Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0156BB6C92611EF8D0E61AF762E951A.roa
File: B0156BB6C92611EF8D0E61AF762E951A.roa (raw, json)
Hash identifier: hQQSu+JH3RI8YNVoT1i8f63J/LakegEWYCHSHJR5/V4=
Subject key identifier: 6B:19:84:6E:F3:72:01:85:91:5C:BE:AD:54:4C:6A:F0:70:D2:78:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013359
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0156BB6C92611EF8D0E61AF762E951A.roa
Signing time: Thu 02 Jan 2025 16:29:07 +0000
ROA not before: Thu 02 Jan 2025 16:29:04 +0000
ROA not after: Sat 13 Dec 2025 16:29:04 +0000
asID: 984
IP address blocks: 154.222.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78681 (0x13359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:29:04 2025 GMT
Not After : Dec 13 16:29:04 2025 GMT
Subject: CN=6776bed3-25ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:d6:19:c1:a5:d7:b2:b9:18:d6:d3:00:0a:
5a:f2:a3:e9:5f:f4:da:6e:f6:b2:f0:bc:16:04:28:
b7:e6:e4:cd:3b:c2:70:b4:f0:03:af:bb:db:37:29:
c5:0d:c7:36:42:f7:61:4a:a7:11:70:40:49:54:a4:
f0:1f:45:3e:70:b4:61:0f:0b:d0:18:76:b0:a3:94:
13:9d:ca:ad:eb:41:70:eb:de:f9:0b:f8:0c:2a:f7:
15:73:cc:76:8e:84:19:18:33:81:19:9a:35:05:a9:
c5:49:5b:70:18:57:5c:ff:63:c6:64:bd:f1:31:97:
1a:9a:7a:c7:64:52:db:93:04:6c:bc:21:08:11:49:
51:8d:09:93:68:c8:10:7b:a2:6a:ee:6d:52:5e:0c:
8a:db:6e:ca:66:ad:08:59:63:be:18:09:13:8f:59:
65:82:bc:5a:cf:13:75:50:e3:f2:3d:ae:32:87:d1:
40:01:b3:0f:ef:3e:0d:47:cc:1c:df:c4:07:31:83:
64:b9:60:02:00:ad:59:e6:b9:01:70:83:12:26:b4:
30:3d:16:76:3d:2d:f0:a4:2b:50:71:04:82:99:57:
7c:72:ef:3b:ce:c8:2b:d1:2c:38:82:37:b2:37:b2:
20:1d:f1:1f:a6:27:df:62:b1:82:1f:ee:81:f7:37:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:84:6E:F3:72:01:85:91:5C:BE:AD:54:4C:6A:F0:70:D2:78:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0156BB6C92611EF8D0E61AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.118.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5b:e8:db:e9:ba:59:9f:0d:32:cb:77:38:7d:83:67:e8:af:
d8:2b:83:ff:ce:7c:c6:f9:b0:28:d9:f5:27:08:1e:c8:f9:4c:
44:9e:69:af:4e:63:85:2e:94:f7:74:5c:1f:9f:8f:31:71:1c:
cd:1a:a4:a2:1b:33:57:28:35:8a:20:bb:50:62:ce:40:ab:5d:
9d:6b:f5:c6:2f:cf:b1:90:e0:2b:04:5c:3c:5e:5e:1f:41:8e:
c4:f9:01:94:ef:08:18:88:0b:ca:2e:09:27:25:b9:74:23:58:
c1:9e:fc:e7:f0:e0:92:f0:39:2d:bd:ed:1f:29:19:51:b6:32:
1f:5e:11:a9:be:b2:c5:04:af:f9:f7:f6:28:d6:ab:d8:e1:62:
3c:07:dd:79:70:82:6f:7d:3d:ee:b5:14:3e:23:98:7c:58:03:
14:a9:b6:13:c8:ee:66:20:bd:28:66:63:cb:d7:66:9a:76:e6:
da:5f:c3:5c:a6:01:7a:86:02:f7:03:3b:79:ce:93:ee:6f:9e:
69:85:a4:cc:18:a7:d1:b2:f8:b0:47:d3:11:4d:96:26:79:dc:
dc:08:9a:93:23:ee:9f:6b:b6:d9:9f:87:75:2d:64:76:b2:74:
b8:09:22:3f:11:19:4c:be:99:13:f1:a6:ef:5b:09:57:42:f7:
26:8a:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:56:55 2025 by rpki-client