Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19DA41EC8A611EFBEE2F97B762E951A.roa
File: C19DA41EC8A611EFBEE2F97B762E951A.roa (raw, json)
Hash identifier: 97RaD3JfpAdrlnpUHpBWo8kStczf/k7PO4nS+mwo/tA=
Subject key identifier: BC:FB:10:D7:77:4C:8E:79:8E:F4:BB:3E:3C:1B:B9:FD:99:36:F8:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013150
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19DA41EC8A611EFBEE2F97B762E951A.roa
Signing time: Thu 02 Jan 2025 01:13:21 +0000
ROA not before: Thu 02 Jan 2025 01:13:17 +0000
ROA not after: Sun 12 Dec 2027 01:13:17 +0000
asID: 17561
IP address blocks: 154.220.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78160 (0x13150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:13:17 2025 GMT
Not After : Dec 12 01:13:17 2027 GMT
Subject: CN=6775e831-ae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:be:7b:1b:c9:d0:af:c4:78:6a:49:9f:11:
ef:68:3c:f4:82:a1:98:b9:20:b3:f0:de:cb:1d:17:
1c:a3:d9:69:05:2c:ba:95:5f:80:26:e1:85:71:fc:
f1:6e:6b:a5:a8:57:f6:1b:4f:d9:77:42:81:4a:60:
98:75:6a:10:1a:f9:46:b4:45:ce:55:c3:7b:60:bb:
b9:52:d2:90:d7:84:d9:3a:76:9c:24:9a:3c:2c:7d:
cd:e1:a9:9a:80:8c:44:93:25:5c:4c:28:07:94:5a:
ca:cc:52:37:e4:6c:e5:58:69:62:c9:62:48:bd:1f:
30:08:3f:54:e5:49:5a:11:e0:aa:6e:b6:03:d5:f5:
4a:47:55:19:bf:f5:eb:41:e7:cc:7a:92:7d:d8:b0:
c0:05:58:07:0d:67:db:93:32:01:f3:9c:d7:61:43:
b7:77:4c:03:80:68:1d:a5:d9:6f:44:1c:53:b3:a0:
72:04:a8:e9:30:40:0d:15:30:f8:11:b4:7a:d0:c8:
22:34:9e:e3:5a:b3:88:a8:78:1e:84:d7:e8:a3:6f:
4f:70:4c:26:f6:af:4f:84:7f:fe:bc:4f:6b:38:f1:
c3:92:5b:a9:d5:8b:d8:dc:e8:96:17:b3:41:50:c0:
b9:85:4b:c2:ca:d7:bc:c2:44:6b:0d:fc:52:0e:fe:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:10:D7:77:4C:8E:79:8E:F4:BB:3E:3C:1B:B9:FD:99:36:F8:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19DA41EC8A611EFBEE2F97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:46:2e:03:dd:ac:27:6e:95:7c:87:0d:76:49:3d:64:3c:90:
c4:e9:57:3c:e7:5b:9b:57:e8:e1:d6:16:c7:18:c5:e5:21:ea:
ea:b8:91:e6:24:55:06:3a:bd:5d:37:90:01:56:83:ef:f6:f8:
8d:89:29:47:72:af:07:c6:8d:d4:13:b1:bf:4d:d9:3a:c6:ab:
d6:79:29:f4:7c:80:09:5a:3a:ad:34:d4:90:87:e5:b5:1f:74:
b0:81:eb:87:a7:dd:67:6a:e5:6e:e2:5a:f3:88:5e:e2:39:b7:
ec:37:55:d1:52:4f:9c:28:95:22:59:00:41:10:83:92:ec:c3:
ae:dc:21:42:1e:80:4b:6a:70:12:ba:97:87:ab:84:b9:5b:b9:
89:be:b3:a5:71:11:0a:ee:64:4f:71:61:06:7e:b8:12:3b:63:
9b:25:e8:6e:68:3c:90:9c:94:65:83:cb:34:61:f8:07:1d:8f:
d8:5e:a2:93:52:3f:01:70:53:90:80:a9:2f:e4:84:0d:6d:b9:
67:f8:58:74:4e:89:dc:4f:f0:05:81:6f:3d:5d:45:55:fa:79:
78:ce:e5:69:66:b9:8c:26:b7:a3:98:58:8f:d3:dc:97:51:8c:
23:99:7d:1c:26:10:5d:20:f8:b1:52:2a:44:04:38:f7:67:56:
67:ff:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:42 2025 by rpki-client