Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D4D26F45D11EF8B999A98762E951A.roa
File: F78D4D26F45D11EF8B999A98762E951A.roa (raw, json)
Hash identifier: yh6+DqlqmZjz37olhJEodin1cvEzPQ4dFyuxOMSJoZw=
Subject key identifier: 74:DD:E5:09:B0:A1:D4:40:2A:2D:89:6A:05:13:55:B1:BB:15:E0:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D4D26F45D11EF8B999A98762E951A.roa
Signing time: Wed 26 Feb 2025 16:23:10 +0000
ROA not before: Wed 26 Feb 2025 16:23:06 +0000
ROA not after: Sat 19 Feb 2028 16:23:06 +0000
asID: 17561
IP address blocks: 154.82.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91424 (0x16520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:23:06 2025 GMT
Not After : Feb 19 16:23:06 2028 GMT
Subject: CN=67bf3fed-fd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:b8:90:4a:06:b1:61:c3:aa:f8:1d:97:0e:
e7:64:be:5e:23:3f:c4:f2:79:ca:32:e8:5f:ff:56:
d8:b4:cc:ee:e2:8f:c4:52:89:81:99:eb:3c:09:45:
6a:12:b7:89:35:77:18:70:bc:77:82:5b:8f:70:d9:
a7:3c:a3:26:a1:e5:28:b7:7d:9b:00:59:a3:d4:b0:
56:a4:f8:53:ca:25:9c:89:33:2a:70:ac:28:52:e8:
0d:a9:f8:75:d5:dd:b1:bd:d2:0a:29:38:89:3c:11:
6b:cd:1a:3c:25:d5:ab:38:04:3a:b0:a8:09:4a:d5:
b9:45:47:88:b4:8b:23:f6:04:e8:85:5c:0c:87:79:
57:1f:8f:ca:23:96:36:a6:18:0b:25:26:0a:9b:83:
68:83:6c:44:0f:be:93:c7:19:fb:d1:03:98:64:bf:
c8:c3:ab:9c:d8:eb:fd:da:6d:90:3a:84:dd:90:53:
70:b1:11:f5:57:71:90:44:4b:8f:f3:3f:18:e4:02:
b3:4c:03:ce:91:95:2b:55:b6:d9:3a:f1:0d:5d:09:
4c:89:30:20:35:ae:b7:69:a1:14:6c:3f:b6:c7:0d:
c2:77:6c:61:6d:5b:38:07:80:9e:a5:bd:4b:c7:bb:
85:3a:9a:23:f0:5e:a3:a9:21:0b:e9:8c:f3:c7:46:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:E5:09:B0:A1:D4:40:2A:2D:89:6A:05:13:55:B1:BB:15:E0:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78D4D26F45D11EF8B999A98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c2:fb:7a:4a:d7:73:96:99:4d:92:d0:4b:0b:96:b1:65:ee:
9c:cb:c5:3d:2c:d6:10:6c:2a:93:f0:d2:74:f3:0b:71:02:64:
df:03:17:c2:a4:b5:9e:16:41:78:5e:48:1b:3c:d8:62:af:29:
9c:74:ac:b2:da:61:dc:11:fe:05:33:cb:cb:67:e5:d0:da:9a:
59:a6:ce:7b:8b:5a:c7:10:ad:04:77:e5:e3:d2:58:76:db:68:
73:9b:7a:8b:94:ed:53:c5:97:b7:95:ec:7d:fb:d3:6b:f8:6c:
b9:7a:5a:f3:32:6c:fb:93:97:95:f7:49:94:0d:ad:1b:e3:98:
d7:9f:5f:f9:83:7d:46:4a:6c:47:fc:25:b8:a1:ff:6e:07:a8:
36:b3:fb:ca:67:b6:2c:75:d1:26:75:8d:2d:f5:9b:3d:ec:4e:
a0:d1:bf:4c:75:c3:a5:9f:bb:55:24:a6:2d:0f:7b:61:82:1e:
f5:3c:06:0d:6d:7c:25:a3:3f:36:b9:26:8b:b8:31:22:39:8a:
43:4f:e6:05:83:0c:d2:34:65:64:d6:89:4a:ea:05:65:f0:80:
13:26:51:ec:8a:0b:cc:07:e4:5d:21:54:e2:5b:62:d6:3c:31:
59:5a:60:c2:b7:d7:a8:07:c0:f4:04:2e:30:a3:47:64:be:38:
5d:88:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:13 2025 by rpki-client