Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E79476F46711EF8865E157762E951A.roa
File: 01E79476F46711EF8865E157762E951A.roa (raw, json)
Hash identifier: xy7wR6TnqNAPOuBF3WBzzu833mX4xVRknPQQFRKTLHA=
Subject key identifier: EE:CE:F4:50:CA:BB:3A:BF:E7:40:38:5C:C3:AB:F7:7A:3C:FA:15:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01654A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E79476F46711EF8865E157762E951A.roa
Signing time: Wed 26 Feb 2025 17:27:52 +0000
ROA not before: Wed 26 Feb 2025 17:27:48 +0000
ROA not after: Sat 19 Feb 2028 17:27:48 +0000
asID: 17561
IP address blocks: 154.197.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91466 (0x1654a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:27:48 2025 GMT
Not After : Feb 19 17:27:48 2028 GMT
Subject: CN=67bf4f18-b440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:f3:04:ea:93:77:9c:d6:a1:56:f0:c6:47:
e9:e2:04:38:a0:4f:18:e7:8c:c9:a2:51:41:b9:e6:
06:b5:b3:94:d2:69:75:12:b1:d5:07:86:33:f6:81:
f8:d5:de:fc:0b:7a:4f:29:50:0b:e9:fe:87:e1:19:
d9:da:b7:c2:37:a8:7b:aa:f7:bf:32:85:db:2d:bf:
c9:ed:07:bd:e8:31:12:37:21:a9:11:01:50:0b:f0:
4b:7e:1e:2d:03:9f:60:7f:ff:d1:f0:21:36:4b:02:
57:47:2a:fb:59:bd:d9:4d:7a:a2:50:93:62:ad:11:
f7:1a:73:84:1e:16:c5:f1:de:85:e2:f6:2d:aa:b5:
4f:2c:c6:a8:a6:e2:69:28:59:af:6c:8f:f6:56:21:
ad:17:fd:8c:a5:cb:47:3e:41:8e:15:0d:41:64:14:
b7:45:5c:8c:f7:b9:a3:01:72:f2:c2:c1:6e:fa:1b:
1b:24:d5:dd:9d:f4:08:d5:5b:92:b1:a3:7e:8c:75:
cc:45:a3:75:7d:cb:f5:be:9a:46:54:e4:ff:c0:46:
d7:dd:80:aa:67:77:7c:cb:71:06:ec:69:f5:d3:c3:
9e:57:89:45:a8:8f:e6:5b:36:3d:1e:8d:df:7f:a6:
3c:73:bf:53:73:cf:c0:d1:ef:f7:f0:72:5b:0c:6d:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:F4:50:CA:BB:3A:BF:E7:40:38:5C:C3:AB:F7:7A:3C:FA:15:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E79476F46711EF8865E157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9a:15:89:b7:e2:ac:5e:af:49:b2:c4:aa:61:3e:cf:64:60:
1d:11:f5:e0:c0:b6:9e:04:29:73:c0:29:1f:74:89:9a:fb:a4:
ae:88:e7:f7:10:cd:f8:0f:c9:84:3c:3b:78:67:b8:91:15:6e:
3a:7e:5c:82:38:f3:16:7c:f8:48:c9:17:ee:26:76:bb:24:99:
fe:3d:c3:54:e2:9a:46:f7:95:bc:f1:f7:5e:8b:43:2f:bc:3b:
02:98:96:36:c9:44:92:8f:3a:b1:ac:f0:9e:94:ee:c8:86:27:
c0:eb:56:64:61:7c:84:1a:59:21:9c:d5:bb:d2:e7:49:ba:b7:
8b:82:f8:2b:4e:f7:14:23:28:03:ab:67:84:79:de:dc:64:13:
36:81:9f:ad:86:14:f7:25:3a:dc:29:74:82:4f:44:06:ef:13:
be:08:a3:ce:a7:f4:70:66:85:04:41:8b:bb:b5:ff:64:58:d1:
d1:99:76:42:ca:78:50:28:df:ec:bb:63:62:59:2a:c2:be:f1:
e7:e3:2d:11:62:14:51:96:ac:d1:a2:c5:72:d2:bf:1e:4c:8a:
62:2f:d1:77:9e:90:ba:20:c9:80:5a:b1:19:f4:d4:cf:b4:38:
ba:e3:76:66:3a:a8:6c:1b:95:20:0c:4a:e8:3e:6a:eb:52:ba:
35:b8:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:58 2025 by rpki-client