Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A24CA0217A311F0B4E95FC46DB8BCC6.roa
File: 3A24CA0217A311F0B4E95FC46DB8BCC6.roa (raw, json)
Hash identifier: QOFRsj5iVj2tCb8Clrph6ZsFRatDQr05zGxWCaA6poU=
Subject key identifier: 13:54:4A:63:81:C7:1A:72:FB:23:CD:1E:E4:CB:8D:E5:8B:23:79:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A24CA0217A311F0B4E95FC46DB8BCC6.roa
Signing time: Sat 12 Apr 2025 13:37:07 +0000
ROA not before: Sat 12 Apr 2025 13:37:03 +0000
ROA not after: Tue 22 Apr 2025 13:37:03 +0000
asID: 136513
IP address blocks: 154.197.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 21 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96519 (0x17907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 13:37:03 2025 GMT
Not After : Apr 22 13:37:03 2025 GMT
Subject: CN=67fa6c83-4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:65:ec:17:24:6a:76:fe:f1:ab:d1:97:da:
33:b7:e6:6d:06:a4:b4:83:11:bc:67:71:f1:ef:e4:
73:89:73:00:0b:cb:46:ae:57:eb:e5:dd:c4:84:09:
ca:a6:9d:0c:b8:f0:4c:c9:b4:57:9b:96:8f:c1:89:
b7:b9:73:57:2a:2f:a9:85:7a:d2:9c:53:20:a9:bd:
2b:92:d7:2c:e6:26:4a:67:81:b9:51:4a:73:3f:f9:
3e:ef:0e:b5:a1:75:18:54:07:db:0b:5c:31:b0:9f:
ff:98:6d:20:a7:02:16:c1:67:48:ac:de:22:ee:40:
11:3b:e8:4a:0b:e4:41:34:8f:8e:29:9b:93:c5:b1:
ed:7c:b3:8f:e7:da:4f:9a:a7:ed:9a:d4:df:48:36:
5d:40:5b:c7:64:bb:0d:79:f8:db:ba:5e:66:83:40:
b9:13:fb:ae:36:93:ec:ad:98:79:14:71:62:78:9e:
c2:26:07:9f:c0:ce:d3:e4:1d:71:93:63:7e:4b:6c:
9f:fc:13:d9:33:0e:69:c1:14:0d:d8:94:0a:d8:1f:
27:f2:e4:e5:aa:27:48:ef:1f:50:67:90:f5:8a:3c:
d6:37:93:11:12:90:94:86:ff:2b:65:99:00:be:a2:
28:80:7c:7b:d9:90:0a:ff:b3:10:bd:7e:2e:f8:a1:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:4A:63:81:C7:1A:72:FB:23:CD:1E:E4:CB:8D:E5:8B:23:79:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A24CA0217A311F0B4E95FC46DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.0.0/24
Signature Algorithm: sha256WithRSAEncryption
83:67:15:b9:6f:1e:e6:8d:7e:9a:29:3b:1d:03:9a:cf:a6:d8:
3a:fc:fb:ca:9b:96:08:d5:2e:65:94:25:55:01:d0:57:3e:76:
ae:a6:32:40:8a:14:91:d7:1b:d0:59:ad:3c:a0:9d:8c:67:ca:
3e:05:00:d0:ae:53:f6:e9:e3:09:b0:13:85:46:d5:a5:08:03:
46:27:6b:0b:50:a6:80:9c:68:14:05:ea:26:dc:54:1a:dd:c7:
76:de:19:e7:8f:b3:81:18:44:8d:85:41:c8:10:2b:ee:99:95:
a3:70:67:d9:71:06:c2:62:31:45:5d:92:bd:e3:10:b2:5e:94:
6c:3a:5f:27:a1:ca:1a:62:7c:f2:69:7a:1d:3e:ec:c7:85:6d:
7f:a0:19:ca:53:16:22:77:15:9c:37:a7:fb:e3:cd:1b:41:00:
f1:77:77:e0:da:15:f1:0e:d3:70:4d:f7:09:53:96:80:30:2a:
45:3f:3b:6e:ef:e5:f0:0f:a9:f9:85:a4:ab:c8:b8:35:78:58:
e0:9e:e0:e1:9f:e7:2f:78:98:8f:05:23:cd:ca:aa:18:db:55:
ad:48:62:65:ad:ce:6d:8c:87:4e:38:20:2c:1d:e3:81:08:8b:
2d:f2:12:3e:bb:54:df:07:41:4e:07:02:8a:bb:23:5e:29:9e:
cd:e7:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:49:24 2025 by rpki-client