Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F99E8A5CC92A11EF8307D34C762E951A.roa
File: F99E8A5CC92A11EF8307D34C762E951A.roa (raw, json)
Hash identifier: PIK3SwgkwcGPwF+5mji5ST9vr1m0m0AJ1mJRKRvv6xc=
Subject key identifier: 1E:2F:89:B8:AE:8E:A6:69:5B:17:E7:6F:D5:31:76:12:82:A3:FA:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01337B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F99E8A5CC92A11EF8307D34C762E951A.roa
Signing time: Thu 02 Jan 2025 16:59:48 +0000
ROA not before: Thu 02 Jan 2025 16:59:45 +0000
ROA not after: Mon 13 Dec 2027 16:59:45 +0000
asID: 17561
IP address blocks: 154.222.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78715 (0x1337b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:59:45 2025 GMT
Not After : Dec 13 16:59:45 2027 GMT
Subject: CN=6776c604-c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:20:a1:e3:34:83:a8:3e:49:64:64:96:5d:
8b:42:7f:9c:4f:4a:99:54:62:be:cd:2f:8b:a9:c2:
b0:d5:88:0b:30:05:d7:c1:db:24:2e:71:32:55:b0:
a4:17:40:38:cc:42:da:26:d3:8c:a1:80:1a:27:11:
9d:ff:41:40:1f:c7:0f:1b:3f:29:de:0b:8a:50:d4:
07:0c:d5:22:3b:1e:15:39:24:29:23:76:eb:e6:27:
d5:e9:da:ac:88:40:93:60:6e:0c:04:b2:e9:00:6d:
3d:36:9b:e7:21:ca:2f:34:9e:01:f0:93:ac:45:87:
ea:80:2e:d9:f0:aa:24:76:ba:d5:b5:55:ab:58:37:
20:5c:b9:52:5b:4d:f7:28:7e:76:b3:76:49:57:a6:
cf:61:72:bb:27:00:5f:1e:a6:f9:59:88:27:f6:a9:
7b:94:bc:13:2b:0b:b8:66:81:ca:dd:7b:2f:0f:52:
ba:b8:bf:a1:3e:ba:13:b5:a3:81:1d:c1:c9:67:b5:
fc:25:17:58:fe:66:59:06:09:ae:a7:a1:a6:ec:1f:
8e:94:47:c8:61:49:8d:d4:26:88:69:9a:8f:ff:7a:
18:8f:24:59:11:45:49:36:f4:8f:2e:fb:fd:11:46:
f0:3c:77:21:9f:0f:c2:08:4d:2f:1b:24:57:bf:b1:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:89:B8:AE:8E:A6:69:5B:17:E7:6F:D5:31:76:12:82:A3:FA:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F99E8A5CC92A11EF8307D34C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:eb:ff:a5:78:1c:53:a7:d5:dc:de:8f:12:8b:a6:fe:fa:18:
77:fe:f1:d4:34:4d:b7:93:c7:9a:43:21:d9:a7:37:f6:72:8e:
2a:61:55:27:f1:43:46:49:42:34:de:40:ea:63:fe:dc:e7:b5:
47:33:83:92:64:68:2e:0b:d0:01:03:ea:69:bd:82:6f:e2:05:
ac:dc:7f:d8:6d:fc:0a:eb:6f:a1:4c:ea:07:2f:6e:e1:1a:d0:
ca:6e:76:a7:fe:8e:05:15:31:60:54:be:b8:91:d3:fd:d4:e3:
53:8a:e6:26:8c:f3:57:b5:7d:36:4f:9e:2a:67:27:52:3b:8a:
14:67:6a:81:3b:ba:9e:ba:27:fd:ec:58:d1:33:e3:b0:2b:43:
0d:0c:39:30:06:b7:c5:2f:4a:d9:2e:e9:aa:b0:89:1b:b1:14:
d4:1d:c9:fa:b0:3b:7f:a8:32:da:53:a7:64:9a:cd:ee:94:ec:
fc:11:ce:aa:be:71:98:4a:6f:5e:01:22:0b:73:15:ee:c6:e7:
3a:fd:44:d7:63:f8:d0:a2:cf:52:51:d7:52:a1:6e:a3:6a:44:
d1:34:0d:7a:12:7c:7c:01:da:04:0b:2e:3b:35:bb:88:32:90:
5b:a4:a8:56:07:74:9f:38:12:0a:b3:9a:0a:32:a1:4a:b3:c2:
ad:d2:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:41 2025 by rpki-client