Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD66C1D4AB3511EFBA3E3EAD762E951A.roa
File: BD66C1D4AB3511EFBA3E3EAD762E951A.roa (raw, json)
Hash identifier: i/kjjTmJrz2+DeT09h4Fb597ZAcHIMiccE3hyhWeHwk=
Subject key identifier: 24:FD:EF:52:01:47:F8:D2:23:3A:8B:A9:30:4F:A4:47:BF:D6:03:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01135C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD66C1D4AB3511EFBA3E3EAD762E951A.roa
Signing time: Mon 25 Nov 2024 14:01:17 +0000
ROA not before: Mon 25 Nov 2024 14:01:13 +0000
ROA not after: Wed 07 Jan 2026 14:01:13 +0000
asID: 18004
IP address blocks: 154.85.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70492 (0x1135c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 14:01:13 2024 GMT
Not After : Jan 7 14:01:13 2026 GMT
Subject: CN=6744832d-cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:54:00:75:b1:90:21:44:19:0f:98:96:85:
f2:63:c5:51:37:81:00:bf:02:d3:13:66:08:71:5e:
64:19:6e:7a:33:5a:30:5e:f1:c6:23:e4:79:6a:f5:
07:ce:a1:d8:1d:9e:a5:0d:46:89:d5:0e:fb:18:19:
66:fe:dc:5b:69:95:10:d9:93:71:4f:38:f0:84:b6:
9e:53:f5:03:9d:31:b2:7e:24:20:a6:0e:e9:cc:c0:
74:17:e5:24:bb:d7:71:73:6e:ac:28:bc:62:62:37:
0a:46:42:64:b9:07:ad:81:63:6f:0c:39:96:5a:64:
5c:85:15:56:df:e1:42:eb:76:56:f0:5d:20:9c:60:
c4:1d:34:f4:65:36:6f:30:2a:60:3b:fd:b5:29:f5:
cd:e0:c2:1f:66:94:21:5e:50:ad:a7:d9:91:09:f3:
8d:05:aa:f4:f3:e6:85:0d:11:6a:c8:27:c8:9c:95:
b5:0e:76:75:b7:5e:c0:55:4a:e7:7a:11:04:94:46:
40:59:51:d1:5c:72:74:3c:80:fc:42:b4:e3:a2:1a:
c8:2b:27:66:fc:15:48:46:d6:51:a5:45:2d:37:99:
f8:0d:ca:bb:90:23:3c:24:d6:a1:cf:13:e9:8f:9b:
93:ea:30:6e:bd:ff:21:43:b4:2c:52:4b:33:14:d2:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:EF:52:01:47:F8:D2:23:3A:8B:A9:30:4F:A4:47:BF:D6:03:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD66C1D4AB3511EFBA3E3EAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.82.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3b:fa:98:e8:af:23:0c:fa:8a:11:a5:2c:3b:8b:5e:0f:cb:
a7:3a:b0:e7:8d:c2:6c:b3:93:95:e0:b9:a4:b4:70:b9:60:d8:
84:c1:2b:26:1a:07:a8:9f:e3:58:8a:b0:3d:58:65:67:c4:44:
ba:6d:94:09:af:b1:be:cc:4b:43:72:7a:d1:85:8a:e1:dc:0d:
58:cc:3d:4f:90:a1:83:8b:ec:4c:f8:ae:b3:89:a7:f5:f9:9d:
8a:32:06:c5:df:79:cf:81:d2:12:74:6b:72:54:a2:a2:a2:aa:
9e:b9:c4:f7:95:6e:17:1c:7c:4a:ea:74:9d:7f:25:6c:39:b7:
99:b7:e7:db:33:9f:f9:e8:29:46:50:15:49:cb:4a:18:d5:1b:
a7:0d:cc:7c:e3:90:33:90:64:63:20:27:c8:e5:1e:9a:7f:d1:
2d:24:08:8f:f7:cf:0b:f7:e3:3f:93:37:90:f0:24:6a:c3:47:
e5:0b:f2:20:45:ee:ac:5b:29:72:08:8b:7b:7b:94:13:15:70:
62:3a:0b:26:42:ba:d4:23:b5:d3:c5:da:3f:b2:4b:6e:66:da:
f9:6e:65:37:b8:08:9a:8d:a2:41:71:ad:06:63:3f:dc:c8:93:
dc:4d:71:b0:bd:f9:2b:49:ac:cf:69:a8:8a:23:71:7e:0c:d8:
1b:95:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:09 2025 by rpki-client