Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBFB3CC93E11EFA5D0404A762E951A.roa
File: F9BBFB3CC93E11EFA5D0404A762E951A.roa (raw, json)
Hash identifier: rMjNUEbw+n7sAvBkz5RAsz9V3daVEXU/RaPyAU9qhCk=
Subject key identifier: 5C:9F:7B:2F:ED:B7:60:47:E5:17:DE:EB:5D:AF:87:FB:E2:86:F8:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013419
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBFB3CC93E11EFA5D0404A762E951A.roa
Signing time: Thu 02 Jan 2025 19:22:59 +0000
ROA not before: Thu 02 Jan 2025 19:22:55 +0000
ROA not after: Mon 13 Dec 2027 19:22:55 +0000
asID: 17561
IP address blocks: 154.223.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78873 (0x13419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:22:55 2025 GMT
Not After : Dec 13 19:22:55 2027 GMT
Subject: CN=6776e793-876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:7b:16:bb:8d:ab:3b:56:e9:7a:d9:38:7b:
2a:b1:0d:29:5c:92:7d:cd:5e:4c:e7:fd:11:ee:06:
27:e9:7a:1c:3c:ed:db:37:6e:c0:78:e9:2e:51:bc:
f7:52:d3:a6:af:22:8e:72:0b:93:94:b7:20:f0:86:
1a:a7:dc:cc:05:99:d2:8e:7f:fa:de:39:72:77:8e:
c1:66:21:9c:4a:f2:ff:c0:ac:66:2d:bf:d6:ae:2a:
de:a6:ae:a6:0c:26:d2:ae:47:82:b1:3a:bf:34:2b:
e7:83:98:ac:1e:fd:ff:78:fc:9d:b8:ce:14:6d:8d:
d0:46:ce:3c:6a:00:35:3f:9f:52:a2:42:0f:ef:c6:
00:1e:a9:13:fc:8a:22:78:6c:2a:98:ac:30:a3:56:
11:28:3c:59:49:f1:b0:37:2b:dc:8d:d6:62:e1:35:
c9:dc:48:e0:cc:17:58:d9:e9:06:de:a5:e6:fb:d4:
61:31:d3:30:b7:3f:37:c3:7f:a0:0f:f9:e3:78:5a:
18:37:7d:d3:2b:27:53:e4:c6:e9:0d:69:3f:20:e3:
44:ba:6c:f6:33:e6:a5:ed:86:15:97:82:be:99:ed:
5f:b3:e7:1a:4f:e2:24:58:ea:55:7d:3d:09:40:45:
20:af:10:54:28:79:35:ac:26:d2:52:62:9b:a4:25:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:7B:2F:ED:B7:60:47:E5:17:DE:EB:5D:AF:87:FB:E2:86:F8:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBFB3CC93E11EFA5D0404A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.240.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f2:f3:ae:57:f6:24:c9:2c:c3:87:57:f7:3b:6f:d6:08:6c:
f6:b8:d6:49:12:49:91:2b:9a:5a:31:4b:85:64:e9:11:41:01:
06:2d:60:a6:d9:bc:23:72:e6:30:0f:11:aa:f6:03:cd:fe:0f:
ce:53:b2:2a:1c:02:ba:1b:48:16:7c:29:90:82:a8:a9:f7:ff:
5c:14:3c:b9:de:10:13:84:81:4a:34:2e:70:21:38:65:60:b0:
4c:5a:6f:a1:fe:b5:3e:eb:a0:5d:07:e0:aa:03:c2:62:c4:58:
cd:f3:3c:11:f9:95:64:da:34:5f:d7:69:41:8d:d1:f7:54:86:
49:cc:e8:9a:f7:9a:33:e2:dd:98:f7:ef:94:a4:e2:66:28:8f:
f3:5a:d8:35:61:46:5f:3e:90:e3:93:74:dc:38:66:d7:5a:c7:
60:12:0a:9a:29:a6:90:c3:e6:e6:d9:e7:5c:fc:10:dc:10:c8:
36:2e:d8:cb:e3:c7:3b:59:f3:cd:28:c6:e3:6d:fe:1f:bc:b2:
88:db:c1:01:c3:c2:07:3e:bc:95:30:d0:32:d1:f5:33:d5:61:
a7:bc:96:8c:40:ca:30:b1:be:1e:2b:dd:97:48:cd:e4:61:7a:
1c:c0:ae:14:d6:33:a3:89:c9:2a:e4:e6:9a:38:71:df:43:c3:
be:24:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client