76:1c:6e:20:
9f:18:8f:3c:5b:a2:23:77:2f:6a:c6:7c:b3:69:07:
1d:08:35:6f:c9:13:b0:75:0b:b7:30:f6:06:69:90:
8b:f2:b9:d5:68:df:57:21:c3:fa:b9:a9:8e:5d:f5:
ba:e0:11:fb:7b:b6:bb:41:c1:e5:76:43:0d:57:20:
96:f1:87:47:eb:a7:ee:6f:54:42:34:58:5c:59:ad:
3b:e3:8f:0b:70:db:84:74:23:8d:d9:77:22:9c:49:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:60:9F:8E:C1:D5:25:FC:52:93:52:71:F9:BA:97:41:00:08:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988CB9B20D3311F0A142AB77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2b:f3:c3:fc:6b:8c:20:7b:57:c2:a6:9d:7a:00:35:18:5a:
48:dd:87:22:64:41:2d:1e:fa:87:58:51:7e:78:76:15:a1:8e:
b2:53:3a:64:d0:c8:f2:7c:2a:97:e1:60:02:a5:82:18:c9:04:
f4:8a:12:e4:43:78:e3:6a:39:38:77:de:a3:16:31:92:92:8d:
70:fe:83:55:a2:7d:d7:2d:4c:ed:fb:0b:24:9c:05:b1:49:74:
a0:41:48:97:ff:53:e8:48:72:19:f0:e8:23:86:f2:7e:33:bd:
ec:f1:db:9d:92:a9:71:19:17:fe:dc:6c:ed:ae:10:9a:65:f6:
37:5c:d6:ac:40:1a:a6:e2:6d:5d:35:70:ba:2a:a9:79:85:90:
b9:11:d7:c1:27:4c:7f:54:c7:48:5f:05:a7:8b:f6:e9:a5:c0:
52:2a:c5:1a:b2:5a:79:b4:db:4d:9b:ed:0d:72:ba:9c:71:3b:
ee:1e:6c:2c:81:d4:06:1e:b4:e1:49:fd:91:66:1f:09:95:64:
7e:e0:f7:bc:26:23:b6:99:09:dd:b5:d0:cc:2f:08:1e:fc:0e:
83:fb:33:f8:23:33:37:d2:8f:31:80:19:89:22:32:5a:39:ac:
7c:4f:f6:01:d4:b6:2e:51:2b:31:e4:d2:c9:a7:15:47:ee:c4:
f9:4d:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:09 2025 by rpki-client