Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E401707F0911EFA75BF7B0762E951A.roa
File: F8E401707F0911EFA75BF7B0762E951A.roa (raw, json)
Hash identifier: FJtR2CBA0WtMcYEx4XO45dtFU1YNV4ZDu38yY+Zde8c=
Subject key identifier: D0:84:68:CF:06:81:4F:B4:19:2D:06:C1:9D:A1:51:00:B5:60:9F:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F59E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E401707F0911EFA75BF7B0762E951A.roa
Signing time: Mon 30 Sep 2024 08:57:08 +0000
ROA not before: Mon 30 Sep 2024 08:57:04 +0000
ROA not after: Sat 22 Mar 2025 08:57:04 +0000
asID: 15169
IP address blocks: 154.82.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62878 (0xf59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Sep 30 08:57:04 2024 GMT
Not After : Mar 22 08:57:04 2025 GMT
Subject: CN=66fa67e4-4d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:c6:dd:8b:04:f4:42:15:33:2f:d1:04:13:
4d:1f:4a:f7:7f:7b:7a:ee:5f:a1:71:5c:9c:25:80:
16:a5:8e:23:7a:f1:58:b4:a2:13:b0:bb:72:83:2a:
c1:03:cc:63:3e:6e:77:9b:e5:5d:3c:7d:20:c7:54:
30:44:7e:56:a8:fe:33:c5:46:30:7a:19:0a:e8:14:
0d:5e:6d:6f:0d:56:8b:59:cc:e5:98:fc:72:c5:4d:
f0:a8:e6:f0:b7:11:20:69:2e:c9:48:63:1c:26:8a:
e3:28:28:0d:5c:f3:3d:a7:4c:a5:ae:4b:15:5e:d8:
e9:ab:f7:62:c1:db:2b:74:0a:11:1e:1d:a1:e6:b5:
fb:b2:c9:34:94:e8:1b:8c:35:cb:bf:32:9a:12:b5:
b2:b0:08:8c:8d:a0:4c:63:51:dc:46:b5:c5:10:a3:
07:c1:c6:a5:02:42:f5:a8:03:b8:79:d0:99:fd:6a:
33:9c:fe:b9:7c:a6:d9:7d:c8:56:a2:04:bd:8f:a3:
0e:d5:c9:72:72:32:58:ec:c7:ef:b3:cb:ef:4a:8b:
67:24:21:1d:23:1b:5e:17:6d:38:f5:c1:f8:e4:ad:
c1:51:7c:38:25:58:d9:cc:6b:c5:59:35:0a:56:b2:
1c:03:29:99:b3:54:ad:4e:a8:47:26:fe:b4:c2:16:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:68:CF:06:81:4F:B4:19:2D:06:C1:9D:A1:51:00:B5:60:9F:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8E401707F0911EFA75BF7B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.130.0/23
Signature Algorithm: sha256WithRSAEncryption
15:83:77:65:6b:c1:e1:aa:57:4a:1f:37:da:6f:1e:ce:e1:d5:
aa:94:0b:e6:2c:a5:ec:08:13:7f:b8:34:df:b4:62:da:c9:ff:
25:19:a8:46:94:8b:ea:d2:6f:8b:9b:f7:54:d7:99:1c:08:88:
a2:d0:cd:73:c8:74:5f:da:49:dc:4f:5e:93:c4:80:fe:1e:1f:
1e:0a:43:67:f8:5c:e7:b1:32:67:2c:21:e3:9a:96:ba:07:2f:
81:6a:0a:76:32:b9:d0:65:e2:04:a8:bd:e2:f5:f1:59:1c:df:
8d:29:92:9d:2a:9a:b5:a5:74:c0:ec:5f:6c:a9:5e:d7:91:32:
ca:0e:18:ac:6b:84:cb:1a:d1:ee:d1:90:7f:f7:4c:72:a8:02:
f9:e6:49:ca:5b:ac:4c:8f:a7:8f:2a:ae:e1:f7:cb:11:39:e4:
1f:3c:97:d9:ef:c1:0f:fd:99:90:5d:14:18:d6:1b:20:01:b8:
14:d3:68:70:a0:16:39:bd:e1:e4:04:9f:3e:e6:a0:8e:80:5f:
7d:83:84:76:4d:ca:99:da:84:8d:0b:c8:3b:e8:e0:17:98:21:
f9:e0:68:8b:3e:c0:d5:47:d9:d0:0a:64:ae:2a:8a:2b:b5:74:
5d:05:f1:43:b6:a7:60:b9:11:46:52:2f:01:9d:8a:c7:02:ea:
c8:da:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:10:08 2025 by rpki-client