Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD353B04C92C11EFA47C1056762E951A.roa
File: BD353B04C92C11EFA47C1056762E951A.roa (raw, json)
Hash identifier: I07jd3UlXjrni21bBvnd4w4rJudH2Lcw/GkeGx1xwLA=
Subject key identifier: D4:60:65:57:1F:53:09:6D:FA:AB:59:02:BB:23:ED:05:B1:7F:C5:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013389
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD353B04C92C11EFA47C1056762E951A.roa
Signing time: Thu 02 Jan 2025 17:12:26 +0000
ROA not before: Thu 02 Jan 2025 17:12:22 +0000
ROA not after: Mon 13 Dec 2027 17:12:22 +0000
asID: 17561
IP address blocks: 154.222.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78729 (0x13389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:12:22 2025 GMT
Not After : Dec 13 17:12:22 2027 GMT
Subject: CN=6776c8fa-d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:03:74:2b:0e:65:0c:96:b5:8a:29:5d:02:
3e:dd:71:db:fe:bd:10:8b:f6:8c:34:72:3d:e8:9c:
e9:b1:3b:76:3c:9b:d5:9f:f4:f0:10:23:0b:cd:88:
cf:0a:bf:32:36:6e:96:a7:ae:9e:2d:25:9b:00:48:
5d:93:68:b7:78:2c:dd:8b:d7:52:60:6f:39:18:d7:
58:a4:3b:b4:af:97:7b:0f:92:94:31:a8:7d:d9:fe:
95:54:ee:1c:d6:dc:69:98:4e:be:7d:4b:d1:b8:1b:
93:9d:f1:52:a5:8f:b0:33:d8:70:44:0a:cd:f6:39:
14:a5:13:60:b5:3d:8f:ba:99:34:1c:4a:a7:16:79:
05:e9:b5:74:1d:a1:eb:83:05:af:04:17:8d:25:4f:
c1:f9:74:fa:e3:ed:7b:d6:15:8a:06:53:87:42:e3:
18:fd:28:14:9b:1a:bd:11:ea:6b:04:01:11:79:40:
98:58:4d:c7:66:5c:a7:e7:e4:73:81:aa:05:da:4b:
50:dd:78:07:27:9a:3d:56:d5:da:4e:43:64:e4:98:
0d:5f:c2:cb:63:8a:15:27:ff:9a:8e:a9:bb:da:46:
bd:6a:47:53:7e:48:b0:67:a0:bb:ae:2a:78:77:ee:
67:e4:ca:ad:5a:ac:e1:dd:3a:c8:26:ac:25:47:2f:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:65:57:1F:53:09:6D:FA:AB:59:02:BB:23:ED:05:B1:7F:C5:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD353B04C92C11EFA47C1056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.145.0/24
Signature Algorithm: sha256WithRSAEncryption
11:64:bb:7c:a6:b5:94:43:df:32:7f:25:93:5a:9a:10:07:69:
a1:98:43:9a:a4:cd:71:2f:54:4a:09:f3:81:d9:54:96:17:f9:
1b:2d:d5:63:ca:93:98:e5:48:1e:d2:9b:fa:fc:38:fe:d2:2b:
9c:1a:d3:df:da:6b:3c:b8:27:f5:18:9a:5f:09:b8:c4:0e:28:
ab:3a:9f:91:a4:47:44:5f:5b:84:97:20:f8:f6:0e:b6:94:52:
7f:23:88:18:7a:27:de:2b:df:19:7d:e7:66:90:95:58:95:6e:
b0:46:6b:4e:5b:c5:d2:ee:1c:78:bf:0f:28:23:23:7b:70:3b:
b0:51:15:17:88:ab:d4:e1:b4:80:2d:26:e6:36:9d:49:f1:c5:
35:c1:98:0c:02:99:10:cb:df:31:5e:8b:d3:72:0f:58:ff:c5:
e5:cb:f7:f4:d1:70:e7:73:f5:b9:9e:8b:12:9a:4c:c3:8a:36:
0d:79:85:8c:ee:3f:87:ca:85:d8:aa:c7:7c:23:fe:19:3d:24:
9b:90:d6:0e:07:43:31:7c:4c:e2:2c:7d:3c:69:33:e2:52:ff:
c6:85:a1:10:6f:5b:11:02:31:5b:c1:19:3e:62:07:54:53:ae:
64:e3:ca:58:02:62:b1:db:04:54:a9:39:79:a7:e7:30:a7:c3:
25:dd:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:58 2025 by rpki-client