Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C8DAE2FFE911EFA4004E64762E951A.roa
File: B2C8DAE2FFE911EFA4004E64762E951A.roa (raw, json)
Hash identifier: R/THdtkIOvHmQE9OFrOev2rDrqKMHEBioqFNajPTSP8=
Subject key identifier: B8:0A:D3:4D:D1:64:40:66:4D:2E:37:CB:6D:8C:58:BB:34:AA:69:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01742D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C8DAE2FFE911EFA4004E64762E951A.roa
Signing time: Thu 13 Mar 2025 09:01:06 +0000
ROA not before: Thu 13 Mar 2025 09:01:02 +0000
ROA not after: Thu 12 Jun 2025 09:01:02 +0000
asID: 54600
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95277 (0x1742d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 09:01:02 2025 GMT
Not After : Jun 12 09:01:02 2025 GMT
Subject: CN=67d29ed2-ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:88:bb:4f:bb:f0:05:60:99:06:e6:a9:97:
75:52:45:dc:a8:06:bf:79:da:7f:c7:22:04:11:dc:
f4:7c:e2:42:41:6c:0b:ff:b4:45:d2:1e:bb:29:75:
bb:f0:b3:ff:b6:74:2e:df:b9:d4:c2:58:65:54:cc:
ff:64:3d:23:7d:8e:fe:3e:17:4f:d7:4a:d9:f1:69:
30:53:e1:d8:94:0b:0a:4b:02:22:7a:be:9b:b1:f8:
34:e2:76:db:e1:32:34:83:56:03:f6:a9:92:2f:fb:
cd:56:c3:38:57:b5:fe:96:8f:f5:e6:9b:bc:6a:65:
7e:3c:cf:6b:cb:12:d8:a0:e5:d6:9b:3c:c2:29:07:
6d:d0:2b:6a:42:e9:4d:e7:5a:89:49:cf:c6:87:a5:
c4:13:ef:16:c9:3d:79:9f:24:e0:20:aa:0b:7e:ec:
6e:01:c3:7a:9b:03:b4:bc:9e:88:ad:6e:37:25:e5:
76:5b:f8:58:18:04:9f:03:d0:40:2b:90:b6:9d:8d:
d0:29:5b:61:27:6e:a9:3e:64:78:ac:2b:9f:77:9d:
b3:8a:49:22:93:49:b9:a0:9a:a2:e9:70:96:99:0b:
87:f3:df:a7:2e:22:7f:f7:a9:03:ba:bf:aa:d1:23:
e3:92:2b:b6:ac:9b:46:8a:c4:a7:81:ef:2e:a1:13:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:D3:4D:D1:64:40:66:4D:2E:37:CB:6D:8C:58:BB:34:AA:69:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C8DAE2FFE911EFA4004E64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
53:bf:4b:0d:0f:a5:ad:9c:8a:17:6c:3f:68:27:05:d1:c9:a9:
14:db:95:e1:64:7b:d4:01:42:32:76:4f:30:3e:e5:5b:e9:fa:
94:f3:a3:7a:3a:56:3e:8b:50:6f:db:4d:f2:25:1a:8c:07:7e:
71:83:52:2c:35:32:01:cd:4d:24:f4:be:fe:63:51:da:fb:8f:
c9:43:14:ed:6c:33:eb:71:f8:1d:9a:b2:a8:6f:8a:7c:31:c4:
99:f6:60:2e:5d:fb:d5:cf:a4:6a:2c:7b:e5:75:bf:48:85:60:
53:85:61:5a:f5:70:f2:98:8a:1a:10:d9:4b:3d:8e:bc:8a:b9:
84:89:6d:a3:7f:5b:e0:15:ac:7e:d5:b7:10:37:ca:49:2c:ee:
08:bb:2d:88:16:dc:73:bc:6a:a3:88:83:b8:0e:10:65:1f:e4:
33:83:61:3a:4f:63:b8:38:d4:a9:e7:21:3e:fa:83:f6:79:f5:
ec:af:e8:79:4e:07:46:a6:47:2c:71:62:8a:6e:c1:3b:c3:9e:
9e:24:85:12:5b:da:3d:d1:65:15:10:8c:d9:35:de:72:cf:05:
a7:69:8c:2a:13:a4:cd:71:57:45:15:21:e0:64:57:7a:1b:b0:
22:00:50:72:8c:03:7e:be:7a:b5:4b:e8:cf:ad:95:b8:0b:ff:
6c:36:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:53 2025 by rpki-client