Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E010E38C93711EF9487369A762E951A.roa
File: 9E010E38C93711EF9487369A762E951A.roa (raw, json)
Hash identifier: OFKAqsHZR9lxW6NET6e1KNjFZANN9NQ1+ZXCfYwKfy8=
Subject key identifier: 81:91:F1:45:73:62:29:23:6C:B0:58:D6:E0:43:6D:62:AB:33:57:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E010E38C93711EF9487369A762E951A.roa
Signing time: Thu 02 Jan 2025 18:30:18 +0000
ROA not before: Thu 02 Jan 2025 18:30:15 +0000
ROA not after: Mon 13 Dec 2027 18:30:15 +0000
asID: 17561
IP address blocks: 154.222.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78815 (0x133df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:30:15 2025 GMT
Not After : Dec 13 18:30:15 2027 GMT
Subject: CN=6776db3a-84c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:95:9b:b9:d8:8f:b4:16:73:11:36:d3:5c:
3a:99:73:2d:88:6c:88:f7:92:70:ec:4e:0f:b6:7e:
c0:1c:81:36:8b:2d:cd:95:9c:f5:e0:e8:76:4a:93:
ca:2f:46:d0:2a:8e:7c:e8:36:07:2e:37:80:b6:15:
8d:cd:8d:2f:36:e5:93:10:29:f2:1c:68:64:ed:c8:
f9:f3:58:ca:36:8b:94:cb:07:db:7c:c9:ac:b2:b7:
63:38:78:ef:59:eb:80:00:34:f6:df:b8:e4:0c:b5:
a3:ee:88:a1:0d:93:d0:ae:55:60:b4:5e:d6:69:00:
b7:3a:29:31:7b:21:7d:ba:15:50:35:25:81:a5:d4:
a6:6a:47:d9:9c:e6:81:2d:fa:43:a3:15:61:61:80:
d5:15:38:5f:fe:fa:a3:77:6f:1f:6f:83:c5:6f:65:
79:eb:31:96:f0:96:73:6d:9e:ec:e4:93:ba:e2:d7:
3a:8a:09:8b:47:72:03:b6:e0:d6:43:37:49:93:a1:
b7:f9:11:e2:a4:93:f3:89:20:c8:75:af:67:1f:18:
7e:d3:75:3d:26:e1:31:26:55:c4:2d:09:63:e5:39:
20:6e:92:4d:9f:b2:70:f4:b8:85:6b:19:3d:be:a4:
a3:3f:ca:fc:90:96:80:4e:dc:32:a7:f8:bb:ba:a4:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:F1:45:73:62:29:23:6C:B0:58:D6:E0:43:6D:62:AB:33:57:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E010E38C93711EF9487369A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:7d:82:62:07:41:ae:21:14:f5:d8:c5:34:90:65:47:9c:
98:89:00:2b:8c:fd:4d:5a:39:82:d8:06:6b:5f:3e:15:6b:cc:
9e:71:3f:ce:07:23:93:21:da:8d:56:30:9b:ce:9b:bd:e3:9f:
f9:8c:2e:d2:28:bb:82:f1:fe:76:03:db:0a:a7:36:5e:cd:1e:
58:0d:d4:cc:48:57:8b:50:7d:87:17:75:dc:f6:61:45:dd:5b:
f3:18:89:b9:13:f2:65:61:72:88:75:b2:fa:d9:5d:78:01:57:
fc:40:ab:3b:76:bb:88:d1:ec:97:7b:e4:45:4a:9b:cb:ee:0f:
6e:a2:47:6e:df:75:72:bc:85:54:d3:40:73:13:21:cb:1e:1b:
7b:e9:ba:c4:a3:99:a5:1a:a7:e0:d4:86:a3:40:96:91:1b:24:
32:59:03:a3:3e:74:8f:46:73:74:e0:a1:7e:35:67:86:ca:a2:
33:11:d4:12:7f:ec:96:b6:ae:84:4d:3f:d6:e0:b8:c0:13:03:
58:67:51:4a:66:61:6a:38:b9:f2:64:c0:fe:82:e5:27:14:8b:
28:68:ee:c3:02:78:81:e5:c7:5b:b7:69:e5:b6:fc:a2:cf:81:
2e:09:db:36:d7:3e:a8:e0:f6:2a:03:dd:1b:c2:52:c7:30:09:
1d:d5:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client