Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03266846CDF011EF8AB506A8762E951A.roa
File: 03266846CDF011EF8AB506A8762E951A.roa (raw, json)
Hash identifier: EvClVrlRq+YdJfXR5jkdfyvqk2ULvm8RBy90+l/zzKU=
Subject key identifier: DE:B2:10:30:6A:AB:AE:F2:36:69:8E:ED:DA:EB:D7:03:94:4D:64:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01382F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03266846CDF011EF8AB506A8762E951A.roa
Signing time: Wed 08 Jan 2025 18:40:20 +0000
ROA not before: Wed 08 Jan 2025 18:40:16 +0000
ROA not after: Mon 03 Jan 2028 18:40:16 +0000
asID: 17561
IP address blocks: 154.197.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79919 (0x1382f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:40:16 2025 GMT
Not After : Jan 3 18:40:16 2028 GMT
Subject: CN=677ec694-0d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:cf:61:94:df:6f:02:bf:78:0c:86:90:de:
77:3c:cf:84:05:d7:1a:82:fe:40:74:4c:37:4d:b9:
be:49:54:8b:94:68:8f:af:93:28:dd:0d:86:ea:f5:
3f:8d:04:5b:8e:21:ff:ad:47:56:ad:0c:06:a7:3a:
7a:aa:d9:7c:10:15:f5:f0:1f:2b:3c:81:6d:12:a6:
c5:ea:b2:05:ec:07:dd:0d:97:ab:f9:03:e2:b8:e5:
ce:2a:7c:b7:d0:3a:1e:7a:63:80:31:38:6f:06:85:
82:28:43:c3:d2:48:ba:6b:34:7a:89:a7:4a:61:5f:
a7:ce:fa:4c:d8:3e:5c:af:07:aa:b6:2c:7e:9c:35:
96:0c:eb:14:6f:9c:2a:ef:bd:04:d1:7e:52:de:11:
7f:18:51:ac:81:fc:2d:2a:e1:83:40:c6:06:29:bb:
71:c0:af:08:2c:f2:d1:94:37:e2:49:5c:a0:51:4f:
c9:d7:61:be:5c:43:95:e9:57:b7:00:91:70:3f:34:
ac:9e:28:36:d1:70:d0:5e:e1:b4:f9:f2:a9:97:7e:
27:24:cc:c8:b5:72:28:53:b3:91:6d:e1:10:23:e8:
04:ca:e9:63:4f:22:bc:0c:ae:2a:11:c7:2c:da:20:
30:4d:ae:c1:8f:a1:fe:49:ec:5b:62:a1:48:a9:41:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:10:30:6A:AB:AE:F2:36:69:8E:ED:DA:EB:D7:03:94:4D:64:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03266846CDF011EF8AB506A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.62.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ea:0c:4e:3a:c5:14:0f:18:e6:56:1e:e1:12:e8:8d:12:9e:
09:6c:4c:7d:88:7a:1e:c6:7c:25:6f:07:54:0e:92:6f:00:03:
ba:e0:7e:e4:03:b3:29:42:15:3f:45:8b:a8:0d:9f:d7:7f:4a:
ce:11:f9:26:d9:a6:2a:c8:1b:3a:df:be:f6:13:cb:01:56:84:
f3:cf:71:cc:ae:25:6b:df:fb:0f:dc:d0:ee:1e:87:de:56:92:
bd:7a:08:f8:e4:d4:8a:0f:0a:8f:24:a0:0f:54:69:d3:ba:f0:
31:28:9f:54:02:b3:03:fc:e6:cd:15:8f:a1:e6:e8:a4:48:86:
99:fb:55:ac:bc:6b:53:4a:4f:59:b7:ea:e3:f9:30:21:a3:22:
54:79:2f:09:e9:72:56:9f:18:60:63:5d:19:18:f6:e3:31:f9:
22:9b:fd:d9:74:e7:32:52:27:e1:d5:64:ee:53:41:da:22:94:
5e:70:ce:e7:d4:9d:5b:6d:52:35:26:6b:43:44:6d:7c:dd:70:
d7:ff:7b:da:cc:c6:5d:12:e8:39:ed:41:36:e4:8c:b0:b8:67:
c9:59:00:d1:70:05:a2:a3:b7:6b:96:f5:6c:45:60:2b:03:7e:
b0:32:fb:9b:f0:3b:a2:c8:00:48:d2:45:0c:c7:3e:e4:38:33:
b3:b3:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:37 2025 by rpki-client