Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9AB1B6AF34C11EF8A4B1946762E951A.roa
File: D9AB1B6AF34C11EF8A4B1946762E951A.roa (raw, json)
Hash identifier: u177w9yAF4A2JL4ZqNjR/tuyMN9G2pRFX1K6cO6Ub2k=
Subject key identifier: 55:52:2D:2B:42:D7:E6:48:5E:37:F4:20:7C:3B:F8:B5:BC:50:B0:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9AB1B6AF34C11EF8A4B1946762E951A.roa
Signing time: Tue 25 Feb 2025 07:48:07 +0000
ROA not before: Tue 25 Feb 2025 07:48:03 +0000
ROA not after: Mon 07 Apr 2025 07:48:03 +0000
asID: 138915
IP address blocks: 154.223.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89450 (0x15d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 07:48:03 2025 GMT
Not After : Apr 7 07:48:03 2025 GMT
Subject: CN=67bd75b7-6f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:a1:d3:30:cf:12:08:94:18:c6:7a:68:42:
bf:13:22:bf:a5:d3:35:23:01:74:9b:7c:40:e3:3e:
4e:ea:99:61:97:2f:5c:0d:46:0e:1a:33:23:c7:c2:
a0:6e:c4:bf:bd:78:b9:86:10:b6:3f:73:29:a8:2d:
bc:73:b6:8e:1a:8f:f6:95:89:1e:6e:9b:af:e7:07:
90:d1:c2:81:a9:79:97:89:b4:3e:b4:e2:3d:dd:48:
c5:84:e5:58:24:9f:1e:08:2b:42:39:7d:53:ef:af:
e3:0c:24:01:88:90:8b:6b:47:3e:1b:49:91:be:a3:
a4:0b:44:8b:12:cd:c5:f7:51:f0:84:64:c3:a9:f8:
24:2b:c3:27:c2:58:43:b4:90:53:ca:6f:86:f4:9d:
12:ec:a5:6f:e1:0a:ad:67:a5:42:81:e0:c2:98:31:
68:b2:d4:60:fc:c8:0f:a6:ed:35:ac:60:5e:a6:e0:
b0:93:77:bd:33:65:f2:b5:45:44:9b:6c:f8:c4:2c:
18:a8:eb:3f:29:0b:0c:7b:ad:ac:33:27:8f:e4:57:
33:ce:1e:2c:0c:55:4f:bc:20:49:15:93:65:97:33:
f0:7c:57:f9:cc:00:8e:b2:53:82:5e:a3:f9:7e:bf:
3c:98:37:cf:60:1a:ab:4c:14:ef:6b:06:74:67:6a:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:2D:2B:42:D7:E6:48:5E:37:F4:20:7C:3B:F8:B5:BC:50:B0:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9AB1B6AF34C11EF8A4B1946762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.72.0/23
Signature Algorithm: sha256WithRSAEncryption
73:8f:a2:2a:25:29:89:bc:3d:aa:ca:b9:a3:e9:67:11:ad:ce:
d5:69:d6:1d:87:92:d2:5f:1c:97:12:94:3d:6f:4c:9c:99:0a:
09:84:b4:85:d4:e5:01:96:f5:a6:25:76:fb:03:84:c5:ab:97:
76:a8:1d:98:0e:da:94:59:fa:12:fa:1e:56:2b:c4:5f:bc:69:
a3:d6:0f:e9:58:94:0f:12:c1:88:a8:b8:2d:42:1c:c0:7b:76:
d8:1e:da:13:aa:99:ae:7d:1c:24:53:b9:fd:0e:86:25:a2:6f:
c3:16:7a:a7:04:6d:32:82:32:45:84:92:0a:20:27:38:ac:9a:
3c:45:5b:77:28:c5:6e:b1:09:d0:c0:3f:d0:f4:6e:0c:55:d6:
e1:2c:96:49:b5:82:a3:c3:6d:2c:15:d0:a9:54:01:40:5e:5f:
e2:d8:c1:67:ee:ee:3d:7d:ca:d7:c4:51:97:1b:bb:ec:90:9f:
87:d0:b8:b8:97:49:a9:10:e6:50:a8:43:61:05:d7:a0:4a:b7:
5a:3a:ca:b9:f7:5d:af:db:b8:6e:e8:c5:21:7d:c0:04:73:29:
d2:2c:eb:f5:13:f9:bc:bc:00:f9:0e:bd:bd:d1:3a:31:9b:7e:
ca:46:26:7f:75:ed:da:79:07:ec:d8:e1:b0:7f:e6:06:77:da:
94:0c:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:20 2025 by rpki-client