Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE38E0A6C92C11EF8C34EB57762E951A.roa
File: FE38E0A6C92C11EF8C34EB57762E951A.roa (raw, json)
Hash identifier: D4EVTGeX0tXpNCeb6AxufdLubBnuMR1hJ+fNm5CQUD4=
Subject key identifier: 1B:AB:8A:78:93:BD:C6:E7:E0:D0:2B:5D:58:28:F8:36:1C:03:A9:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01338B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE38E0A6C92C11EF8C34EB57762E951A.roa
Signing time: Thu 02 Jan 2025 17:14:15 +0000
ROA not before: Thu 02 Jan 2025 17:14:11 +0000
ROA not after: Mon 13 Dec 2027 17:14:11 +0000
asID: 17561
IP address blocks: 154.222.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78731 (0x1338b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:14:11 2025 GMT
Not After : Dec 13 17:14:11 2027 GMT
Subject: CN=6776c967-fd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:1a:4a:b0:ac:f9:74:c0:15:2a:20:d4:4b:
7c:54:1e:17:7b:5a:6d:63:14:ba:5e:a0:b0:30:2a:
09:19:81:d9:f0:cc:f6:be:56:dd:24:81:25:02:b6:
fd:1e:c8:96:70:5f:29:4a:00:52:3e:05:4e:73:28:
d2:4d:ee:b1:cb:7d:ec:68:67:22:3a:69:32:84:6c:
1a:f7:ed:6d:4e:ed:01:1e:89:0a:54:a4:64:18:5c:
20:bb:3f:b5:eb:72:84:04:71:ac:94:a5:dc:ce:61:
b1:e1:6a:78:c4:c5:2e:c0:d2:c0:2d:86:c0:f5:ac:
08:d1:9b:2c:c2:a3:eb:e5:35:02:cb:b2:ff:17:64:
c4:d9:0c:f3:42:a0:98:8c:b2:9b:d0:6e:43:60:5c:
cf:ce:55:ca:3b:48:83:99:d3:1f:47:2d:b0:3f:04:
85:fa:d2:5b:05:24:4d:7d:bb:34:8a:58:24:0b:31:
c8:44:b3:46:6f:93:75:96:5d:1d:01:45:39:80:26:
6b:1e:66:e4:73:c2:66:ef:6b:e7:74:88:29:79:89:
d4:79:68:3d:d2:cb:95:81:03:3e:d8:87:42:0b:9e:
58:5b:79:a1:cb:dd:16:d7:d6:b6:e7:4f:0e:c9:e8:
8b:51:93:2e:ea:4b:83:84:26:4f:d7:9c:da:a4:97:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:8A:78:93:BD:C6:E7:E0:D0:2B:5D:58:28:F8:36:1C:03:A9:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE38E0A6C92C11EF8C34EB57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:30:c0:0c:7d:a1:f8:94:ca:1a:32:95:62:72:f2:ef:8e:d0:
75:f6:b1:f6:e8:57:fe:2f:70:2f:71:85:17:47:0c:24:6e:43:
a6:09:e3:e5:db:70:37:43:7f:bd:e6:3e:f5:69:db:ef:11:8e:
fe:d7:50:cc:f4:d6:2a:c0:4d:d8:d7:9d:31:5f:cb:53:87:d7:
40:d7:04:fd:ac:72:15:d0:08:90:6a:fc:9b:2b:d0:05:b4:02:
c6:dc:1f:5e:b2:1b:fb:65:9f:06:29:7d:21:9c:89:fb:69:bd:
b8:d7:99:c4:8f:c9:d1:e0:b3:af:ba:d9:75:b3:bf:8d:90:eb:
14:a8:a8:f3:2c:37:b0:eb:a0:8b:86:7a:0e:b2:21:ce:e6:c5:
b1:a2:a6:e6:db:44:db:3c:ae:0c:49:5b:64:5a:2b:71:83:c0:
1b:a2:2a:84:e5:0b:a9:1f:fd:83:4f:3c:e9:47:22:ce:ae:b6:
0e:d8:7f:9b:60:9e:c0:a7:14:26:f8:e0:bd:6e:7b:4f:20:a5:
34:d7:bb:27:16:22:02:7f:d4:b9:05:f6:92:66:59:02:bb:10:
99:37:68:d9:0e:5e:10:0a:1b:d0:73:c5:27:c8:64:f3:2c:a0:
d5:8a:64:cf:76:15:0f:e6:54:cd:fd:b0:9e:e7:23:84:90:1e:
c2:72:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:39 2025 by rpki-client