Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC523E26F8DE11EF87FAC160762E951A.roa
File: BC523E26F8DE11EF87FAC160762E951A.roa (raw, json)
Hash identifier: sQb5uluVBk2bi82EtrloKv1DlIQ/9x3HyULzj+B1QsM=
Subject key identifier: 28:8D:CC:90:08:3F:39:C5:FA:6D:12:5D:B2:48:BD:99:7D:44:1A:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01719E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC523E26F8DE11EF87FAC160762E951A.roa
Signing time: Tue 04 Mar 2025 09:55:00 +0000
ROA not before: Tue 04 Mar 2025 09:54:56 +0000
ROA not after: Sat 05 Apr 2025 09:54:56 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 09:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94622 (0x1719e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 09:54:56 2025 GMT
Not After : Apr 5 09:54:56 2025 GMT
Subject: CN=67c6cdf4-247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:5f:1f:65:7b:16:28:dc:ba:81:c8:59:47:
06:48:de:9b:21:26:c4:16:e4:b0:e0:fb:c8:6b:df:
1e:a7:bd:74:b2:04:0c:ee:e3:bd:18:38:15:fc:5d:
b5:17:a4:ff:c1:3b:11:06:ec:29:4e:ab:4e:a4:68:
a4:83:d9:55:b6:3a:01:ce:d8:05:13:62:a1:aa:02:
3b:f9:a9:47:bf:64:93:78:f1:ec:70:05:a6:e5:56:
47:d5:38:de:ff:44:5e:67:8e:14:6d:ca:c0:46:22:
88:20:35:99:e4:52:aa:b2:bf:2c:ba:fe:a2:86:27:
d8:75:fb:86:d7:c9:bd:59:1c:d1:7a:ec:3a:1f:03:
22:d7:bd:5e:75:1f:88:93:25:36:f1:de:64:4a:19:
94:27:31:07:15:11:46:8e:a6:e6:9f:0a:4e:b1:04:
58:a6:3b:f4:a9:1d:e9:b0:5a:b9:5e:31:9b:ae:63:
15:69:81:60:85:18:36:25:e5:bb:23:da:3c:78:b2:
a6:54:b5:6c:d2:df:a8:f0:4b:20:9e:70:04:42:c8:
99:5d:01:85:9d:aa:a6:e5:ed:65:cb:44:32:a2:f1:
3b:ef:9c:b6:fb:55:63:f0:62:6a:ed:b0:1c:76:d0:
8c:56:6c:27:70:02:28:41:86:ef:7e:4e:b0:aa:a7:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:CC:90:08:3F:39:C5:FA:6D:12:5D:B2:48:BD:99:7D:44:1A:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC523E26F8DE11EF87FAC160762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0c:65:f3:19:36:7b:06:54:2d:df:dc:38:51:b0:07:b4:78:
7f:6b:ff:c6:07:17:d0:06:4f:43:2e:68:75:b6:4a:b1:50:2f:
42:26:75:c8:fe:47:8e:97:8c:d5:31:bb:d4:42:59:29:99:d6:
f1:83:e1:2f:b1:db:cb:17:fe:f3:fd:e7:5e:e6:08:d8:46:df:
ed:7c:94:58:56:6a:87:a5:f1:8e:ff:1b:19:08:82:9a:06:cc:
ab:13:5c:2f:27:23:d1:11:4e:ca:2f:14:a7:ee:63:bb:6d:f6:
12:b0:53:bc:7b:95:d1:19:fc:80:26:44:4e:1e:56:53:2b:38:
37:94:61:cb:c1:75:5f:0e:3b:db:6d:26:02:dc:0e:20:76:ba:
34:c3:4b:b7:bc:e6:de:99:76:2c:34:d9:e6:6d:55:df:39:fe:
91:5f:97:6b:60:61:09:61:63:bd:67:66:ca:04:14:c6:07:47:
7b:fe:f4:b1:27:74:c5:56:f3:64:69:69:a5:e0:4b:c6:70:9c:
08:ba:91:ca:2e:fe:a3:bb:44:83:b4:ef:58:8c:bc:be:1d:4c:
65:b4:cc:f9:33:e2:ea:f8:35:c6:65:44:66:ce:bc:04:ad:df:
02:6b:48:71:9e:96:b5:0c:37:1b:9b:67:e9:30:ee:31:8e:ca:
2e:e8:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:06 2025 by rpki-client