Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59C2560C91911EFBEF42861762E951A.roa
File: F59C2560C91911EFBEF42861762E951A.roa (raw, json)
Hash identifier: CAr7fnjQ5riqcBXm3UPplG59pvex+uVady1iTM422tk=
Subject key identifier: E9:46:09:89:88:20:0F:A0:10:EE:E3:23:7A:B9:6F:65:94:C9:F6:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59C2560C91911EFBEF42861762E951A.roa
Signing time: Thu 02 Jan 2025 14:58:00 +0000
ROA not before: Thu 02 Jan 2025 14:57:57 +0000
ROA not after: Mon 13 Dec 2027 14:57:57 +0000
asID: 17561
IP address blocks: 154.222.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78577 (0x132f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:57:57 2025 GMT
Not After : Dec 13 14:57:57 2027 GMT
Subject: CN=6776a978-95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:a6:dd:a8:a1:32:08:94:cc:0a:f8:9d:24:
eb:ec:f6:cb:68:c9:b8:9a:74:f7:1c:9e:3a:3b:c3:
68:51:44:4c:97:fa:e6:c3:e2:d2:90:49:3e:14:18:
a3:4e:29:e9:c2:22:29:b2:84:76:a5:17:81:a1:b8:
4b:4c:0d:6b:43:31:17:ea:3a:40:e2:94:ce:85:28:
04:0b:8e:88:9b:3a:5f:0f:96:da:c6:e1:5c:ce:14:
dc:1f:a8:d8:5d:d2:62:33:df:ba:8c:49:d3:1e:a2:
e6:4a:b1:42:39:b6:fc:6f:33:64:7e:10:34:8e:d8:
fc:e4:6a:10:57:49:23:97:4b:05:c1:54:35:72:c4:
54:80:cd:59:ec:15:25:5a:20:37:27:4b:e3:9e:5b:
95:58:4d:0f:d3:90:36:36:7c:6f:e8:5a:3a:12:0f:
b2:e7:6c:fb:83:ad:67:5f:15:78:d7:d6:c9:78:f6:
a7:0d:24:e0:ee:1b:2d:90:ad:74:7a:69:67:ba:75:
12:3d:02:28:51:cd:6e:c9:47:a6:07:3e:78:99:9c:
9e:b0:c9:7c:84:25:4c:bf:5c:fe:ed:71:58:15:a4:
de:c6:f2:5f:f9:c9:c9:cd:e6:0f:19:53:cb:6d:4f:
e6:83:03:de:0f:66:af:0b:6f:7b:4e:f5:98:83:70:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:09:89:88:20:0F:A0:10:EE:E3:23:7A:B9:6F:65:94:C9:F6:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59C2560C91911EFBEF42861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e9:48:7a:25:5d:ee:60:80:ac:c0:63:aa:fa:51:4d:f4:df:
2f:33:84:dd:1a:c2:99:24:54:e1:10:80:81:aa:cf:25:74:0f:
74:a3:5a:d4:7d:f6:c4:a6:0a:2f:79:1f:fe:b1:60:f1:08:66:
32:6d:4f:81:00:b5:9c:11:17:e4:5a:b0:5f:33:46:44:5a:8b:
2b:a1:70:f5:36:ff:f6:3f:27:cb:90:e5:3a:e2:c2:25:2b:3d:
99:b8:84:92:da:18:1a:09:a2:c2:e7:0d:0e:c3:77:42:1e:b8:
2e:1e:ca:e3:84:6c:16:84:53:2f:d7:53:38:b4:d1:41:3f:59:
be:de:1f:ae:49:ae:1f:4b:cc:7d:cd:45:9b:cb:54:88:fa:a0:
c3:d9:4a:88:5f:f2:c1:8c:ff:8f:af:e8:e1:4d:b1:02:44:b3:
f1:ce:52:d5:73:57:39:f4:22:2f:bd:4e:43:42:a6:e5:cf:c6:
38:50:7e:f6:28:9a:ca:09:b9:9c:f2:c4:c9:f8:65:4f:ce:a3:
67:1c:b3:e4:04:b1:37:8c:1d:c9:85:e9:58:d4:0e:71:61:04:
4a:3b:61:69:e9:6c:ed:0d:74:9a:af:5f:69:98:26:bf:57:f2:
4a:13:fb:f1:b5:8f:c3:e6:82:87:d3:e8:b8:7e:52:ee:ff:00:
ec:a0:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:20 2025 by rpki-client