Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9850218C91011EFBBF898A5762E951A.roa
File: A9850218C91011EFBBF898A5762E951A.roa (raw, json)
Hash identifier: n2uWYDtzAfAJQOGQ7U0qYB23zGZWuFxzQ6RnxgO15M4=
Subject key identifier: 3E:B5:C4:37:2F:3A:60:4D:FC:C0:D4:19:7C:DD:D7:D1:51:7D:00:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9850218C91011EFBBF898A5762E951A.roa
Signing time: Thu 02 Jan 2025 13:51:27 +0000
ROA not before: Thu 02 Jan 2025 13:51:24 +0000
ROA not after: Mon 13 Dec 2027 13:51:24 +0000
asID: 17561
IP address blocks: 154.221.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78501 (0x132a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:51:24 2025 GMT
Not After : Dec 13 13:51:24 2027 GMT
Subject: CN=677699df-e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:ec:ae:65:81:bb:a5:3e:8a:e6:4e:cd:02:
5f:da:a7:5f:9c:6c:58:bc:3f:8b:78:bc:fa:93:4b:
d3:9d:09:6c:55:9d:29:1a:b5:61:23:0f:f0:44:61:
85:42:da:50:7f:e9:e5:d2:22:60:25:f3:01:4c:2f:
28:79:46:42:df:46:5a:2c:a1:b1:3c:98:8f:fd:30:
35:85:77:f4:ba:58:48:e8:e6:35:db:74:31:fc:c6:
23:52:ed:6c:f9:be:6b:56:68:c1:4e:38:2b:85:dc:
6b:88:e7:5c:29:9e:8c:d9:99:09:da:c0:97:33:34:
60:62:ef:86:d5:e5:45:17:8e:58:96:2e:20:d4:4e:
a1:68:99:32:37:89:ed:43:65:75:2a:59:4e:d7:eb:
b5:2a:ad:c3:66:d2:91:9e:5f:3c:3b:43:f4:ba:87:
b4:b5:52:f8:69:f1:df:d7:fa:b3:67:a5:b6:b7:20:
5a:2d:fa:8a:92:20:f1:7a:3d:75:b0:cd:a5:17:7c:
47:6a:95:41:77:21:a5:5f:90:da:08:c2:2c:21:bc:
cd:c6:bc:5c:29:2b:f3:4f:33:f2:9e:ca:81:fd:33:
90:10:5f:21:db:1f:2a:39:d0:62:eb:b3:03:21:ab:
7c:51:fa:20:52:fc:59:a4:6a:25:4f:61:9c:2b:8a:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:C4:37:2F:3A:60:4D:FC:C0:D4:19:7C:DD:D7:D1:51:7D:00:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9850218C91011EFBBF898A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.223.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4a:40:63:af:16:ff:51:24:6b:2a:9b:3a:da:3e:ce:1e:e5:
dc:2b:6c:2e:2b:a5:b0:b0:c9:c5:92:3a:63:10:64:26:0d:0c:
d1:50:1e:c6:15:73:00:a9:53:20:df:51:09:78:d1:08:fe:a7:
be:d8:7e:fa:57:ff:28:0d:d5:a8:21:1d:23:79:86:c1:c3:1f:
58:c2:74:65:63:11:97:56:73:eb:f8:db:85:02:1e:5a:86:82:
db:0a:c4:4a:e1:59:d3:d3:15:b2:8f:09:57:ab:2e:f0:91:eb:
df:fd:be:3a:17:0e:65:69:46:c8:fa:cd:41:20:8a:2c:bc:8e:
c4:93:c7:3a:f4:a5:0b:bf:d1:b4:d9:c8:8c:6c:b0:a3:cc:f2:
e6:ac:95:d1:0f:71:d1:58:4b:86:e7:b7:2a:a8:b4:e8:ad:77:
39:c9:fe:aa:07:9c:56:81:0c:d0:e7:fe:ed:96:24:1a:67:27:
55:37:33:59:f3:a1:5f:33:26:c6:04:01:97:cb:c4:57:bb:c3:
1c:f8:48:aa:c7:a6:67:0c:97:75:a7:9b:0b:07:b5:d5:83:d0:
1a:5e:92:c5:13:8f:3d:70:a2:9d:f5:ab:75:9d:f1:a8:05:b6:
88:37:c5:e5:06:ac:26:3e:64:ae:e5:a2:e0:4a:76:c4:ee:89:
eb:86:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client