Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A1435CF56111EFB2B1C98E762E951A.roa
File: B2A1435CF56111EFB2B1C98E762E951A.roa (raw, json)
Hash identifier: /C5UOY4C1NkMjAMvZ3i2AMqBpJewitd6rsWLMbb5fac=
Subject key identifier: 6C:B9:73:21:25:13:AE:9F:8F:FA:CA:3C:FD:31:BE:A4:3E:24:E3:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A1435CF56111EFB2B1C98E762E951A.roa
Signing time: Thu 27 Feb 2025 23:22:23 +0000
ROA not before: Thu 27 Feb 2025 23:22:16 +0000
ROA not after: Fri 11 Apr 2025 23:22:16 +0000
asID: 63139
IP address blocks: 154.203.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92576 (0x169a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:22:16 2025 GMT
Not After : Apr 11 23:22:16 2025 GMT
Subject: CN=67c0f3af-bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:9d:af:74:a5:10:0f:17:61:1b:0d:3d:d0:
28:0f:f2:c2:74:04:16:95:8f:86:20:c4:e5:36:da:
4b:45:ce:ef:41:ad:51:34:cb:07:20:1f:8d:d2:24:
7d:7f:c1:3e:b0:69:29:71:dc:ed:9d:04:80:0a:f0:
29:d9:a1:a4:bb:60:d9:16:02:2a:6c:9d:be:ef:cc:
90:24:4b:d5:19:9d:ab:75:c7:ae:ce:ca:f8:42:5c:
25:c6:d2:af:65:94:37:44:d2:9d:c6:f9:3d:e3:70:
08:ac:d4:9c:2c:77:19:28:77:11:54:28:c6:30:ee:
ff:ea:f3:64:20:02:98:d8:ad:93:33:aa:cf:ed:d8:
8e:70:c6:cf:e2:fa:ed:41:a7:34:73:71:85:a1:9f:
ab:ee:a4:5c:ac:96:35:05:e3:e2:02:7d:8f:98:e2:
75:15:68:d9:93:b8:1a:6a:79:6f:8e:5f:2d:64:4d:
f4:43:3b:99:af:a5:b0:e4:8e:90:bf:a0:c2:76:64:
b3:dd:5e:68:ab:4d:58:28:f3:71:71:04:72:da:e4:
f9:a0:d0:7c:4c:4b:30:5a:2e:36:6a:f3:76:c3:4f:
32:dd:00:46:41:d3:04:2f:4f:9e:3c:bd:a4:5d:dc:
ba:b3:65:d4:fd:40:04:09:e3:91:ad:5a:bc:45:bc:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:73:21:25:13:AE:9F:8F:FA:CA:3C:FD:31:BE:A4:3E:24:E3:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A1435CF56111EFB2B1C98E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.182.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5e:bc:9d:f6:f9:0b:f9:73:76:83:e5:f8:17:09:bf:ce:34:
d6:f8:d0:3c:b4:8c:4f:ec:37:16:c2:4c:92:3a:74:c2:8d:97:
fd:78:b6:55:c7:f6:24:98:b8:56:25:a8:84:d1:b3:e7:df:18:
76:eb:1d:43:82:92:60:bd:a9:0f:1d:e9:48:2d:c0:db:a4:2b:
03:de:37:6a:7e:b5:e9:a4:80:e6:5a:c7:4c:80:5e:ff:74:18:
e9:a9:72:68:01:72:34:2c:ff:ae:c4:cf:6d:2e:44:84:fb:83:
49:38:ae:48:93:61:91:6c:21:9b:27:a2:e6:86:33:71:ba:88:
96:49:08:2d:04:bb:f7:a1:c6:6c:fe:77:7a:e6:9a:7d:22:cf:
ce:4c:0f:f9:14:bc:b5:d8:6c:c1:78:4d:a7:94:98:33:87:e5:
31:44:c9:80:2d:99:9e:78:c5:9a:33:3f:ea:a2:a0:63:58:26:
8e:ab:2e:6d:ba:e9:e4:f7:9a:85:e2:7f:5d:07:0c:61:e8:bf:
7a:d9:a0:61:14:43:cd:e4:b6:a2:47:46:a1:82:37:58:8e:b4:
d0:9a:b2:b9:10:59:59:c4:a0:e0:17:29:b5:43:34:95:95:ca:
18:cf:a1:73:19:aa:7d:78:71:03:c2:c3:14:f8:10:43:9f:5c:
4f:cb:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:04 2025 by rpki-client