Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CD6CBBCF62A11EF8FE3B66F762E951A.roa
File: 0CD6CBBCF62A11EF8FE3B66F762E951A.roa (raw, json)
Hash identifier: 8820A30aqRNd/MT82HGQV2sLH32O0GCUBE0PIsr0KgI=
Subject key identifier: D7:3A:54:10:20:62:84:5A:1D:A2:5E:D8:97:C3:12:A0:D9:24:E7:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CD6CBBCF62A11EF8FE3B66F762E951A.roa
Signing time: Fri 28 Feb 2025 23:16:34 +0000
ROA not before: Fri 28 Feb 2025 23:16:30 +0000
ROA not after: Sat 19 Apr 2025 23:16:30 +0000
asID: 138915
IP address blocks: 154.93.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93375 (0x16cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:16:30 2025 GMT
Not After : Apr 19 23:16:30 2025 GMT
Subject: CN=67c243d1-4b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:d7:71:7b:38:62:1f:44:13:66:1c:2e:63:
76:7a:3e:4f:c0:3e:24:81:88:8d:c1:8b:56:07:60:
9c:d7:e7:b0:e3:57:41:15:f7:0a:42:f9:82:a2:a9:
3f:a2:48:6f:e0:64:2d:1b:65:73:f6:5c:51:45:6c:
9b:5a:55:bf:47:fc:d0:cd:bf:40:1e:94:0e:d0:da:
ef:bc:00:35:da:28:53:74:a8:f6:ed:0d:46:71:0a:
c1:78:99:96:46:8f:ed:fb:2e:94:b1:7b:b5:2c:41:
12:71:9e:68:9e:3d:7f:03:90:6c:4c:67:12:63:b6:
6a:e8:35:f5:f4:c1:cb:1f:23:6e:e0:c7:5f:91:f6:
ec:11:4a:cd:b8:b8:b0:c1:cc:8d:5e:d5:99:06:b0:
6f:b8:50:28:70:f5:fe:12:f0:15:fc:21:8f:c0:a5:
b9:e9:26:92:e1:7a:f2:5d:54:d8:87:93:14:3e:95:
20:7c:97:0a:37:70:b7:da:e2:57:e5:ed:95:17:b2:
3c:85:26:80:cc:28:54:66:15:06:1e:93:37:e5:c1:
04:4c:4b:d4:a2:0e:36:34:7d:df:57:05:c5:68:66:
68:a7:af:58:5e:d1:ef:e0:f2:86:f8:d8:4b:a7:6e:
37:ad:2f:93:b2:92:57:23:20:b9:70:e7:4f:49:db:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3A:54:10:20:62:84:5A:1D:A2:5E:D8:97:C3:12:A0:D9:24:E7:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CD6CBBCF62A11EF8FE3B66F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:6c:e3:10:7f:05:e2:7f:4b:a1:e7:f5:4b:1d:51:34:11:35:
fa:d7:46:81:11:ab:1e:e3:1f:68:d3:98:f8:9e:93:05:eb:78:
cf:dc:c4:2e:6d:33:af:36:b3:86:39:f5:64:3e:7e:b0:c0:ee:
31:a4:3f:14:b0:fc:5c:2d:20:44:6c:4f:26:05:fd:79:80:5e:
67:8f:2b:48:e2:e8:f7:9d:03:c9:b7:e2:d7:74:e5:a4:23:d9:
38:47:7e:fd:d8:64:1f:4c:cd:dc:ce:41:94:6d:a5:21:f9:87:
62:90:63:c6:af:69:d6:8c:48:79:6c:f6:13:fc:3e:8a:5b:6e:
9b:45:a9:26:62:7b:89:ec:2f:d3:5c:58:68:9d:3a:cf:44:79:
aa:31:30:b5:21:a3:ec:64:86:4a:85:95:73:f9:67:28:12:45:
46:e8:5a:98:05:4d:e1:ee:26:05:8a:de:b5:97:d1:c4:63:6a:
79:c2:4e:f9:fe:75:bc:ae:c8:fc:7d:24:26:94:54:11:cb:98:
8f:8e:68:0c:f5:20:c1:48:c6:e8:d0:82:f6:d8:3d:31:09:6c:
30:0d:81:5c:cf:08:1b:4a:5c:55:05:4b:dd:ab:44:6d:be:93:
f9:a0:24:46:c4:86:a4:cc:9d:d5:ad:b3:e3:72:f4:2c:62:b1:
25:ce:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:40 2025 by rpki-client