Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D779B628F35E11EFAD6C64BD762E951A.roa
File: D779B628F35E11EFAD6C64BD762E951A.roa (raw, json)
Hash identifier: GatQXh7kO2mV2Boe3PeLfUBjNkduJSPsFZtdXdisN70=
Subject key identifier: D5:F0:80:02:3D:CF:A3:C4:66:9C:BC:50:7D:DD:8F:BD:16:BE:BD:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D779B628F35E11EFAD6C64BD762E951A.roa
Signing time: Tue 25 Feb 2025 09:56:54 +0000
ROA not before: Tue 25 Feb 2025 09:56:50 +0000
ROA not after: Sat 19 Feb 2028 09:56:50 +0000
asID: 17561
IP address blocks: 154.83.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89628 (0x15e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:56:50 2025 GMT
Not After : Feb 19 09:56:50 2028 GMT
Subject: CN=67bd93e6-f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:96:48:d3:66:d1:d7:12:60:48:18:ff:3b:
92:e9:a1:a4:0b:89:37:dc:7c:ae:37:13:1f:53:36:
8b:41:28:d0:7f:88:3f:08:15:1a:8d:af:8a:1a:7b:
09:58:c6:7f:2e:46:61:5c:0e:41:e3:56:56:dc:fe:
fd:91:98:cb:29:97:b5:f9:d7:dc:9e:81:a9:5e:b8:
63:db:b2:81:e1:07:92:ba:7a:e2:26:01:65:ca:04:
11:15:dd:8b:9d:3b:6b:fe:c9:74:84:93:3d:75:ee:
e3:17:24:4b:25:a7:d9:23:d7:de:64:ba:60:44:7b:
17:89:5a:d6:3f:33:8f:60:48:9c:14:ac:b4:75:ea:
43:de:b9:04:f1:53:c6:ad:1d:34:05:e3:bb:ab:71:
63:75:f2:f3:76:ce:bb:72:72:75:30:3a:c6:e1:5c:
d7:33:bc:fe:41:e4:70:66:b3:d7:38:8e:0f:4d:d0:
b5:44:3f:7f:d7:55:54:d5:6a:ba:7f:1a:ff:81:b9:
3f:81:6c:62:69:f4:ce:75:0a:9b:63:23:0d:70:9d:
a9:a5:ea:55:11:69:1d:32:4f:f8:d7:61:cd:91:42:
e1:5d:f1:0c:ba:f8:06:19:93:9b:e0:8f:8a:12:ea:
f8:3f:26:81:6f:0b:f4:65:39:bc:03:c3:3c:a5:12:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:80:02:3D:CF:A3:C4:66:9C:BC:50:7D:DD:8F:BD:16:BE:BD:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D779B628F35E11EFAD6C64BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d4:fa:73:25:dd:0c:09:68:0e:d9:63:6b:a1:85:30:0b:49:
34:0b:11:02:89:10:16:e2:15:ea:52:53:62:26:43:5e:bb:ba:
ca:58:b6:80:42:26:b9:19:53:78:1e:fb:29:7e:d1:cb:17:68:
12:84:75:8a:3a:1f:c1:80:59:77:05:07:b8:33:15:44:01:ea:
a3:45:db:25:c4:ea:c7:0b:ec:e7:16:42:57:ce:9b:e0:38:9b:
bd:56:19:5d:96:30:63:89:8b:1e:f0:cd:4e:54:12:e4:7c:f2:
5f:76:2d:22:e0:f6:47:90:3f:a1:f4:5f:ab:0f:5c:bf:2e:02:
8a:01:c6:58:d0:37:b2:f9:e3:b9:1a:b0:dc:e1:8f:da:e7:b2:
86:73:b5:4c:2c:9d:bb:97:55:26:3e:71:ac:d6:b5:1f:6c:b6:
33:6f:34:37:1c:4b:ed:59:31:69:e1:d5:4e:e7:9e:47:1f:af:
a5:28:88:1b:e9:f4:c7:ef:29:02:23:cf:15:17:14:b4:d9:6c:
e4:92:5c:4b:df:3f:c3:2f:e8:8f:1e:e6:ab:92:c3:31:4e:23:
74:76:8f:aa:2d:bc:f8:ff:13:51:b7:b0:e5:06:5d:ef:cf:e3:
70:ea:4d:11:9c:be:bb:6e:e6:a0:9f:cf:d3:af:c3:60:f7:88:
27:fb:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:42 2025 by rpki-client