Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A761E6C8BF11EFAAED0FAD762E951A.roa
File: B4A761E6C8BF11EFAAED0FAD762E951A.roa (raw, json)
Hash identifier: OQybnIW7yrsR8/fnoswgEusSU1ZHTJFVkiomJYoy8gE=
Subject key identifier: CB:CD:F0:C0:DC:AE:01:95:60:4E:5D:14:BC:FC:40:5E:58:F6:C6:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A761E6C8BF11EFAAED0FAD762E951A.roa
Signing time: Thu 02 Jan 2025 04:11:57 +0000
ROA not before: Thu 02 Jan 2025 04:11:53 +0000
ROA not after: Mon 13 Dec 2027 04:11:53 +0000
asID: 17561
IP address blocks: 154.221.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78326 (0x131f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 04:11:53 2025 GMT
Not After : Dec 13 04:11:53 2027 GMT
Subject: CN=6776120d-029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:2a:db:52:98:8c:b7:ea:ac:dc:4c:54:8c:
52:b1:4c:89:c3:dd:28:f4:26:99:81:5c:d2:4b:82:
0f:16:7a:3d:80:5a:91:cd:de:31:a4:3d:a8:bb:84:
79:f9:7b:32:50:10:9e:dc:9e:07:39:0c:50:01:e4:
3e:f1:d7:12:db:39:e8:d3:00:df:eb:6a:44:cb:16:
0d:dc:0e:b5:74:14:9e:68:66:69:cc:0e:2d:95:1a:
af:9f:93:96:b4:59:62:e0:d0:89:83:df:58:f0:45:
c3:28:47:ab:d7:79:d8:e8:9d:ee:d5:cb:a6:32:87:
00:eb:5d:c3:5f:2f:fa:52:ec:ef:d3:0e:6e:57:2e:
b9:c6:83:6f:b6:04:9e:e3:34:ef:31:de:8d:6b:9e:
2a:ac:b5:8b:87:95:57:c7:04:bd:8c:7e:65:c8:3e:
45:17:69:85:68:5d:24:2b:d2:c2:02:40:d2:2f:d5:
c1:23:b4:f7:b5:cc:a5:89:af:29:13:2c:55:60:68:
42:67:b2:0c:a5:ec:20:42:ed:c4:78:7d:a2:c7:a6:
b1:27:bb:f8:a0:53:bc:ba:ab:10:8e:8d:a9:f8:38:
1c:f6:5c:f2:f4:3b:e5:57:0d:32:0a:d1:b8:99:c6:
c0:ec:69:fe:ee:48:86:55:c5:91:1d:cd:7f:1b:88:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:F0:C0:DC:AE:01:95:60:4E:5D:14:BC:FC:40:5E:58:F6:C6:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A761E6C8BF11EFAAED0FAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3b:70:09:bf:46:30:bf:a4:f6:57:ee:fe:6f:6c:28:f0:0a:
26:1f:62:f1:87:69:69:7c:d7:3e:42:31:77:dd:bc:e2:cd:d1:
2a:f6:42:ee:ab:5a:8f:2f:38:36:a0:cc:76:f1:7b:b5:87:94:
f5:e3:dd:da:74:f8:43:b4:44:f4:c7:35:64:44:b2:d5:15:f8:
46:b4:16:2c:57:d3:8b:97:88:e3:30:c0:b8:37:0f:bb:53:27:
75:c4:5e:81:d2:07:c1:5b:77:a8:20:03:5a:fb:60:c4:8d:6f:
b5:bf:0d:da:af:66:45:86:e0:56:6e:2b:f3:16:0b:cb:d4:ae:
01:1b:5a:c0:32:62:bc:e1:81:b4:22:4c:5d:ea:5c:7d:58:c0:
7d:21:55:02:95:7c:ea:c8:c8:d0:10:db:e5:50:b2:da:d9:11:
8f:2a:41:45:06:f2:88:92:25:34:ae:02:cd:99:e7:67:88:6f:
1a:7c:37:fc:16:65:e9:14:d1:e8:1d:40:fd:be:40:a9:d8:9d:
fb:9c:6d:ba:61:29:f1:8d:f0:74:24:c2:fd:dc:4f:b2:53:11:
32:55:ef:e2:f9:f0:b3:4a:d5:68:21:30:ee:ef:d1:50:ac:6b:
df:02:0d:87:ff:27:c8:e6:d4:83:e3:2c:8f:31:94:29:f8:b2:
92:e5:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client