Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FC6B78F44611EF90CEE376762E951A.roa
File: D4FC6B78F44611EF90CEE376762E951A.roa (raw, json)
Hash identifier: YIvhHoqKfxpxxRdNGtRWjJvUVw8CosV5zx4bKbxi07s=
Subject key identifier: A1:72:B7:5A:19:C6:00:ED:56:C0:65:BA:EE:4C:43:13:51:2C:32:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FC6B78F44611EF90CEE376762E951A.roa
Signing time: Wed 26 Feb 2025 13:37:33 +0000
ROA not before: Wed 26 Feb 2025 13:37:29 +0000
ROA not after: Sat 19 Feb 2028 13:37:29 +0000
asID: 17561
IP address blocks: 154.82.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91099 (0x163db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:37:29 2025 GMT
Not After : Feb 19 13:37:29 2028 GMT
Subject: CN=67bf191d-64f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:f9:fa:77:b6:0f:82:8f:e6:e9:e5:09:fe:
24:fb:a5:fa:c2:c5:9c:67:e0:9f:fa:6c:67:f7:84:
b4:bf:a5:a3:ba:62:8b:59:9c:ed:f3:d6:43:50:6e:
43:14:fa:e0:a7:26:6a:2f:03:0b:9b:a2:9f:62:86:
82:d6:88:d3:77:34:25:44:60:68:6e:17:df:e5:e1:
dd:55:2e:0a:20:25:c6:46:79:7f:92:0b:71:70:51:
00:3b:bb:c8:1e:aa:ed:c4:df:5f:db:58:ec:0b:cf:
94:8b:72:c8:e4:6a:4b:67:bf:8b:62:b6:d2:07:f4:
11:e4:53:09:3c:77:8d:1e:0a:dc:cb:aa:9b:fe:f1:
0f:89:4d:be:c4:7a:7f:c8:1b:cf:a8:d5:8c:d1:8a:
a3:0b:81:da:37:d0:78:3d:8e:a8:76:43:6b:41:3e:
ff:f1:db:78:93:de:b0:88:85:6d:bf:10:37:2e:ad:
a0:8b:34:e6:83:4b:72:f0:6f:5c:2f:d6:2d:45:7f:
ec:d8:c9:0d:61:4c:a1:a2:2d:35:3a:15:f1:6c:d2:
ef:af:50:d5:f8:c4:6f:f6:49:3e:b6:34:04:1c:28:
2e:45:7a:56:5a:6e:d7:05:42:91:46:28:e6:f5:82:
c5:a1:60:5e:43:ed:26:2d:78:c6:13:f5:61:f7:c3:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:72:B7:5A:19:C6:00:ED:56:C0:65:BA:EE:4C:43:13:51:2C:32:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FC6B78F44611EF90CEE376762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.183.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e2:c7:5c:f5:e1:0e:25:50:33:a6:ed:72:eb:0a:04:3f:86:
a3:39:af:83:ae:f1:07:53:ee:c4:1d:e6:a2:4c:45:ff:7d:2a:
83:18:52:c8:50:66:55:48:00:14:64:59:9d:21:82:8f:b9:f9:
34:f6:1c:c4:06:e6:8d:0d:56:d2:4b:23:4b:bf:5a:02:22:e5:
3e:d3:84:4d:83:8b:ce:77:f0:ac:ff:25:c5:f4:be:03:e8:15:
98:4d:e0:55:bb:05:28:ae:d4:2c:12:6e:27:d4:21:9a:45:23:
1b:09:f9:c1:6e:0c:3d:8b:4f:7d:4f:ae:ef:ab:90:20:83:c5:
71:8a:51:a8:ec:af:c6:9e:09:04:25:6d:fc:3f:9d:2a:94:ec:
8a:85:f6:9d:08:11:17:39:50:eb:f5:cf:33:f8:f4:5f:47:ec:
72:19:84:2e:0c:25:ac:a5:8c:4a:ef:7d:88:15:f3:2e:48:23:
5f:e8:c7:62:9d:93:79:2c:79:b2:b3:eb:89:e5:a7:e9:88:48:
3b:3a:8c:ad:2a:c4:5b:bd:19:90:57:21:ab:05:6e:9d:b4:42:
fa:d5:ff:17:f1:2b:a1:06:6b:11:7d:2a:9d:67:c0:87:dc:62:
b7:bc:de:16:0d:65:68:74:98:6c:49:6e:f4:47:4d:a9:a2:7c:
86:40:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:05 2025 by rpki-client