Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5C32D20CAF11F0A071CB4E762E951A.roa
File: EB5C32D20CAF11F0A071CB4E762E951A.roa (raw, json)
Hash identifier: kz7CuLCngAF7ag507NRKqswjNDgEXbTrZNzT8lSWWoY=
Subject key identifier: 55:04:79:CA:DD:82:43:A9:42:3D:DA:2D:75:1E:D5:06:56:5A:03:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5C32D20CAF11F0A071CB4E762E951A.roa
Signing time: Sat 29 Mar 2025 15:10:16 +0000
ROA not before: Sat 29 Mar 2025 15:10:11 +0000
ROA not after: Sun 06 Apr 2025 15:10:11 +0000
asID: 138152
IP address blocks: 154.211.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95917 (0x176ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 15:10:11 2025 GMT
Not After : Apr 6 15:10:11 2025 GMT
Subject: CN=67e80d57-e049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:bd:71:dc:ba:8a:19:54:25:4b:e7:5e:be:
c8:a9:55:8b:10:ea:20:3a:d1:4e:68:82:a8:f4:46:
a6:f4:9b:ed:61:97:4c:a5:c7:74:f9:f9:a0:bd:05:
23:a9:27:f5:67:65:52:b2:04:b0:bc:bb:ee:32:23:
6b:1e:cb:8f:9a:c9:24:2e:a6:e6:55:3d:fd:0c:0c:
dc:ab:0b:e3:0f:78:63:74:89:f0:e0:c2:c1:17:8e:
b3:6d:ff:d1:23:65:fd:db:fa:6d:bc:77:89:30:85:
3e:fc:ac:f7:1b:1d:32:f2:f5:e8:fd:60:dd:cb:04:
d7:a0:39:20:90:c6:13:4f:6c:7c:87:c7:49:f7:b5:
da:82:13:f8:fd:7d:13:67:64:70:cf:1b:70:33:b3:
9e:61:fa:e3:01:92:27:43:47:87:cf:6d:03:c9:52:
a7:4d:c4:7f:45:96:e8:fa:39:7c:e0:44:c6:31:46:
46:97:27:87:46:3f:f6:5f:bc:df:d1:94:e1:3e:18:
0a:16:08:6f:7a:92:f2:3a:42:a7:4c:ff:84:e0:0d:
83:86:11:bb:eb:08:e7:42:6f:17:7c:4a:ea:6a:29:
78:e4:db:05:0e:59:e1:45:6e:43:5e:46:b0:eb:b5:
19:86:f4:b1:bb:c7:af:a8:9b:26:1a:d2:36:e2:27:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:79:CA:DD:82:43:A9:42:3D:DA:2D:75:1E:D5:06:56:5A:03:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5C32D20CAF11F0A071CB4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:b9:be:a6:74:e4:97:75:6b:17:5f:af:f7:56:89:80:4a:
38:dc:b3:45:99:6c:18:0d:7e:c1:32:0f:30:a1:62:bf:3d:1a:
ac:bc:02:03:44:97:f8:9e:27:3b:ff:69:43:04:41:27:e6:ce:
a3:91:3f:c2:c2:22:68:d2:f0:ba:17:f2:40:03:5e:48:04:d9:
6c:0e:39:4c:4d:ad:11:ac:b9:9e:26:a5:1c:14:93:6b:e4:06:
ad:5e:d3:af:3f:b5:21:ae:81:f4:6b:27:19:63:8b:4d:8e:0a:
d3:0d:80:e7:a4:5d:02:e1:72:4e:d1:5e:05:d9:6c:50:c2:8f:
33:3a:26:06:98:83:b2:44:5e:d3:e8:91:3e:e8:ea:d5:cf:4d:
52:20:41:f1:16:1b:9f:b7:99:7b:5a:88:d5:fb:94:d9:a5:de:
24:5b:cc:c5:95:c3:b7:27:fd:49:87:22:f7:12:48:3d:ba:b7:
15:74:8c:45:0a:93:a8:b9:89:65:12:d7:6c:ae:6b:df:fa:de:
47:33:3f:88:0e:6f:a6:c6:19:28:8f:64:aa:38:55:07:5b:83:
a3:ce:7c:7f:a0:82:73:05:95:75:5b:d5:63:9c:d7:15:a8:4d:
a3:5e:6f:e9:19:9c:84:10:fc:0f:6a:f3:88:e0:d6:02:a4:7e:
a8:fa:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:36 2025 by rpki-client