Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA142170F45111EF9F8E1942762E951A.roa
File: AA142170F45111EF9F8E1942762E951A.roa (raw, json)
Hash identifier: lPlWGlFH3h/byDYKtOlCb/uLKtPP79Ef6zowliSbO78=
Subject key identifier: 2F:39:6A:58:00:F9:7E:C8:6F:A1:7D:11:9B:D1:3A:F5:16:D4:8F:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01648B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA142170F45111EF9F8E1942762E951A.roa
Signing time: Wed 26 Feb 2025 14:55:05 +0000
ROA not before: Wed 26 Feb 2025 14:55:02 +0000
ROA not after: Sat 19 Feb 2028 14:55:02 +0000
asID: 17561
IP address blocks: 154.82.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91275 (0x1648b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:55:02 2025 GMT
Not After : Feb 19 14:55:02 2028 GMT
Subject: CN=67bf2b49-7991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:c3:1e:08:18:6d:b1:65:f3:39:39:07:72:
5d:18:24:b8:e6:99:26:d3:5b:09:c8:b8:3f:0a:00:
c9:44:d3:55:e0:84:01:56:05:79:3c:22:f5:11:9d:
20:3c:7f:0f:20:67:b1:76:9f:e1:eb:28:d8:b5:cd:
7e:e2:9c:4e:b5:e9:7d:1d:1a:75:6c:fe:ac:66:fc:
ee:32:54:30:ac:d1:7f:90:e1:d4:5f:de:6c:24:69:
25:d0:ad:32:73:cb:1c:e2:3a:48:d4:ce:56:69:4c:
1f:ba:f6:1e:c1:01:a3:df:03:09:b9:ff:a7:78:8e:
82:f9:96:ae:3d:18:5c:f7:0a:08:0d:95:1c:9c:d8:
61:f7:82:1e:b2:2c:e7:e2:10:5b:7f:ae:93:b0:bb:
47:a6:6c:4b:d5:2c:55:77:4e:34:36:41:67:aa:88:
47:59:5a:45:41:7d:00:41:5c:26:59:ad:56:60:d0:
97:1a:51:3e:1f:18:93:96:9c:30:cc:53:aa:5a:79:
3c:e1:ab:38:38:1d:b3:de:af:f5:70:ab:47:c3:0d:
92:48:3f:3a:6c:78:b4:d9:0e:64:05:e8:99:24:54:
aa:c2:ce:14:10:7c:a1:06:86:eb:00:84:32:47:4c:
fa:5a:fc:39:e1:48:58:50:e6:b9:6b:98:1e:83:cb:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:6A:58:00:F9:7E:C8:6F:A1:7D:11:9B:D1:3A:F5:16:D4:8F:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA142170F45111EF9F8E1942762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9a:41:15:34:d7:62:82:9d:68:8c:48:99:fc:64:dd:ae:93:
41:b2:ce:e2:2a:ec:df:3c:a3:7c:41:ef:92:77:c7:a1:2d:df:
e7:94:3d:63:e7:30:5c:1c:cd:10:1d:85:8e:1b:8c:6d:6c:2d:
84:93:71:e3:5e:cd:c5:c7:10:01:b0:0c:00:0d:04:5f:e0:5b:
8d:a4:8b:c1:22:22:65:fa:e7:81:e3:59:7b:85:99:9f:0d:57:
76:7b:4f:1c:98:60:88:eb:d9:8e:9d:9f:4b:46:d7:77:a5:9e:
83:64:fe:97:15:56:6a:f5:14:ae:10:9b:5f:3b:af:26:7d:ae:
86:ce:fe:3c:7f:66:e2:ad:2d:50:4a:08:9c:75:b5:bc:94:d6:
9d:24:51:63:44:a8:39:61:5b:4a:b7:81:3a:6e:1e:95:ef:ed:
4c:c8:71:df:12:ea:41:3e:54:2f:44:b1:64:6f:dc:35:12:ed:
29:60:f1:1f:ef:73:3d:2b:f0:b6:80:97:4d:1e:a0:59:5a:67:
d9:f9:f2:3b:e1:db:a0:a4:2f:80:93:c3:ea:50:e1:9b:74:98:
73:3b:ff:b9:25:19:e3:36:39:be:85:eb:65:d4:5d:9a:96:16:
f3:dd:a5:72:56:fb:90:9f:9d:0e:43:28:91:0d:94:1e:c1:4b:
d2:8a:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:10 2025 by rpki-client