Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19B9F68F46F11EFBD460292762E951A.roa
File: B19B9F68F46F11EFBD460292762E951A.roa (raw, json)
Hash identifier: qKRkM2uMDH4xOCVp2Ezd0SI0kdy5sknxafXTuvDGO38=
Subject key identifier: 6A:E0:D3:2E:C4:D9:02:3E:8C:53:7A:61:34:2D:7E:5F:A0:CF:53:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01655E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19B9F68F46F11EFBD460292762E951A.roa
Signing time: Wed 26 Feb 2025 18:30:03 +0000
ROA not before: Wed 26 Feb 2025 18:29:59 +0000
ROA not after: Sat 19 Feb 2028 18:29:59 +0000
asID: 17561
IP address blocks: 154.201.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91486 (0x1655e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:29:59 2025 GMT
Not After : Feb 19 18:29:59 2028 GMT
Subject: CN=67bf5dab-7325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:ca:4d:31:06:be:54:3b:ac:11:16:10:d0:
87:7e:43:bb:23:d3:37:9a:49:ba:90:de:40:ae:a0:
4e:4d:1e:73:f1:38:1f:ff:e9:98:93:e2:53:3b:6f:
c4:ac:23:3b:b4:45:ec:e9:a6:f9:d1:cc:7c:3f:de:
ce:9f:6c:57:db:e8:da:d1:f3:a6:28:b0:65:bd:bd:
fc:5b:7e:30:f3:3a:0f:ee:e9:90:41:0e:40:3b:7c:
c8:f8:db:5f:22:04:66:a1:df:de:a4:ce:d3:7e:94:
a2:16:7a:47:ae:e2:40:63:d4:f6:2c:00:fc:36:b6:
d8:0d:7f:c2:db:a3:0e:7d:c4:7c:1b:30:91:8f:87:
d0:86:d0:f5:fe:be:d7:71:b5:33:54:9b:4b:ba:f1:
e4:4b:98:fe:87:1c:82:6d:29:c5:32:27:eb:4d:1e:
da:8a:ec:1e:07:92:29:b7:22:ad:36:a5:fa:80:b4:
3d:d9:98:3e:ad:ba:2c:10:ef:a0:96:5f:7e:ab:4f:
f0:3c:59:7e:b2:c2:27:dd:0f:a8:d5:f6:16:c0:91:
3c:43:05:43:f1:68:a1:13:74:07:45:db:54:0b:16:
8b:26:b7:83:25:00:15:04:15:1a:55:18:11:7d:8a:
74:00:34:33:b8:b3:98:08:cb:47:e4:a0:2d:f5:47:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:D3:2E:C4:D9:02:3E:8C:53:7A:61:34:2D:7E:5F:A0:CF:53:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B19B9F68F46F11EFBD460292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:ea:7d:d0:81:89:2d:05:e3:95:9c:b6:a2:a0:dd:f8:b0:
75:98:7d:49:fc:25:2e:36:54:fd:0a:1d:f4:cc:4e:49:45:80:
b8:44:fa:63:85:32:25:9a:d4:45:46:61:70:b8:aa:46:71:60:
17:5b:cd:69:8f:40:3a:b2:00:f7:c3:ec:99:4b:82:28:dc:81:
44:d1:b7:04:7a:87:67:c7:cb:b6:1c:44:a7:17:cb:39:07:98:
70:a2:7f:b9:eb:cc:da:b8:73:f2:c4:6f:bc:33:a3:ff:90:6e:
f1:c7:c4:c3:89:12:17:e0:b4:88:56:f3:11:84:8c:66:8d:45:
7b:7b:e3:f9:4c:4d:d4:76:d6:35:73:46:dd:77:03:70:bb:1c:
46:d7:05:f0:1a:33:d8:d7:20:0f:71:fe:19:2e:76:7d:25:22:
09:37:ea:09:d9:41:96:b9:7c:ee:6e:38:7d:58:e1:c5:35:3f:
f9:ae:08:f1:dc:77:2c:0d:f6:b5:61:bc:72:d8:f2:5b:9c:c5:
f9:eb:9c:8b:cd:54:96:21:f8:20:9a:34:46:2e:0e:18:f3:cf:
ca:0b:8b:4b:e6:99:d9:ef:b6:3b:80:fe:97:28:c1:38:22:3a:
52:cc:a7:1c:12:67:35:44:25:03:0b:f1:9d:a9:e7:e5:b8:77:
6d:5c:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:51 2025 by rpki-client