Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4110C1CF47811EF99C65852762E951A.roa
File: F4110C1CF47811EF99C65852762E951A.roa (raw, json)
Hash identifier: 1sCIX17Yyi/gZfxdOrOvaGwm4MpW7MQXjIgtKQNvU6k=
Subject key identifier: CE:2A:31:CF:56:82:66:3D:94:0A:A6:F9:BC:ED:80:2A:94:53:39:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4110C1CF47811EF99C65852762E951A.roa
Signing time: Wed 26 Feb 2025 19:36:20 +0000
ROA not before: Wed 26 Feb 2025 19:36:16 +0000
ROA not after: Sat 19 Feb 2028 19:36:16 +0000
asID: 17561
IP address blocks: 154.218.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91567 (0x165af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:36:16 2025 GMT
Not After : Feb 19 19:36:16 2028 GMT
Subject: CN=67bf6d34-e757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:94:8c:11:9b:fc:b2:ed:97:76:d6:a3:13:
56:d2:64:ee:dc:09:a8:4d:b6:a1:93:2b:86:88:83:
8a:11:ed:16:8a:b5:c7:d9:b8:58:dd:ce:dd:ef:3c:
45:7f:b7:3e:b3:1a:bc:af:50:d5:a5:48:65:ae:7b:
ad:dc:be:49:c8:5d:95:45:3e:58:3f:f5:34:72:c9:
bd:a5:bd:cf:ad:76:a6:a4:87:51:07:08:65:05:75:
f8:0f:ff:08:69:cf:00:18:70:b9:9f:5f:c4:01:05:
d3:02:d9:83:f7:b8:d9:67:e8:2e:64:f9:2a:9a:eb:
27:9a:d7:85:d4:0a:58:5c:1a:15:e0:17:92:63:3b:
e2:36:e4:fe:9f:62:a1:2f:1d:dd:ed:3e:94:21:a6:
45:b5:da:5e:97:7c:12:80:28:c5:d2:1c:87:32:33:
57:b5:dc:84:71:71:48:4d:07:8b:ae:7c:b4:72:e6:
ae:58:3b:fc:4a:4d:7e:19:91:cd:87:d9:2e:fc:c4:
b3:38:84:69:b3:49:43:d0:cf:a6:e2:f0:76:de:63:
e6:7d:61:75:98:74:de:73:3e:75:8f:6e:a5:3d:e3:
f1:be:06:1f:b2:f5:b4:0f:24:0b:ca:95:24:d7:a1:
ab:77:1f:55:96:b9:ca:7c:6e:ba:43:dc:ee:2b:5e:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:31:CF:56:82:66:3D:94:0A:A6:F9:BC:ED:80:2A:94:53:39:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4110C1CF47811EF99C65852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bc:51:0e:c4:a5:5c:d1:4d:6f:2a:6e:12:31:2c:91:80:eb:
25:d0:8d:7a:1a:6f:8e:94:e1:51:b0:0c:1d:8a:e7:05:e4:f0:
5e:3f:02:82:1d:81:0a:6e:cf:da:63:64:38:c3:c0:9c:71:d7:
02:78:94:9c:6e:82:09:9d:65:86:45:7f:ec:c0:89:ba:5a:06:
e2:52:2f:33:4f:59:f7:ec:28:79:cc:6b:92:ab:ad:90:9e:3d:
da:15:34:df:fd:c1:6a:a1:d3:25:b3:d9:9a:5a:e1:df:a8:e2:
6c:5c:92:ec:9e:a8:1f:81:64:77:22:e1:79:5e:4e:da:48:14:
f8:1c:a0:06:80:37:f1:b6:9a:a0:01:c0:5e:40:65:18:92:7b:
3a:5c:1b:f3:a5:d8:98:93:c7:ec:6b:28:0d:6c:ee:f5:7d:f9:
38:67:f4:86:66:c4:0c:27:0f:51:e8:3e:8c:96:46:6d:a4:2e:
c4:d4:fd:35:40:05:ba:9f:ae:50:d8:db:76:7b:52:76:a3:0c:
2e:36:fc:90:aa:ca:c4:ac:3d:70:95:74:93:6b:6f:09:05:c1:
fc:1b:2f:55:ca:ba:bb:83:2f:a8:5d:e7:ea:ef:7c:05:d3:0a:
03:df:e5:80:4f:7c:ca:0a:97:f0:e1:ff:3d:8e:95:08:fc:2a:
cf:8b:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:11 2025 by rpki-client