Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8303AF0C8AA11EFAFA60B98762E951A.roa
File: B8303AF0C8AA11EFAFA60B98762E951A.roa (raw, json)
Hash identifier: NuVrpWNU4YG/KgXSdV3oSiaj4yka9+KccUoh2DjOzE8=
Subject key identifier: 89:B8:AA:48:98:11:AA:88:6C:ED:C2:60:C5:58:5F:58:49:7F:B0:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013172
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8303AF0C8AA11EFAFA60B98762E951A.roa
Signing time: Thu 02 Jan 2025 01:41:43 +0000
ROA not before: Thu 02 Jan 2025 01:41:39 +0000
ROA not after: Sun 12 Dec 2027 01:41:39 +0000
asID: 17561
IP address blocks: 154.220.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78194 (0x13172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:41:39 2025 GMT
Not After : Dec 12 01:41:39 2027 GMT
Subject: CN=6775eed7-d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:82:9d:b7:17:33:2e:e2:23:6f:38:47:71:
44:70:4e:4f:74:60:b0:d7:6f:bd:ac:64:13:19:28:
21:fe:0d:fc:64:08:e2:16:3e:cc:f2:86:ec:fd:29:
6f:61:af:ac:d1:1f:4c:61:18:b4:eb:e6:10:23:38:
89:b0:3f:ba:33:62:fe:75:bd:33:80:b8:97:00:e9:
80:9a:7b:10:c7:d9:80:aa:24:37:54:71:82:07:3d:
af:9b:e6:43:51:e0:fe:22:f6:32:16:57:d3:9b:92:
06:f2:af:5b:a4:bc:08:3e:ea:b6:17:ff:11:8d:dd:
b0:88:f6:c4:8d:3e:c2:0f:35:52:56:ba:f8:f4:8d:
d3:13:8b:60:57:a6:15:cd:c9:24:c1:3b:48:d8:23:
b2:50:fe:34:cd:38:0f:8c:a5:89:9f:56:e6:97:0e:
b9:62:76:ac:98:3e:3f:2c:3d:8e:1f:75:c7:12:17:
d3:95:ba:1b:ff:6c:87:82:19:2b:1a:9e:ac:87:6a:
1f:d1:73:f2:89:b6:89:ec:61:6a:88:75:dd:a9:34:
7d:b4:da:b3:d8:25:9f:32:e3:10:07:bb:e0:7e:92:
49:da:51:79:64:d3:1d:2e:5b:8a:8e:6f:77:75:d0:
3d:3a:f9:76:81:7b:24:53:dc:a3:14:b2:f0:d9:1c:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:AA:48:98:11:AA:88:6C:ED:C2:60:C5:58:5F:58:49:7F:B0:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8303AF0C8AA11EFAFA60B98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7b:28:e3:7d:02:21:9a:5b:35:b7:64:54:4f:c2:4c:af:c1:
11:3b:34:a8:e7:5b:01:1c:4a:c0:d3:d4:63:85:91:76:2d:61:
14:29:7e:45:ca:f4:e8:a1:4a:32:a7:33:26:8d:12:ca:a8:a7:
0a:ad:bc:be:8d:4b:f8:e2:10:20:32:54:2a:48:7b:20:e5:a6:
a9:c6:b3:f1:78:c3:6b:51:8d:1d:21:87:15:f3:4d:ae:f2:9a:
51:f1:74:f4:f2:6e:9d:77:a2:d9:40:86:ff:f3:5e:bd:ac:96:
12:78:60:e8:40:e8:ce:8c:ae:c4:b0:5b:63:27:a6:30:f5:6a:
96:24:7c:1c:53:6f:f6:d5:fc:65:a2:0d:79:4d:5c:9d:4f:ed:
32:74:f0:04:d5:ab:51:24:cf:be:d7:17:8c:18:93:72:84:94:
a3:b2:61:bf:cf:8a:9b:91:d3:db:67:80:47:8a:d4:29:d7:d1:
eb:05:6d:b4:ca:3b:7e:d9:9a:a4:46:63:13:05:05:57:8a:a4:
6e:4d:80:0d:12:eb:db:f0:b1:6d:73:6a:70:a1:11:16:8c:d3:
4a:d5:83:a1:db:1c:77:cc:92:4b:fb:d1:d9:55:4c:c8:f5:56:
18:55:3f:3c:26:53:f5:29:bc:ec:41:86:9f:08:17:f4:cc:ab:
d0:cb:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:06 2025 by rpki-client