Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F687ADD6D98C11EFBCAACDAD762E951A.roa
File: F687ADD6D98C11EFBCAACDAD762E951A.roa (raw, json)
Hash identifier: u+wVQzlpd4BdBOLPIq/6EiNya4/kE7tsiXWb8vNxsRQ=
Subject key identifier: C8:6F:07:93:AB:BD:09:64:9E:1D:4F:07:42:3A:C3:0E:3F:06:9E:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014270
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F687ADD6D98C11EFBCAACDAD762E951A.roa
Signing time: Thu 23 Jan 2025 13:21:33 +0000
ROA not before: Thu 23 Jan 2025 13:21:29 +0000
ROA not after: Tue 13 May 2025 13:21:29 +0000
asID: 138915
IP address blocks: 154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82544 (0x14270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:21:29 2025 GMT
Not After : May 13 13:21:29 2025 GMT
Subject: CN=6792425d-340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:09:8e:72:86:6d:1e:5c:c6:06:e8:0b:6b:
bf:fd:89:6f:f6:b2:6c:23:38:97:1a:d8:10:7e:e4:
79:2c:3c:b7:9b:10:4c:b5:62:b3:6e:70:93:38:1f:
66:7d:68:f9:54:33:23:c3:24:5c:83:8e:95:7a:e9:
b7:a0:fe:82:76:04:01:d9:ef:eb:d4:be:a8:1f:ec:
f1:c5:42:a0:38:da:13:62:5f:93:7c:ea:7e:f0:2b:
2f:94:33:60:46:02:25:e5:4e:3d:be:2a:9f:8a:85:
43:01:af:2c:93:f6:55:e5:5e:0f:e6:21:55:4a:8b:
43:67:42:0d:8e:b9:5f:86:27:fd:ae:bd:fa:7e:46:
a5:04:06:54:56:61:e9:5a:4a:f5:ac:a2:ed:65:c2:
80:4c:66:63:f0:d6:2a:3a:ea:88:d5:8f:8f:4a:55:
fd:59:03:81:54:18:ce:0b:22:e9:f3:96:03:63:62:
f9:a6:70:a4:1c:21:c1:72:2b:49:a9:e7:55:59:df:
42:9d:95:48:18:5a:4f:08:1b:a0:72:55:0b:7c:a0:
ac:b3:e8:ca:94:33:60:90:d0:8f:a7:af:b0:c6:f3:
75:8a:d4:39:4f:39:73:c8:27:6f:45:7e:18:df:99:
1b:ed:43:57:64:ca:1e:69:93:13:05:66:68:37:a1:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:07:93:AB:BD:09:64:9E:1D:4F:07:42:3A:C3:0E:3F:06:9E:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F687ADD6D98C11EFBCAACDAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:12:cb:bd:ac:69:97:d6:ac:76:9a:af:ee:fd:56:c7:00:c7:
20:5b:7c:e5:ef:46:86:89:c7:d7:e2:c1:c3:4d:ba:4a:26:d8:
18:f1:a7:01:19:c7:b8:ef:93:03:23:db:27:04:c9:da:d5:e2:
23:7c:0e:96:64:43:c3:2e:07:74:a5:d6:d2:86:9f:0b:aa:9e:
56:3c:ec:c5:1b:d1:50:39:03:f8:cf:56:32:ea:46:2d:63:c0:
02:bf:42:b7:e3:7d:7a:46:4a:21:27:9c:ce:20:d0:c6:bb:43:
66:a5:22:5e:58:0f:2d:75:e9:b0:c9:22:d0:4b:c4:ed:8f:b5:
d8:d2:81:58:98:b6:b9:29:66:38:c4:dd:ab:be:95:49:de:f2:
16:d1:ec:e8:31:cf:a3:69:38:b5:8f:db:7a:36:42:09:7e:7a:
7c:4f:9d:d3:b6:4e:64:ef:c0:a7:18:55:22:28:de:01:ef:9c:
c6:cb:33:77:d6:ca:e4:ef:fe:fd:cb:0c:82:25:a5:44:e0:b2:
09:20:55:2f:cd:9f:d5:10:f1:a5:5b:28:42:38:6a:4d:d3:ec:
25:5e:05:ee:36:b8:04:34:33:28:10:bf:44:a1:be:9c:60:12:
ee:7c:09:3f:fd:e2:ce:7e:70:d2:93:8c:88:04:8a:e4:8b:64:
1f:ee:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:44 2025 by rpki-client