Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E8D186E2D211EF8B9266BC762E951A.roa
File: B8E8D186E2D211EF8B9266BC762E951A.roa (raw, json)
Hash identifier: YcF+Gz0v2kso9+LeQxH187/phBj5BRPSyybb9SZ8nbo=
Subject key identifier: 54:71:53:68:3B:AC:79:4E:83:4B:0D:09:17:46:BB:3D:B8:A9:8E:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E8D186E2D211EF8B9266BC762E951A.roa
Signing time: Tue 04 Feb 2025 08:33:35 +0000
ROA not before: Tue 04 Feb 2025 08:33:30 +0000
ROA not after: Wed 30 Apr 2025 08:33:30 +0000
asID: 18229
IP address blocks: 154.210.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86186 (0x150aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:33:30 2025 GMT
Not After : Apr 30 08:33:30 2025 GMT
Subject: CN=67a1d0de-b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:97:2e:44:45:c0:20:21:a4:58:9a:b7:57:
8e:43:ba:20:9a:b0:67:84:e2:e1:77:a3:a1:7a:8f:
8c:03:83:13:30:3a:ea:5f:21:6d:0c:80:8b:17:03:
cb:44:06:51:36:ed:15:9d:6d:c1:dc:8f:9a:9f:da:
80:4c:18:9e:c3:5d:35:3f:b0:dc:d3:da:67:3f:80:
83:0a:6b:78:1b:71:8f:79:07:ef:b3:5e:0b:54:5e:
f5:24:70:24:c6:98:c6:4a:07:a6:ca:50:3d:89:31:
97:cd:4f:e9:31:8d:92:bb:7a:52:b9:70:c9:53:f5:
ea:af:5a:76:96:85:32:8f:ba:15:a5:85:91:32:d9:
5c:52:b8:67:38:ec:9a:b1:d0:d1:af:a9:12:89:de:
3e:db:89:75:40:22:b8:ac:a5:8f:b2:a7:b3:0a:8e:
eb:6a:90:e3:af:dc:66:fc:bf:8a:67:c9:c4:dc:2d:
7a:64:c1:c7:b5:55:85:fa:97:60:29:29:fc:1a:1e:
a9:ba:6b:de:b0:88:3c:54:48:99:ed:8d:ea:42:c6:
fc:a3:4e:b4:e4:4e:c5:12:b6:63:33:0a:e2:8a:52:
d9:83:0a:81:7e:4c:8f:46:d6:bb:f6:fd:b5:ed:22:
62:ee:e6:e8:78:37:a6:05:75:b0:40:2d:8e:c0:30:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:53:68:3B:AC:79:4E:83:4B:0D:09:17:46:BB:3D:B8:A9:8E:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E8D186E2D211EF8B9266BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:12:f4:db:a2:6b:eb:f3:e1:07:e8:6b:09:01:b3:8f:1a:38:
62:7d:94:25:43:04:79:75:dc:38:ae:82:b1:84:6d:43:91:70:
da:4c:96:43:3f:3b:0f:4d:03:fb:b9:f2:7f:17:70:ae:85:2e:
9f:9f:d1:cb:43:b0:95:a0:d9:99:0e:ea:5a:57:55:5f:82:cd:
06:f4:cc:e4:cc:bd:67:c8:cd:ba:b4:a3:93:f1:9e:85:0e:fc:
8b:04:2f:15:b6:b5:bc:f8:18:08:ba:6f:b1:34:6a:f7:28:b7:
13:46:27:46:23:b6:85:72:70:40:d2:da:32:0a:f4:24:ba:48:
3f:50:56:25:54:e7:76:44:ce:2b:24:b2:16:79:31:ec:15:b1:
b2:32:17:76:69:bd:01:5b:89:db:93:45:7e:fc:59:d0:29:9a:
71:2b:95:e7:2c:75:5c:c2:fa:9c:3d:2b:c7:3c:c5:36:a1:3e:
3b:86:a1:ee:3c:a7:11:fc:1f:47:55:89:17:0c:d5:5e:26:3e:
34:96:15:80:83:ac:ef:24:1f:46:18:c8:95:11:fe:1f:ef:b6:
d1:c9:d6:a7:84:e4:c4:5f:ae:7c:c3:2c:d0:81:a0:18:d5:e6:
7a:4c:ea:8d:5d:1e:d0:13:de:f7:fe:a7:da:d2:71:50:ab:6f:
d6:c7:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:18:09 2025 by rpki-client