Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2BC82F0F5CD11EF8C44CE81762E951A.roa
File: F2BC82F0F5CD11EF8C44CE81762E951A.roa (raw, json)
Hash identifier: OywNSX1SzLYH0FE8o/h+HlSj/DhIqtxVCA+NpM6JSfE=
Subject key identifier: 41:FD:74:F7:5C:DF:D4:2B:18:DD:75:3D:9B:83:7B:75:F7:7E:95:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2BC82F0F5CD11EF8C44CE81762E951A.roa
Signing time: Fri 28 Feb 2025 12:17:16 +0000
ROA not before: Fri 28 Feb 2025 12:17:12 +0000
ROA not after: Thu 20 Mar 2025 12:17:12 +0000
asID: 58460
IP address blocks: 154.81.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92954 (0x16b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:17:12 2025 GMT
Not After : Mar 20 12:17:12 2025 GMT
Subject: CN=67c1a94c-1235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:0a:2e:8b:5c:6c:9d:85:92:a4:19:dc:bf:
e5:35:2a:1c:9d:d9:38:8c:e6:e1:a0:4c:2d:c8:7d:
22:aa:08:04:3b:8f:75:69:11:80:20:6c:50:22:7a:
f6:bb:c8:1b:a2:da:4b:42:33:c8:d4:48:5c:37:b2:
cf:15:b6:1c:57:62:a3:2a:38:02:4f:9e:01:a8:ca:
c5:64:91:1b:b7:e4:88:6f:23:16:8a:8b:78:23:ca:
5b:ef:bf:de:e5:30:37:5a:b5:7e:0e:cc:f5:e9:42:
7e:4f:c3:e6:f1:3d:5d:e6:a5:91:b6:f4:a2:52:16:
d7:91:5b:92:bd:a7:40:86:26:39:55:8c:06:af:f0:
dd:1d:8a:21:18:b0:ca:0c:95:82:e1:6e:5e:ce:83:
02:62:20:44:7a:25:98:07:b1:d8:56:b2:b9:c1:94:
93:23:f9:98:c1:ba:38:fc:a4:e9:10:2f:f1:31:b6:
09:95:1a:ed:07:37:99:17:66:68:93:ee:5a:46:45:
b0:0f:c6:dd:6a:60:ac:05:c4:b2:ed:b3:60:f7:23:
b5:ff:cd:9d:15:02:5b:4a:6f:c6:aa:be:42:9a:03:
ec:2c:f4:fd:5d:40:29:a5:e5:d6:b3:21:33:39:2b:
64:e1:f7:fb:a7:6a:c0:23:b0:98:8c:f2:73:22:e2:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:74:F7:5C:DF:D4:2B:18:DD:75:3D:9B:83:7B:75:F7:7E:95:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2BC82F0F5CD11EF8C44CE81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.51.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ba:67:13:4d:4d:86:b4:e7:77:8a:fb:19:d6:9c:59:b0:9c:
12:f4:fc:4f:75:8d:b7:85:32:87:53:b1:1b:35:89:ac:0c:98:
00:52:3d:2d:63:e3:db:85:22:66:ee:cb:5e:08:4c:fc:39:d3:
7c:7f:dc:4b:6f:4a:17:54:8d:70:0b:f6:86:15:6c:b4:f1:25:
81:79:49:81:cd:ed:9b:4c:75:d8:cc:15:c0:fc:d4:1e:45:e1:
73:7e:c1:3c:5f:ff:4d:73:c4:94:0f:e1:aa:f5:13:77:2f:9c:
01:da:2b:96:2a:da:83:da:86:59:f3:21:93:35:c6:1c:9d:2f:
ba:60:95:bb:1f:f3:f0:73:a2:03:5d:12:18:a1:0f:49:38:03:
11:51:3e:5b:99:08:c3:8b:fb:73:b2:43:93:86:b5:6f:02:3b:
af:29:6d:68:cc:92:2c:3e:82:ae:07:da:11:23:95:cc:82:5c:
92:e5:09:fe:9d:dc:0a:e6:dd:66:65:4f:14:7c:61:35:73:98:
89:6e:a8:36:a9:65:c7:45:de:48:91:ba:a8:da:56:5b:75:ac:
36:ba:bd:aa:17:bc:85:b0:c1:e9:f4:b2:8f:be:aa:92:3a:75:
34:05:9d:2b:db:4c:88:1b:60:cb:28:62:0f:37:c2:e9:e0:b8:
dd:ea:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:28:42 2025 by rpki-client