Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030DE284F47F11EFB4A57C7D762E951A.roa
File: 030DE284F47F11EFB4A57C7D762E951A.roa (raw, json)
Hash identifier: qxB8L4n6YrAP13nkiNQB+FSiEQsfWHuFwJ8yhihYuik=
Subject key identifier: C8:14:58:65:9E:6A:CC:98:22:5A:D8:0D:B8:08:49:EF:7F:4F:C2:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030DE284F47F11EFB4A57C7D762E951A.roa
Signing time: Wed 26 Feb 2025 20:19:42 +0000
ROA not before: Wed 26 Feb 2025 20:19:38 +0000
ROA not after: Sat 19 Feb 2028 20:19:38 +0000
asID: 17561
IP address blocks: 154.218.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91623 (0x165e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:19:38 2025 GMT
Not After : Feb 19 20:19:38 2028 GMT
Subject: CN=67bf775e-da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:c9:ab:a3:20:ea:d9:aa:71:86:aa:c4:0f:
8e:c3:d2:8e:a0:4b:3f:98:9a:86:ee:bc:df:b8:cc:
fd:2d:7a:90:5e:ee:92:de:38:40:d1:a6:1f:17:e3:
4b:76:13:d5:a9:4a:e5:cb:fe:e7:15:2f:83:bf:5a:
17:f6:67:15:4c:78:cb:20:6a:4d:6e:80:8f:52:c0:
87:22:29:fe:9b:d3:dd:76:55:90:e3:64:92:a8:26:
0e:c6:40:42:03:57:64:19:85:61:93:8b:57:55:a2:
8a:98:59:7e:33:1e:c7:7c:3e:7c:05:16:5f:b9:99:
1c:ff:6d:c2:aa:7b:2e:0c:60:64:dd:af:1d:ef:f2:
0a:08:ab:88:28:4a:23:04:7e:4c:9a:6e:e7:33:0a:
88:40:75:88:d7:a2:c4:4b:31:aa:f0:a6:00:70:b5:
d9:0f:16:69:2d:46:4c:7f:6a:8d:6f:39:66:27:88:
2d:06:e2:31:aa:48:f0:e4:04:0f:92:64:4f:76:6f:
ae:e5:9d:d6:da:d2:86:b6:b0:b7:a4:00:0e:cb:1e:
41:f5:6f:80:56:c8:4a:e5:99:81:66:8f:9d:ef:4a:
a2:e2:9c:85:1a:43:a8:1a:f9:cd:f6:87:b0:b2:02:
76:7e:84:4a:50:14:5b:36:78:7f:bc:dd:93:1d:9f:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:14:58:65:9E:6A:CC:98:22:5A:D8:0D:B8:08:49:EF:7F:4F:C2:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030DE284F47F11EFB4A57C7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5d:eb:b3:5f:5f:36:af:2f:8b:23:41:91:07:40:df:87:d8:
26:8f:11:3a:e8:b9:b8:62:d5:dd:39:e0:42:42:7a:68:e5:8a:
1d:86:8e:4c:64:47:7e:44:3e:81:a4:04:bc:27:c4:7a:b3:c3:
a8:79:d0:5d:49:30:38:05:5f:0b:f1:a8:d0:b9:df:4f:bb:fe:
83:b2:e1:e6:38:d3:77:14:79:65:4d:b9:a6:4e:45:64:11:d4:
35:ec:72:fb:ed:35:96:6f:33:f3:1d:cf:df:86:d5:e8:41:7d:
94:6e:bd:1b:78:07:3f:fc:32:c2:96:0e:90:25:6d:a3:09:95:
0d:e4:79:58:c2:be:0d:94:28:80:30:c5:54:ea:7e:7d:07:c1:
07:5a:5a:b7:9b:51:49:4a:c9:27:e9:8e:28:e1:b5:9e:05:93:
b6:0f:cd:04:f3:23:0e:c5:33:ca:cf:69:c8:1a:50:f6:43:f3:
2d:92:98:b7:f1:54:d1:d6:95:7e:16:5f:1f:80:39:4c:e9:ae:
b7:f7:cd:d2:0e:31:f5:19:26:21:58:75:99:aa:04:bf:41:d0:
3d:a6:c3:57:5e:db:12:51:f2:43:9f:c4:c5:d5:e5:3b:f8:3f:
6e:23:e4:46:2d:0d:67:78:29:02:71:ca:62:67:33:7e:c7:8c:
74:62:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client