Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3832E1AF16B11EF919A6459762E951A.roa
File: B3832E1AF16B11EF919A6459762E951A.roa (raw, json)
Hash identifier: VN8tnjBByAhtzUcllDxTV3pX4L1njlMEokrqr1ZGrh0=
Subject key identifier: 37:89:C2:1E:2C:11:DA:D8:45:E7:96:EE:05:DD:4A:F2:D2:63:44:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3832E1AF16B11EF919A6459762E951A.roa
Signing time: Sat 22 Feb 2025 22:23:55 +0000
ROA not before: Sat 22 Feb 2025 22:23:51 +0000
ROA not after: Mon 24 Mar 2025 22:23:51 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88745 (0x15aa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 22:23:51 2025 GMT
Not After : Mar 24 22:23:51 2025 GMT
Subject: CN=67ba4e7b-13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:2c:6b:19:bd:90:c2:b0:85:2e:e0:f0:d0:
6f:66:2c:fc:7e:6d:06:02:b4:a6:19:37:fe:a7:b0:
11:57:8c:5d:1f:df:81:ed:41:b8:bd:59:89:fb:19:
ab:e3:58:78:9c:a2:5b:b1:79:80:fd:bf:94:6c:a1:
96:5b:bb:a7:57:e8:1a:45:66:ec:f1:4e:3d:05:85:
c0:3b:ef:51:eb:f4:a1:08:fd:d7:df:18:a8:f6:84:
82:43:6c:42:91:ee:de:f0:b9:56:aa:82:c9:77:79:
f2:d9:d4:dd:e5:58:f2:91:cf:16:7b:1b:eb:96:18:
55:8e:b0:b4:b7:67:51:67:e6:e8:70:4b:2a:6c:68:
62:f4:6f:6d:be:2f:b7:f4:84:1f:9e:a3:40:7c:55:
eb:a9:d1:bf:40:ec:20:fc:41:3d:78:05:cb:07:c5:
9b:be:27:eb:88:11:7f:96:10:aa:8b:7f:91:51:6e:
7d:a8:f9:58:57:d6:c9:e9:59:36:0a:28:e8:30:fa:
34:fe:1f:bd:67:3c:90:e4:6d:c7:1e:d0:70:b0:f0:
85:58:9b:11:81:b4:8c:ec:91:ad:a6:2b:ae:94:b5:
84:21:32:09:b0:2d:0a:87:ec:53:4b:8e:c9:51:00:
f2:0b:52:9c:93:04:00:70:83:e1:8c:af:49:d5:fb:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:C2:1E:2C:11:DA:D8:45:E7:96:EE:05:DD:4A:F2:D2:63:44:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3832E1AF16B11EF919A6459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c6:52:49:aa:9b:16:ce:51:0d:a1:ab:b4:14:bf:c1:df:87:
f1:3b:d1:81:65:78:82:b4:b9:64:e8:72:d4:40:e3:64:66:66:
28:4e:90:8f:19:b0:d8:13:cd:56:db:7f:27:17:e7:d3:a5:2c:
47:85:70:5f:4d:14:8b:0a:66:a9:a0:b4:ba:22:6a:12:d6:26:
8f:36:b8:8b:f2:19:91:7e:07:12:a7:e4:05:42:9c:f5:02:c2:
cf:9d:00:61:e2:cf:df:86:0e:6e:e7:7b:fa:e8:75:7a:51:83:
21:81:61:15:08:60:0c:3f:c9:d3:34:5d:8b:56:56:fc:d8:df:
90:d0:9b:b8:45:f2:4d:91:6f:df:a4:66:06:9e:21:07:28:01:
a3:e5:1d:60:87:63:75:22:12:42:be:fd:de:d0:f2:14:29:8b:
20:54:a6:31:52:18:2b:cd:a6:4a:7b:d7:d6:0d:4b:db:7c:f2:
83:2e:10:21:76:31:eb:ce:61:9a:54:fa:d9:4a:49:41:e4:ea:
f6:6c:50:b9:d5:90:9b:2e:5c:92:2f:a6:35:de:86:04:9f:99:
b9:c3:08:0b:2e:09:27:84:29:4a:66:4c:95:c7:11:b6:54:89:
3d:03:99:3d:ea:b4:9f:8c:e1:6c:7a:bb:7e:23:22:c4:e4:52:
ca:e7:21:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:51 2025 by rpki-client