Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FD21CAE24611EF95E24287762E951A.roa
File: B5FD21CAE24611EF95E24287762E951A.roa (raw, json)
Hash identifier: YGFPaUSZHIsZhtDJn8lQ63rwJb06n/TVTUTKU6pis1I=
Subject key identifier: B9:D1:11:55:44:9A:AC:02:97:A2:34:7F:86:62:B1:71:D0:05:DE:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01504F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FD21CAE24611EF95E24287762E951A.roa
Signing time: Mon 03 Feb 2025 15:51:20 +0000
ROA not before: Mon 03 Feb 2025 15:51:16 +0000
ROA not after: Wed 30 Apr 2025 15:51:16 +0000
asID: 150008
IP address blocks: 154.206.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86095 (0x1504f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:51:16 2025 GMT
Not After : Apr 30 15:51:16 2025 GMT
Subject: CN=67a0e5f8-fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:49:80:7b:83:63:3d:8f:09:31:c2:57:c8:
3d:09:e5:2d:7f:d0:86:cd:36:83:5f:7e:2b:66:7b:
1c:9c:13:eb:58:82:28:f1:45:22:8c:4c:3a:23:55:
54:b6:c1:32:1c:f7:99:cf:26:3f:16:d7:e7:98:49:
eb:ff:03:0b:f1:8c:4f:bb:9a:ae:58:06:4f:e8:cb:
5e:a0:11:88:9a:23:36:33:d2:3a:12:d1:51:66:b8:
9e:0d:d5:c6:00:af:c1:15:63:fc:64:60:f1:40:0e:
9c:11:c2:93:54:05:0f:f2:1c:02:3c:a4:fc:bf:43:
f1:5c:6b:a6:bb:ac:21:82:41:9b:b0:7a:cd:93:39:
6d:2e:1e:dd:14:a9:76:dd:70:6b:e0:4a:3a:3e:eb:
ef:89:3a:4b:a7:f6:50:db:7d:da:d6:36:11:83:eb:
49:a6:80:32:38:a9:73:98:33:1a:88:70:4a:f6:fb:
e3:8d:1c:3d:18:e2:7e:98:bc:6d:26:ba:30:86:84:
8e:21:97:f6:2c:24:a7:66:53:37:98:76:54:7f:c0:
5a:4f:a2:9e:44:10:ac:32:9f:c2:12:af:2b:df:45:
e8:6b:30:a9:b3:6b:0c:93:68:c7:77:f7:24:04:0b:
81:89:3b:f0:c3:02:74:7f:6c:e6:d9:c0:a6:74:72:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:11:55:44:9A:AC:02:97:A2:34:7F:86:62:B1:71:D0:05:DE:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FD21CAE24611EF95E24287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:04:19:f2:6f:87:6a:58:16:af:71:41:d5:c3:e5:22:c6:58:
51:7f:1b:93:f9:07:c7:c2:1b:53:0d:01:69:3a:cb:e2:d2:16:
90:fe:92:ee:be:e6:a0:a4:c9:76:8a:50:c3:59:bd:91:8e:5a:
91:d3:f3:ac:58:3d:22:14:f4:6c:30:51:08:4b:a6:96:b6:02:
d6:52:66:52:3f:2b:a1:2a:ad:34:f0:f8:ed:18:1f:69:ef:73:
20:c9:6e:93:d8:4f:4e:51:c4:74:8c:49:bb:56:7d:73:a5:56:
e8:d1:e5:7d:34:5c:81:62:07:ee:13:ec:6a:60:4c:7f:37:99:
72:7b:25:34:e2:bd:f8:f8:7a:8f:11:04:95:0e:c8:5f:1e:5c:
ee:6d:6f:b7:b5:a2:c2:b1:a7:c0:a0:8f:64:1f:70:15:b1:0b:
3c:91:cd:d9:26:a5:ae:c9:62:94:fe:d5:73:1a:10:4f:88:ef:
aa:7a:a8:9b:fa:fc:be:88:62:2a:ef:9f:05:84:80:29:02:8a:
3c:74:e4:f8:da:a1:c2:5e:df:6d:2e:a2:18:e1:52:86:d4:9d:
95:f9:79:ea:8a:50:27:b3:16:a9:ee:9a:0b:62:64:f0:d6:52:
e6:df:a7:8c:2e:9a:f6:04:7b:73:3b:18:88:c4:e8:f3:42:83:
34:96:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:03:05 2025 by rpki-client