Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C592BB50F45B11EFA02B118A762E951A.roa
File: C592BB50F45B11EFA02B118A762E951A.roa (raw, json)
Hash identifier: Wk040Kj616L9Qeh9xP+sk+3hW8MXNiNAzKz4Iyvw+88=
Subject key identifier: 09:66:87:37:04:34:A8:84:49:13:4D:9E:52:06:B0:71:F4:40:AF:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01650C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C592BB50F45B11EFA02B118A762E951A.roa
Signing time: Wed 26 Feb 2025 16:07:28 +0000
ROA not before: Wed 26 Feb 2025 16:07:14 +0000
ROA not after: Sat 19 Feb 2028 16:07:14 +0000
asID: 17561
IP address blocks: 154.82.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91404 (0x1650c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:07:14 2025 GMT
Not After : Feb 19 16:07:14 2028 GMT
Subject: CN=67bf3c40-c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:18:b2:cb:f6:a8:91:36:e9:53:b1:05:eb:
6e:8f:3d:fc:02:00:17:65:b0:84:15:90:6b:75:7e:
59:04:d1:52:1c:10:72:62:0a:2a:d4:db:04:e2:c4:
b9:57:99:dc:94:be:e6:21:7d:74:c4:b1:cf:05:cb:
bf:b9:52:5c:04:6c:fa:a8:84:9e:13:eb:f8:dd:37:
88:30:1c:db:6f:92:29:fe:9c:96:fa:63:66:31:5f:
cb:5e:80:fd:cb:24:c4:47:42:d5:a2:56:04:08:c9:
9d:dd:dc:26:eb:10:25:43:d0:bd:b3:7a:78:fd:9e:
b8:91:fe:d0:8f:72:1e:79:2c:fe:86:0e:58:60:87:
db:18:b9:aa:af:65:27:14:17:d2:5a:6f:b0:f9:c2:
4b:b5:2e:43:11:13:4c:3b:86:3a:f7:c1:bf:cd:9f:
a2:4f:40:06:35:7a:a3:d9:02:67:e2:6d:ef:d1:dc:
d5:70:65:eb:95:a9:dd:c6:d8:35:7b:b4:b8:5e:1e:
7f:72:38:05:7a:1f:93:22:e0:cf:04:99:46:55:86:
69:f9:10:28:89:08:0f:75:5c:95:51:c8:fa:20:31:
1e:cd:ec:51:97:f3:49:3e:a5:3b:80:3a:8a:9f:37:
45:e7:ae:79:e6:65:7a:c4:7b:ba:1c:22:79:3d:ab:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:87:37:04:34:A8:84:49:13:4D:9E:52:06:B0:71:F4:40:AF:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C592BB50F45B11EFA02B118A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.248.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ac:67:f0:60:3a:0a:8f:9b:99:f3:4e:71:d5:09:d5:a9:bc:
ca:a0:7d:53:5a:70:f3:85:51:9f:8c:bb:1e:bb:e4:14:6d:2d:
5b:d1:9d:e4:07:c3:e0:95:7f:d3:54:e2:d9:4b:e7:12:3e:58:
1f:53:d3:4b:82:1f:0d:4a:15:f9:54:41:f9:c1:1a:da:43:5f:
56:35:1e:a9:5b:45:85:e1:51:71:47:7a:f5:c6:73:e9:7c:28:
d7:8b:a5:c6:8e:0c:45:85:1b:98:fb:07:0a:b7:92:9b:e5:af:
79:db:7e:4f:fc:16:aa:9f:74:4d:e1:1d:0b:fe:09:07:d6:47:
91:8e:0b:3d:0c:ad:cc:09:01:fd:20:c9:0e:5b:83:ee:69:e2:
c4:7f:62:8d:77:67:30:49:05:21:ed:a8:89:23:b0:ca:68:1c:
9c:28:43:b5:31:10:94:7a:a3:a7:fa:7b:14:42:ab:49:c9:43:
94:c3:89:5e:af:eb:c9:bb:c1:67:d7:d2:b7:1b:5d:aa:57:06:
e7:b3:e1:b0:3f:aa:31:74:57:db:0b:a3:f5:8b:89:f2:65:40:
07:2d:aa:f5:85:9b:ff:47:9c:0a:66:7b:ee:65:cf:40:e2:b1:
99:b5:ca:e7:66:d5:47:f1:f1:9c:d7:75:85:cb:d4:4a:f9:17:
76:a0:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client