Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7837830C90D11EFA79E8693762E951A.roa
File: F7837830C90D11EFA79E8693762E951A.roa (raw, json)
Hash identifier: eAGi4tb9oUzXCL0sHqfzIK8+Bd0dIrV9j3Zy67hLZL8=
Subject key identifier: 6A:0E:A5:DB:97:9E:49:FA:C7:71:71:96:43:55:0B:5B:0D:F4:C0:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01328F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7837830C90D11EFA79E8693762E951A.roa
Signing time: Thu 02 Jan 2025 13:32:10 +0000
ROA not before: Thu 02 Jan 2025 13:32:06 +0000
ROA not after: Mon 13 Dec 2027 13:32:06 +0000
asID: 17561
IP address blocks: 154.221.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78479 (0x1328f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:32:06 2025 GMT
Not After : Dec 13 13:32:06 2027 GMT
Subject: CN=67769559-48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:8f:3d:19:7d:ed:28:d1:6a:22:7e:dd:25:
44:46:7e:cd:ab:17:5e:46:82:b0:f5:25:5c:40:24:
17:19:a3:b4:aa:28:7e:6e:8e:fe:d6:93:b3:4c:cf:
cf:98:2c:7d:ab:c9:39:ba:3a:2f:39:3d:f6:08:0e:
ff:51:c4:44:50:f2:86:be:eb:e3:0f:4d:1a:57:d0:
1b:37:8e:67:9d:32:46:be:47:9d:9f:e0:31:dd:ae:
27:77:50:3d:ce:3d:de:c9:58:d1:f5:fa:0c:b4:97:
e0:f0:55:9f:94:23:39:5c:d4:d5:5e:b7:f5:71:f9:
bf:e7:0d:85:40:09:70:fa:eb:f2:48:d1:1e:1a:d6:
36:43:e4:57:67:d2:f2:7c:c4:b2:5c:15:33:76:e7:
15:42:49:22:76:00:db:7d:cb:da:f1:a8:a4:b8:c2:
a4:96:3c:da:ca:8d:fb:18:77:a8:fe:97:b8:10:50:
24:8d:70:a3:5a:a9:be:66:91:ec:2d:14:d5:c9:7d:
61:31:76:3c:1f:b8:cc:4f:d0:3f:6e:94:6e:42:37:
6f:8b:1f:94:c5:17:d4:51:78:9d:5b:ed:42:61:e3:
c8:23:57:d3:ca:95:00:39:fb:88:e0:7e:41:fd:f9:
cc:d7:75:a0:50:49:6e:4a:9f:98:26:05:db:90:70:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:A5:DB:97:9E:49:FA:C7:71:71:96:43:55:0B:5B:0D:F4:C0:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7837830C90D11EFA79E8693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ef:33:75:6a:23:68:fb:09:69:62:0c:8e:38:46:76:25:d2:
d1:8f:8a:d8:9e:2e:43:27:19:f2:3a:b7:88:e0:68:12:9d:8c:
d9:f9:36:51:76:64:99:dd:e3:b2:5f:01:24:a2:0a:cf:db:6e:
66:e1:97:eb:56:81:06:34:85:36:e3:f4:5a:39:35:04:76:97:
04:1a:3b:b0:4e:e9:29:f9:38:ea:78:a4:bd:3d:e4:6b:bd:92:
1f:10:f9:a5:33:0f:15:89:2d:c2:4c:5d:42:31:39:4c:56:08:
e1:6e:25:7f:c5:75:c3:71:e2:7e:af:43:eb:a1:88:d5:28:d2:
5b:5c:7c:58:8b:d3:fd:08:e0:31:d2:01:6c:c1:91:7c:bb:b4:
a7:39:28:24:f7:87:65:92:36:20:a3:71:d2:d9:47:14:8d:2d:
f5:b8:2a:10:7a:07:de:f1:36:b2:6e:86:dd:55:e9:64:25:21:
ee:fc:ba:4b:53:3a:5b:11:6f:5f:4f:4b:87:b9:64:ec:a5:04:
8c:65:f7:fd:14:b9:3d:96:c2:f3:0a:84:da:0d:58:5c:27:84:
4c:1d:68:39:94:3a:09:e5:35:ac:5c:56:68:51:d4:3c:e4:eb:
5f:2d:e8:b3:bb:bc:5f:fc:35:4a:2f:1c:a6:85:10:4f:4b:f2:
66:e2:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:28 2025 by rpki-client