Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BECD1860C8BE11EF9CCC6CA8762E951A.roa
File: BECD1860C8BE11EF9CCC6CA8762E951A.roa (raw, json)
Hash identifier: L3tetkUisFt45YzgJXVbC90Rn6SjQDBdSbHnQfUZTNg=
Subject key identifier: 3C:B9:77:E8:B0:CA:B5:C8:4E:27:F0:A3:B5:18:B3:6E:7B:E8:D2:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BECD1860C8BE11EF9CCC6CA8762E951A.roa
Signing time: Thu 02 Jan 2025 04:05:04 +0000
ROA not before: Thu 02 Jan 2025 04:05:00 +0000
ROA not after: Mon 13 Dec 2027 04:05:00 +0000
asID: 17561
IP address blocks: 154.221.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78318 (0x131ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 04:05:00 2025 GMT
Not After : Dec 13 04:05:00 2027 GMT
Subject: CN=67761070-7fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:e3:8f:38:46:d7:49:96:fc:ef:a6:17:8a:
d4:7c:f5:17:69:0e:1e:0c:df:da:d5:3b:26:09:23:
d2:6b:5a:d9:31:1c:ce:62:cc:64:f3:29:19:e1:d7:
6c:da:a1:2a:51:24:f8:5a:b1:fd:f3:33:52:6d:a8:
de:12:a7:e7:ea:7e:12:ee:ad:68:b6:0a:ad:b1:eb:
66:5d:ae:4f:b5:ef:64:7e:f1:96:0e:c2:bf:60:1d:
49:ed:50:44:34:65:10:e6:3a:d8:23:cb:3c:09:04:
67:74:6a:1d:cd:6d:e0:a1:3f:fd:e4:e0:ce:2e:6c:
93:f6:14:de:30:4c:84:6e:c0:13:53:41:2d:4e:0b:
e5:59:ca:c2:2f:3d:20:d8:49:cd:2b:7c:27:fb:37:
43:25:e1:8b:2f:41:2e:6d:88:a0:88:6f:fb:81:db:
15:03:c3:df:1c:82:00:bf:c7:7a:51:c3:7c:82:ba:
bb:ea:2b:74:b6:ae:2a:e5:67:8c:1a:4d:5f:c9:5e:
2b:f8:ab:48:6d:53:69:f7:34:4a:b5:a3:46:2a:36:
a2:c8:5a:7d:18:ad:79:bd:28:df:97:3c:19:de:17:
b7:97:df:27:1f:f9:86:f1:ae:e8:56:7c:1c:87:14:
9d:90:50:3a:d8:39:26:b9:4d:b5:d7:57:3d:4f:f1:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:77:E8:B0:CA:B5:C8:4E:27:F0:A3:B5:18:B3:6E:7B:E8:D2:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BECD1860C8BE11EF9CCC6CA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:26:82:aa:a9:3e:1a:90:7c:39:64:f8:67:7a:98:3d:de:ac:
d2:c9:4f:5e:3f:9f:8c:80:60:e8:8a:63:56:a1:2d:be:54:7c:
73:da:ec:2c:23:55:66:3a:17:fa:17:37:05:8f:b0:bc:17:82:
2b:7b:e1:b8:bf:02:0e:40:9f:52:ae:af:96:76:de:19:7e:9b:
84:37:7a:b0:17:d1:f8:1b:9a:be:ad:06:de:cc:70:3c:26:3f:
df:02:be:00:28:26:b3:0a:b0:24:d0:8c:9e:5f:36:f5:c8:c1:
71:c7:2c:dd:1c:7b:0f:ec:1d:e5:d4:34:b6:f7:06:ea:95:cf:
f5:c7:c4:df:02:7f:73:87:d4:51:8e:42:b7:ba:c0:a3:ab:c5:
bf:24:a1:6b:f8:5a:0e:10:e0:78:ac:93:23:51:e0:3e:21:50:
fa:a7:8a:58:22:a4:75:75:48:45:ec:2c:39:4f:9a:51:f7:86:
23:c9:4f:40:37:a0:58:0e:c5:3b:29:a2:bb:d9:16:af:a7:44:
68:52:1c:c6:3b:25:fe:3a:45:6f:27:05:31:2d:40:85:17:a2:
0c:03:53:d7:89:a9:08:c1:99:71:41:b6:a1:dd:81:4b:8b:11:
c5:0b:26:12:51:e1:b0:11:0e:a3:52:ea:06:b0:aa:2d:52:5f:
d9:c5:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:21 2025 by rpki-client