Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1155A8CDB811EF920F644B762E951A.roa
File: BA1155A8CDB811EF920F644B762E951A.roa (raw, json)
Hash identifier: S9SDtRDmnp+gzs0/3Z2q2o1lwE+y9O9VHdPCQMzP9Yg=
Subject key identifier: 7E:AF:BE:6A:F5:25:E4:30:D6:18:32:F9:68:A1:C5:84:35:56:01:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1155A8CDB811EF920F644B762E951A.roa
Signing time: Wed 08 Jan 2025 12:04:35 +0000
ROA not before: Wed 08 Jan 2025 12:04:31 +0000
ROA not after: Tue 16 Dec 2025 12:04:31 +0000
asID: 984
IP address blocks: 154.200.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79564 (0x136cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:04:31 2025 GMT
Not After : Dec 16 12:04:31 2025 GMT
Subject: CN=677e69d3-f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:ec:8c:88:57:cb:0d:3f:4f:f4:c7:7f:bd:
6f:5c:a1:06:73:d8:be:bc:02:cf:2d:db:74:d1:45:
38:66:6a:9c:eb:4a:13:58:8f:b9:c9:6d:09:ca:a2:
13:6f:9c:86:c6:36:3a:3a:6c:3f:f1:01:a0:01:fe:
b9:13:19:df:16:c9:e3:38:d5:56:8e:e8:f5:ce:b9:
2a:e6:43:2a:1f:79:84:aa:43:aa:34:d8:b9:2f:70:
cf:88:84:4f:7e:0a:e4:fe:b8:c8:e9:5e:f6:d0:a2:
7a:76:74:14:1b:b5:8c:08:35:e9:43:73:99:c6:8e:
10:6d:2f:87:03:84:c8:5a:69:bb:28:1d:29:3a:c9:
27:09:fe:f2:4d:43:53:51:a5:6f:56:b8:cc:3c:e0:
c3:11:e1:59:71:cc:a6:d2:50:41:ed:b3:4c:e5:0d:
33:82:70:94:e1:21:38:c7:1f:f6:35:f2:cc:86:16:
0a:2e:15:13:4c:5f:c9:fc:91:1f:ba:e4:08:21:b6:
61:02:a6:b3:bf:7f:2c:1f:77:3f:9e:c4:80:5f:eb:
40:b8:23:79:1d:44:60:ce:46:1c:cd:3a:1a:de:d3:
57:25:38:d7:08:85:7d:ee:e9:a4:c9:11:f6:9b:9c:
db:aa:8a:dc:8b:4f:c2:87:ba:b9:f8:69:21:bd:7e:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:BE:6A:F5:25:E4:30:D6:18:32:F9:68:A1:C5:84:35:56:01:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA1155A8CDB811EF920F644B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.175.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5d:10:c0:89:4c:5f:69:ab:ad:f9:c1:f0:8e:3d:44:4d:aa:
d1:78:f9:f6:c8:bd:24:d4:4e:79:5a:55:6d:7c:dd:1c:7c:01:
46:58:a9:cc:c1:14:a5:29:e6:2b:4d:01:44:97:b0:76:95:8c:
ce:f3:e9:8e:f6:61:82:69:f8:c0:cb:ae:18:b7:7d:e3:56:23:
0a:9e:de:a0:98:93:34:36:e4:ea:97:7b:2f:99:ab:f6:c3:f2:
35:a7:0a:86:f8:ce:d8:f4:84:5a:fb:9c:5f:0a:a5:af:25:8f:
e9:4a:f5:36:9b:17:34:0c:53:68:b1:0d:20:e3:46:5a:95:8b:
a5:66:e0:bd:e6:8d:fd:87:17:e5:2b:b7:50:0a:55:fe:ae:f9:
37:88:7d:c8:63:4c:51:77:cc:10:9c:9c:25:28:8e:af:ea:b6:
b9:97:dc:fd:da:ff:de:2f:29:59:ae:5a:b5:13:24:ed:95:98:
ca:26:f6:dd:88:34:9c:a9:2a:d6:03:0e:ee:d1:a2:88:e6:2a:
53:51:ed:13:27:78:9a:f7:9a:20:67:d4:ce:74:95:c0:76:36:
ab:17:a5:fa:68:dd:99:68:50:93:f4:ff:2a:50:21:c9:96:2d:
6d:7e:38:bd:ab:aa:d3:a9:cb:8d:59:f6:d5:fe:c8:5f:1c:bb:
76:b0:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:43 2025 by rpki-client