Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBD77006CF6D11EFA5ADFEAA762E951A.roa
File: FBD77006CF6D11EFA5ADFEAA762E951A.roa (raw, json)
Hash identifier: K+VNGJRFyCXuzRsqD/Y7yFw/4Qmz+V6nc3r63OyYstw=
Subject key identifier: A9:A9:15:BC:FB:C8:AC:5D:2D:24:42:B1:35:1D:AA:47:48:9C:82:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBD77006CF6D11EFA5ADFEAA762E951A.roa
Signing time: Fri 10 Jan 2025 16:14:36 +0000
ROA not before: Fri 10 Jan 2025 16:14:32 +0000
ROA not after: Fri 12 Dec 2025 16:14:32 +0000
asID: 984
IP address blocks: 154.81.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80460 (0x13a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:14:32 2025 GMT
Not After : Dec 12 16:14:32 2025 GMT
Subject: CN=6781476b-7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:90:f3:7b:6d:e2:8f:d9:f4:20:87:69:48:
9d:e0:c3:ff:90:40:c1:1a:b6:b6:2f:b7:db:f2:7f:
68:a2:69:cc:ab:7f:73:d1:dd:b0:cc:c8:01:69:10:
68:22:e3:6a:8d:ae:37:ef:b6:a1:24:65:be:7d:19:
e4:75:d1:de:04:7a:a7:3e:19:1a:39:1a:b9:79:33:
bb:f7:0e:7e:4d:a3:b5:3e:21:d9:8d:d1:33:6e:d0:
06:0b:17:d0:32:59:56:2d:ae:51:97:d6:06:ac:e1:
f2:05:a5:24:88:e8:12:1b:7a:3e:70:6b:26:f2:5c:
0f:6d:73:f8:5a:e2:20:c4:c7:3e:05:9f:9b:9a:7d:
54:b3:b3:36:e8:81:61:fe:91:cd:55:43:a2:af:a6:
10:5f:19:40:bf:cc:9a:f5:13:3c:fa:9b:e2:40:94:
be:2b:90:4e:f6:58:d6:69:c7:36:23:d5:a4:2f:2c:
ce:9f:41:8e:9a:29:3c:e1:ef:e1:77:2d:59:6b:17:
14:40:fe:c5:d1:99:66:ee:d9:1a:a4:16:83:9c:18:
94:97:b9:36:e2:23:71:09:66:a0:44:50:22:5c:57:
36:e7:c7:32:56:6c:2d:a7:8e:fa:ab:88:ee:3e:a1:
67:90:9f:54:97:77:e5:8f:61:b1:ee:31:54:c1:e6:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:15:BC:FB:C8:AC:5D:2D:24:42:B1:35:1D:AA:47:48:9C:82:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBD77006CF6D11EFA5ADFEAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.157.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a3:d2:9d:c6:d9:5c:5d:e4:cb:d7:2f:68:b1:92:5c:71:80:
6c:c2:16:41:b3:05:8d:59:fa:6c:8d:0c:63:0c:d2:32:22:5f:
2e:26:38:08:93:bf:92:4f:cd:cb:d0:3c:8d:d8:c6:32:b9:50:
ca:90:eb:07:94:b1:34:0a:1e:f1:d1:da:3f:58:76:d8:77:77:
6f:78:80:d4:9b:f4:36:57:a6:1b:b0:dc:04:71:dc:0f:26:4b:
e4:ac:84:5f:dc:0a:87:9d:41:f6:5c:f5:4e:ed:6f:5d:97:9b:
93:83:ec:3e:eb:13:94:5a:61:09:c5:cd:d4:14:3e:11:d3:23:
bd:f5:80:ee:54:a3:b0:fc:db:ee:a1:3b:1b:3e:b6:25:5d:4f:
48:c9:52:00:65:23:a4:81:22:fc:53:7d:b3:a2:f6:5f:16:1a:
60:e5:a0:ad:25:6c:7f:b9:6e:48:45:8e:a1:80:1b:60:0b:6d:
0a:e1:b6:e6:82:1f:79:50:9e:42:e9:b3:9a:b2:24:86:a5:22:
6f:c9:c7:93:f2:f2:12:2a:d6:d5:0c:ef:b2:13:bd:05:b8:26:
4e:e2:23:b4:7f:3c:b6:93:2f:23:ba:0a:37:da:44:4f:64:16:
f7:f4:98:7e:b3:e6:0f:ee:df:97:b1:b8:f1:5a:cf:88:1b:4a:
0e:21:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:15 2025 by rpki-client