Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC372E6C8BA11EF942A838B762E951A.roa
File: BEC372E6C8BA11EF942A838B762E951A.roa (raw, json)
Hash identifier: UuQ4yNgb8u7y9L6E6AaT63ly1cDUG3Geqd58wUmFjRs=
Subject key identifier: F1:B5:4C:66:13:9D:DF:90:B1:E9:E8:BA:30:D3:F7:4D:7F:8F:97:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC372E6C8BA11EF942A838B762E951A.roa
Signing time: Thu 02 Jan 2025 03:36:26 +0000
ROA not before: Thu 02 Jan 2025 03:36:22 +0000
ROA not after: Mon 13 Dec 2027 03:36:22 +0000
asID: 17561
IP address blocks: 154.221.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78284 (0x131cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:36:22 2025 GMT
Not After : Dec 13 03:36:22 2027 GMT
Subject: CN=677609ba-adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:e4:32:ee:c5:fa:9f:c8:77:e9:fc:12:86:
40:51:8f:a9:52:3d:fc:ae:24:b3:3f:18:ae:aa:7c:
cd:fc:a8:e7:a3:e9:0e:1a:9f:93:c3:dd:de:9e:b9:
bb:38:63:ac:f9:57:ff:52:a4:ec:90:33:1f:64:df:
7d:f6:08:8c:89:08:cb:57:40:5d:ac:40:05:88:80:
cf:89:9d:1f:e7:d8:9f:34:53:01:9e:4b:cc:e9:df:
93:aa:e3:2f:21:dc:cb:ef:07:73:83:5c:bf:62:f9:
9a:0a:cd:85:96:10:a8:de:a9:99:f2:a5:99:01:8b:
11:a4:05:15:c5:1d:83:f1:ac:7d:30:d6:8a:a2:7d:
5c:88:04:92:20:ba:02:22:06:b3:88:64:0a:5e:cd:
52:d6:40:50:f4:57:24:0d:6e:84:be:fa:8e:34:21:
97:92:de:16:0f:fc:28:e3:c4:4d:dc:3a:1e:d4:da:
b4:94:b9:d4:bb:6c:2f:ff:84:c8:25:99:47:bd:02:
ba:a0:0b:5a:30:be:95:2b:46:46:50:79:62:ee:9b:
4d:0b:09:b6:88:8d:d7:92:03:8d:26:59:59:e0:38:
75:9d:59:4c:0a:72:aa:24:16:cc:3f:98:67:6b:8a:
bc:d6:26:c0:07:d2:e3:2f:67:b4:f0:d2:c3:42:11:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:4C:66:13:9D:DF:90:B1:E9:E8:BA:30:D3:F7:4D:7F:8F:97:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC372E6C8BA11EF942A838B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.38.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3a:dd:24:7f:c8:04:cd:9d:97:92:7f:a4:8d:02:09:14:ce:
36:e7:f2:97:77:d2:a1:87:58:d2:a7:83:3a:fd:e3:ab:a5:a6:
2f:19:11:1d:f5:e5:28:97:9c:ef:35:ad:0a:54:5b:08:35:ec:
c1:22:3b:e7:e4:d6:55:a9:56:95:3d:0a:af:0e:07:61:53:8f:
2c:4a:09:d0:74:ea:6f:93:8a:28:ff:e5:df:63:55:fe:b7:72:
36:ca:a3:21:32:cf:4a:83:67:b9:9d:3c:3f:dc:44:d1:6f:7c:
7a:2f:c8:fc:8a:83:db:13:1e:07:38:24:3d:37:31:36:d2:35:
8e:06:9d:bb:08:4e:85:51:08:49:27:90:ec:8e:d3:74:ec:ce:
88:27:e8:45:ff:7c:e3:bb:7b:6f:16:1e:fd:b8:ab:8d:f5:c2:
92:c8:d7:18:2f:ef:14:82:3f:74:58:c4:8c:e9:34:ab:34:07:
d9:13:82:2a:ee:f7:3e:47:a0:c9:57:54:f2:0e:f5:37:aa:d4:
83:88:a2:d3:ae:a5:1f:6d:d9:38:91:0a:90:e6:3d:44:a9:5e:
79:d1:9c:84:ea:4a:bb:f2:2b:ff:95:e9:45:6a:85:6a:54:4a:
8c:30:80:63:04:b1:7a:ef:24:d3:25:cc:5d:09:98:01:ad:bf:
82:80:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:26 2025 by rpki-client