Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA15A8FEC3DD11EFBF686993762E951A.roa
File: BA15A8FEC3DD11EFBF686993762E951A.roa (raw, json)
Hash identifier: Wdm7LqrDKoBJ8t6H3FmLvUzE2//CVXDvuYuEGg8cvL8=
Subject key identifier: 43:75:50:49:FB:BC:60:42:A7:9D:2C:F6:94:FA:F4:79:A8:8A:3F:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA15A8FEC3DD11EFBF686993762E951A.roa
Signing time: Thu 26 Dec 2024 23:04:15 +0000
ROA not before: Thu 26 Dec 2024 23:04:11 +0000
ROA not after: Sun 12 Dec 2027 23:04:11 +0000
asID: 17561
IP address blocks: 154.86.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75968 (0x128c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:04:11 2024 GMT
Not After : Dec 12 23:04:11 2027 GMT
Subject: CN=676de0ef-97bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:3c:59:d6:9b:6f:f2:05:73:bb:68:00:d5:
33:7a:bb:17:58:7b:d3:7f:ca:ba:ee:0f:bb:c7:9c:
4f:fb:e5:65:5f:70:d6:2a:ee:db:8e:d6:6f:2f:9f:
0e:f1:b0:df:07:b1:bb:26:35:0e:fd:97:ef:66:ad:
d8:86:f9:d2:95:05:ef:f8:6f:4b:25:7d:65:de:45:
9c:bc:a2:fe:e7:54:e5:d6:b0:f5:1e:21:4c:68:00:
bc:a5:dd:6f:0a:ec:d8:37:ed:fe:2c:65:9a:f0:bc:
c6:58:64:2b:e2:f8:11:88:4c:ca:ea:ab:46:af:07:
8e:4a:d3:47:b3:4a:5e:48:19:cf:45:7c:9f:ed:d8:
53:9a:4f:e0:5a:e8:ea:59:14:a6:a3:7d:cc:cd:49:
b0:e0:dc:7b:ce:31:0a:53:30:3c:7b:f8:37:e3:14:
44:81:8b:aa:5a:cc:63:a2:bc:93:64:22:f2:dc:c9:
16:8c:c9:02:6c:f1:fc:c6:c8:04:26:f3:1a:58:30:
a7:f1:9a:8f:ae:e0:b5:61:80:a6:b1:53:84:60:1b:
e0:fb:b7:b5:0b:cb:45:a4:e6:ce:94:96:c6:30:5e:
ae:24:89:51:eb:59:b5:89:b7:cf:0e:cc:3c:b7:a8:
01:0b:b5:18:af:1d:ef:6a:89:d5:fe:8b:74:10:ae:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:50:49:FB:BC:60:42:A7:9D:2C:F6:94:FA:F4:79:A8:8A:3F:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA15A8FEC3DD11EFBF686993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.113.0/24
Signature Algorithm: sha256WithRSAEncryption
73:44:e0:28:88:4c:bb:62:19:b3:88:38:a1:95:74:57:e5:77:
0b:96:83:c6:75:6a:64:09:1a:a9:85:16:07:48:b8:c7:1c:ac:
48:45:29:ce:d6:ab:0b:ef:00:eb:07:03:88:c7:21:74:cb:af:
d6:32:f2:e9:01:dc:e4:ea:84:b8:21:14:83:74:cf:d1:05:26:
6e:14:90:c6:bc:84:2c:14:fb:0a:39:88:e3:47:b2:63:29:39:
a8:08:08:ce:4a:b6:67:52:a6:61:43:fe:93:01:f8:60:35:d4:
8f:e2:bc:da:b8:6f:84:c8:86:02:02:1c:bd:32:18:32:fb:8e:
87:37:ae:d9:98:3d:ba:db:3c:e2:c8:5a:f3:00:6c:30:22:03:
d9:95:90:58:74:44:ac:74:16:7e:ff:26:34:63:ae:c9:ee:98:
d2:24:64:0d:a9:4d:b8:92:ae:80:8e:2c:29:76:b6:ab:7c:07:
42:e1:98:c8:31:b5:ab:a2:00:3f:28:c5:4c:b1:0b:c7:b8:e6:
d3:36:1f:f2:bc:8e:6d:22:ff:b3:ca:00:4a:c5:9f:17:da:89:
34:f3:5f:ed:29:43:39:d6:c2:f9:a4:aa:ed:cb:fb:92:2b:f5:
1f:a2:87:bc:49:bd:19:47:9d:ea:79:25:d4:65:f5:ae:a4:f1:
ec:c7:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:52 2025 by rpki-client