Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F833FCF68911EF80B63587762E951A.roa
File: B5F833FCF68911EF80B63587762E951A.roa (raw, json)
Hash identifier: p0/UpnIRml69chki8z0bhwk6Sh3F9BLI5UPhbVrOmcw=
Subject key identifier: 2B:45:6E:47:7D:58:0B:3E:AC:EA:48:71:E0:F1:1F:5A:B7:15:D8:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F833FCF68911EF80B63587762E951A.roa
Signing time: Sat 01 Mar 2025 10:41:20 +0000
ROA not before: Sat 01 Mar 2025 10:41:16 +0000
ROA not after: Sat 05 Apr 2025 10:41:16 +0000
asID: 203020
IP address blocks: 154.206.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 10:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93658 (0x16dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:41:16 2025 GMT
Not After : Apr 5 10:41:16 2025 GMT
Subject: CN=67c2e44f-e166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:7b:1b:20:8c:66:d5:47:24:47:53:39:99:
cc:6e:da:f8:45:46:62:b6:31:df:7a:91:a4:ff:71:
b6:d7:1c:f9:59:30:c6:5c:19:8b:1c:05:55:84:fb:
1a:bb:80:ca:37:cb:19:24:a9:84:fc:e1:21:b8:1f:
f1:5f:07:67:b4:a6:fd:f3:fa:bc:20:47:7b:4d:7b:
41:37:83:1f:49:39:c9:1c:c1:93:7a:6e:3e:28:7d:
e4:3b:b6:af:74:d0:0a:01:6b:40:ac:12:fd:96:89:
e6:70:21:74:ec:0a:9f:0e:11:fd:4c:2c:ce:6c:55:
d6:d3:30:2b:d4:19:33:07:ee:65:00:b6:1f:c1:76:
68:ed:14:ed:6f:0b:fe:ee:75:dc:54:81:40:de:49:
69:53:cc:b4:72:64:d7:c6:6c:e9:21:1f:13:46:82:
65:fc:c0:67:94:ae:84:fd:fe:d6:8c:ef:8e:a3:42:
05:aa:16:24:29:64:c2:67:3e:68:ec:3f:e3:66:2f:
9c:9a:5a:65:1d:8f:3c:28:2b:d1:92:4f:84:af:9a:
0c:05:4d:00:3d:0d:d0:42:ea:b8:17:14:7c:aa:ca:
94:de:c5:71:e5:ff:c4:29:24:80:09:76:8f:dc:fe:
3a:97:b2:f4:3f:87:5a:be:6e:59:90:1a:87:cf:4e:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:6E:47:7D:58:0B:3E:AC:EA:48:71:E0:F1:1F:5A:B7:15:D8:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F833FCF68911EF80B63587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.13.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d3:76:d9:ec:de:95:5e:ce:5b:2c:b1:f0:c8:d7:7e:cf:09:
63:78:36:36:70:1e:bb:51:9c:de:c9:fe:fb:e8:36:82:a4:5c:
c0:86:06:78:8c:fd:24:c4:da:c3:17:cb:18:f4:1e:8c:31:a8:
c6:7e:41:6e:5a:06:3c:21:43:a6:33:05:21:60:07:60:62:ee:
c5:ce:e1:cb:33:ba:b7:c0:9b:d2:dd:04:a8:8d:cc:df:07:85:
58:6a:82:38:b1:35:5f:47:d0:f8:46:88:cc:24:1e:4d:bd:ae:
33:95:44:f4:b0:1e:e3:3a:d7:55:f2:44:24:38:09:86:8e:e1:
57:08:6c:da:34:f1:88:88:05:cc:16:d3:e3:6c:d5:ff:0d:21:
0b:08:0a:a1:ed:15:72:79:35:7f:c4:ad:b7:86:46:a1:12:67:
77:97:b3:4a:f3:ff:46:eb:5c:dc:cb:8b:10:a6:07:0d:4e:79:
bd:a9:9f:d1:e7:73:a2:5c:a9:21:79:27:ca:76:07:29:b5:a9:
9a:fe:40:c4:f5:67:49:4a:a4:8d:22:53:1e:f9:61:3d:60:96:
7c:b9:33:ca:98:32:04:fb:b6:df:1d:09:9e:3a:8a:db:1f:dd:
9b:8a:34:b4:35:cd:52:ea:00:f1:a0:ef:36:0d:19:98:aa:18:
35:87:5b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:19 2025 by rpki-client