Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F449F446E2CB11EFB7493B8F762E951A.roa
File: F449F446E2CB11EFB7493B8F762E951A.roa (raw, json)
Hash identifier: 64YPe3dxOi5LoD53MxvjM1y3ZANMKrqSu0O0lPxtdFI=
Subject key identifier: FD:69:E8:9F:C6:C6:F7:1D:95:D2:6C:2E:62:4E:4C:03:BC:77:70:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015084
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F449F446E2CB11EFB7493B8F762E951A.roa
Signing time: Tue 04 Feb 2025 07:45:08 +0000
ROA not before: Tue 04 Feb 2025 07:45:04 +0000
ROA not after: Wed 30 Apr 2025 07:45:04 +0000
asID: 18229
IP address blocks: 154.210.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86148 (0x15084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:45:04 2025 GMT
Not After : Apr 30 07:45:04 2025 GMT
Subject: CN=67a1c584-cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:95:d3:11:72:44:85:29:f4:7d:2c:53:02:
16:fa:71:41:ce:7d:73:fa:d6:ab:5d:30:a0:c1:24:
84:06:ae:45:e8:82:da:a7:85:21:ea:69:de:bb:a8:
37:6c:65:d4:9d:50:e0:1e:44:cf:5f:03:d1:7e:2c:
29:a6:89:28:51:20:19:6a:f8:44:1b:30:7b:e8:c1:
e0:fd:18:fb:ce:55:ee:38:dc:f1:84:6a:e6:9f:35:
48:0d:ea:45:0a:b4:9e:7c:5e:d9:85:33:f1:ab:06:
25:68:09:c4:04:ed:c6:28:02:4c:b0:53:9f:35:55:
d6:23:35:4d:31:23:21:aa:b8:b3:c5:1d:48:7c:25:
5a:db:ff:8c:2f:90:e5:9e:54:b6:2b:38:fa:c6:09:
af:bc:70:a0:e0:86:0c:d9:a7:90:ab:91:4e:53:dd:
c5:4c:4e:ce:19:22:49:de:ea:84:49:82:73:03:3b:
5f:4f:16:7a:10:cd:0b:97:e9:94:74:fa:2e:5c:d6:
a4:e3:d5:8b:48:b0:03:f6:f6:75:38:e4:f8:17:d8:
7f:95:fd:4d:20:78:7d:83:19:b5:4f:f7:01:76:a8:
bd:a6:08:0a:0d:b1:77:70:0d:d4:b2:2a:f8:79:ee:
d4:97:7d:cb:59:a8:af:a8:a7:5d:aa:c7:03:25:4e:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:E8:9F:C6:C6:F7:1D:95:D2:6C:2E:62:4E:4C:03:BC:77:70:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F449F446E2CB11EFB7493B8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.194.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ed:51:7d:6a:f9:83:5c:cb:1b:e0:9c:6b:8c:25:4a:75:90:
f5:0f:71:44:d7:73:ba:dd:8e:43:09:9b:0b:c7:6f:03:eb:6f:
a6:02:2b:39:87:e8:30:e2:1a:cb:cb:a5:03:bf:06:52:d4:a5:
3c:68:2e:04:14:4d:ff:d5:ba:af:3a:10:32:01:75:e0:70:78:
df:ba:7a:a3:f5:71:72:9c:02:25:0d:85:11:7c:a5:4a:bf:3e:
39:3f:27:4a:d2:b3:58:83:5b:3a:a7:66:4a:10:c2:89:f1:4c:
29:88:4d:92:40:04:f2:9b:24:2b:02:ac:c3:2e:87:04:16:b8:
9a:b7:89:d0:4f:43:00:74:a7:02:45:a2:1d:29:13:98:35:e4:
15:82:cf:6a:53:76:02:e8:a6:a3:06:ce:03:42:20:8b:a6:d8:
7a:1d:b1:73:ed:e9:87:36:36:5c:29:73:05:af:ff:3a:68:ed:
c3:e0:15:d5:0a:45:13:cc:f3:8a:96:7c:29:18:2a:ac:83:5a:
c2:86:31:66:51:26:b2:75:88:09:75:77:0f:2d:27:7b:16:50:
a6:5a:6c:19:1a:3b:ef:fe:b4:ec:1c:37:5e:39:61:44:44:5a:
c2:93:fb:b1:ce:3c:39:ff:41:40:b9:30:84:0a:c7:42:29:29:
e7:f6:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:57:06 2025 by rpki-client