Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E85E1CC00CAB11F0BF8D4FB4762E951A.roa
File: E85E1CC00CAB11F0BF8D4FB4762E951A.roa (raw, json)
Hash identifier: WwiuWRiuKZ63XlEMpHIeBr4z/JL+YDi4ZDnF4yBM+J8=
Subject key identifier: 65:AC:AB:20:96:29:A2:20:BF:40:74:AD:82:51:DC:0C:82:F1:F2:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E85E1CC00CAB11F0BF8D4FB4762E951A.roa
Signing time: Sat 29 Mar 2025 14:41:33 +0000
ROA not before: Sat 29 Mar 2025 14:41:28 +0000
ROA not after: Mon 07 Apr 2025 14:41:28 +0000
asID: 9304
IP address blocks: 154.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95907 (0x176a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 14:41:28 2025 GMT
Not After : Apr 7 14:41:28 2025 GMT
Subject: CN=67e8069c-f27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:77:a3:d7:c5:37:c4:a5:c7:bc:82:df:8f:
b5:78:2d:91:6a:9f:25:98:3d:59:0b:41:67:e7:d2:
bb:63:f4:c0:20:ea:92:69:41:81:b9:d8:e4:cc:23:
4f:6e:60:89:8d:4b:02:c1:1f:47:f9:c9:64:e0:6a:
43:21:2c:58:03:c4:2a:ed:9d:41:29:2b:cd:81:ca:
73:f1:26:ea:ef:36:36:9c:6a:6e:77:c0:ef:c9:2e:
22:d6:17:01:26:0a:b9:63:46:e5:b4:c7:29:f2:2e:
b8:1a:33:42:68:7d:38:40:b1:21:68:64:f8:32:79:
d5:d6:cf:1a:57:27:3c:df:a7:ef:36:1e:f6:8b:91:
23:b3:7f:97:ed:d6:fd:bf:2c:08:4e:d8:89:d8:8a:
2e:df:32:d6:c3:ef:ab:52:e3:19:d5:69:2d:02:5a:
a6:e3:72:22:d8:f9:d4:c0:64:6c:4b:03:3c:0e:a4:
d7:aa:07:89:27:9e:3b:28:62:27:69:39:fa:1b:1e:
3b:d5:a9:27:1c:99:18:48:03:3c:90:c2:ae:9d:d9:
8f:1c:23:9b:91:b1:29:94:af:86:7f:3c:3b:9f:bc:
39:df:39:6a:6a:55:49:2c:3d:37:69:f3:c4:ac:05:
00:0f:fc:80:6d:a2:ea:ec:cb:60:a2:76:47:fc:30:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AC:AB:20:96:29:A2:20:BF:40:74:AD:82:51:DC:0C:82:F1:F2:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E85E1CC00CAB11F0BF8D4FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:4f:b1:e3:4f:03:e4:40:99:62:9f:ca:2f:68:dc:6a:eb:de:
d2:21:70:62:68:1d:b7:8c:a4:1d:78:d7:2e:f6:5f:23:11:d4:
0a:b3:13:16:ba:c0:78:16:8d:e1:a8:de:e5:df:df:d1:32:76:
7b:0d:5f:7e:f2:98:91:0e:80:40:e6:59:85:82:36:e6:fc:20:
30:9d:4f:f3:84:52:1a:b3:fc:e6:16:b3:27:fd:5d:b2:d5:cd:
86:d4:cc:f1:59:d5:c0:2b:00:e5:03:7a:64:87:9c:05:6b:13:
f0:df:e9:0f:e4:4a:3c:17:23:97:52:69:ad:c1:77:b5:61:46:
db:3e:26:69:50:ce:df:bd:d9:36:ec:a5:b3:92:dd:8c:16:ea:
92:98:74:75:98:1e:41:f2:75:c6:66:b4:5e:99:db:92:4f:71:
1c:6e:98:35:42:cd:e5:f4:0b:80:8e:ed:de:de:31:e1:0d:63:
54:9b:9d:8e:d4:6d:59:68:a0:d0:4c:b1:1a:6a:20:9e:95:11:
ff:54:93:ab:0f:4d:1e:3b:d5:6b:87:33:d6:ab:36:7a:90:a6:
06:75:33:5b:42:52:ab:85:0d:76:b9:9c:76:b8:10:31:33:5c:
ed:39:c1:01:53:c3:5a:31:3e:c9:0c:ec:dc:18:b1:7a:79:d9:
e6:08:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:14 2025 by rpki-client