Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07E449B6F81611EF8A9E218A762E951A.roa
File: 07E449B6F81611EF8A9E218A762E951A.roa (raw, json)
Hash identifier: cK3GhyQF/6NcKqywD2M/6KO1ecO5sybg8mXLp7453Lw=
Subject key identifier: 20:0D:94:77:64:D2:15:96:31:0E:98:41:60:EA:7A:40:6A:7A:C9:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07E449B6F81611EF8A9E218A762E951A.roa
Signing time: Mon 03 Mar 2025 09:58:18 +0000
ROA not before: Mon 03 Mar 2025 09:58:14 +0000
ROA not after: Wed 30 Apr 2025 09:58:14 +0000
asID: 63139
IP address blocks: 154.94.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94179 (0x16fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:58:14 2025 GMT
Not After : Apr 30 09:58:14 2025 GMT
Subject: CN=67c57d3a-f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:98:d1:f8:96:64:82:4f:f5:92:37:4e:b8:
ae:09:45:cd:d8:92:34:4b:fe:63:20:da:b9:8c:20:
74:bb:39:49:a9:80:94:a6:ab:de:2c:50:2b:20:cb:
5f:43:2f:d5:d9:57:4b:53:8d:5d:55:a1:f8:5f:7a:
78:88:ae:4e:4e:b3:fc:c0:15:12:28:60:0c:03:ec:
f4:c3:68:1f:c4:8d:5d:d5:61:a6:3b:7e:7d:62:65:
47:c6:ec:bd:d4:9c:fd:b2:87:1a:dc:2b:df:9f:6c:
e1:10:c2:1e:86:46:3e:2c:87:5c:cf:8b:37:5d:d7:
d5:b5:9a:68:8e:0c:e2:bc:e2:a6:c9:2b:27:da:32:
cd:f1:63:c0:6d:6f:32:f5:a3:5c:af:9c:62:30:c7:
53:ae:29:fb:e2:3f:93:ee:8f:05:1e:03:53:90:b5:
1a:9f:51:42:d5:12:53:c4:bc:07:8e:e8:33:2c:ff:
56:b3:ab:db:4b:02:a9:09:de:80:56:96:65:97:47:
ba:9e:dc:55:ac:aa:13:b3:36:eb:82:21:66:98:2e:
d0:a5:9c:eb:94:70:1b:ee:88:72:2c:c4:d7:d0:f2:
8a:bc:5d:09:2c:fd:06:01:c7:8b:80:df:af:93:6f:
3f:19:85:d3:12:8c:b4:d0:ca:17:5b:f1:06:87:e9:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:94:77:64:D2:15:96:31:0E:98:41:60:EA:7A:40:6A:7A:C9:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07E449B6F81611EF8A9E218A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7a:2e:36:f6:a9:93:c6:a4:c7:79:a4:a0:7e:0f:23:13:d9:
78:8c:97:34:16:bf:70:d2:87:12:46:27:04:94:9a:af:24:89:
9f:64:d7:da:5f:58:31:dc:b9:2a:32:03:42:cd:15:c2:ba:86:
fd:13:23:24:88:3e:33:43:2f:54:e3:26:cc:5f:55:53:f5:b9:
da:e8:07:54:2f:65:b0:ef:b8:1c:ba:2d:c2:58:76:db:c8:fc:
17:e2:2b:85:6b:07:c0:8c:72:fd:9e:6b:cc:6e:64:6d:1c:8f:
65:1f:6b:1a:b2:cb:78:f6:aa:20:30:8f:28:94:25:a4:f5:0a:
7b:1d:14:5b:16:47:e0:c7:c8:ec:28:68:2e:b4:57:bf:fc:bf:
6a:90:95:0f:a7:1f:8b:ac:86:4b:ce:6b:9d:32:00:67:cd:c9:
ae:cd:f9:1f:32:b5:1d:7f:9b:0f:6d:af:7f:33:a0:88:6a:74:
40:48:0a:0d:e1:a4:72:2e:e3:87:29:60:32:3f:a4:3a:de:23:
ad:d5:76:97:56:e2:c9:2e:11:51:b0:71:70:09:1e:ce:59:60:
d6:60:2d:dd:7d:cc:b4:f4:79:15:2f:5e:ba:ff:72:40:28:7b:
9e:69:80:54:6f:c3:71:9b:59:a4:bf:c4:51:ea:e8:39:3a:75:
92:12:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:29 2025 by rpki-client