Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E5CBD4F2DD11EF8BAD3B4D762E951A.roa
File: B7E5CBD4F2DD11EF8BAD3B4D762E951A.roa (raw, json)
Hash identifier: l8tTaOXanLfG81FvFKaylSgQ3grRQhqQ0BacAIlYEN8=
Subject key identifier: 1A:3B:C3:92:88:BB:BC:46:F7:AC:4F:54:76:AF:98:93:C4:5B:03:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E5CBD4F2DD11EF8BAD3B4D762E951A.roa
Signing time: Mon 24 Feb 2025 18:32:36 +0000
ROA not before: Mon 24 Feb 2025 18:32:32 +0000
ROA not after: Mon 07 Apr 2025 18:32:32 +0000
asID: 138915
IP address blocks: 154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89250 (0x15ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:32:32 2025 GMT
Not After : Apr 7 18:32:32 2025 GMT
Subject: CN=67bcbb44-3f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:4e:26:f0:5f:7f:ac:1b:53:c1:f9:03:84:
84:e0:a4:85:e9:d6:ac:0c:02:b7:29:38:52:22:86:
72:d6:7f:42:d7:a5:07:df:9a:32:05:20:09:42:79:
82:1d:87:4d:3e:e2:7e:50:c7:9f:87:06:f8:96:4c:
d6:be:dd:3c:2c:d2:c2:11:49:be:32:de:ee:a3:76:
ea:2e:97:71:e3:a1:c2:43:4a:e4:0f:43:78:2e:29:
eb:9e:21:70:fd:b9:0b:b7:fa:88:52:91:32:7d:f2:
bb:63:91:6a:70:29:f5:79:71:75:db:1b:a7:09:05:
68:9b:79:2d:bf:47:62:f0:34:fe:2b:ea:5e:f8:72:
1f:78:d2:d9:ba:6a:aa:0a:51:76:6e:7c:92:4e:5f:
5b:91:41:c1:94:e6:49:96:4b:30:81:91:b6:6c:35:
14:9b:d5:9c:87:8b:c0:46:45:24:04:31:2a:5a:27:
a5:53:cf:ac:4d:0f:17:b9:81:3a:9c:9f:d7:8a:f8:
1f:de:53:23:9b:af:3a:01:4d:19:9c:ce:f4:b1:59:
a7:cb:13:ab:d1:03:9b:b3:af:0a:19:57:1a:e1:20:
07:0b:87:78:aa:8a:ba:da:80:7e:c6:6d:2e:06:ce:
ba:a2:c2:2c:21:b1:d6:cd:43:c9:77:06:a7:8d:73:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:C3:92:88:BB:BC:46:F7:AC:4F:54:76:AF:98:93:C4:5B:03:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E5CBD4F2DD11EF8BAD3B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:eb:0d:5a:4d:5e:eb:53:4e:e3:26:5e:ec:92:9e:94:2c:7f:
5c:f7:f1:e5:c7:15:30:11:27:a2:f9:50:ca:52:f9:e3:01:6b:
31:09:da:36:87:1c:94:91:8c:f7:90:66:82:7f:ea:e0:6a:3d:
8e:3c:a5:6b:6b:13:02:cf:05:dc:5e:9a:d7:4e:e9:dd:1b:8a:
63:fe:e8:78:a8:2a:36:7c:16:af:d4:0f:03:17:ba:bd:55:b0:
06:d1:fd:5d:70:b2:2b:22:28:21:89:51:ea:8e:71:c9:b0:1e:
21:c3:12:3e:37:2f:09:ea:27:f6:62:7a:01:34:5f:23:9a:e6:
90:e5:cb:5b:bb:e3:0d:05:ab:bd:e2:3f:03:a4:25:d0:c6:8c:
b1:aa:6c:a4:5b:3d:38:67:d5:5c:cf:37:d4:bc:a9:43:12:b9:
54:80:81:26:d2:c9:31:1e:ec:1f:7a:1e:19:5a:08:f5:a2:7d:
5f:53:0a:46:e6:f7:9e:da:8d:9d:76:ff:ec:e3:f1:dd:e1:aa:
13:da:96:ae:b7:72:e4:04:52:27:00:06:54:c7:86:a7:e7:34:
ce:00:96:24:f1:f7:28:9b:68:c4:87:0f:2d:a1:c9:d0:2a:a1:
66:a3:88:7c:af:dc:d9:e6:d5:f4:41:5c:70:1b:06:b3:59:5c:
63:33:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:24 2025 by rpki-client