Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A418340CC011F09C4AF0AD762E951A.roa
File: 19A418340CC011F09C4AF0AD762E951A.roa (raw, json)
Hash identifier: LeRm9BGwpaBE7cfJ+yDeJN3SIoouBxXdXfgVUBeLRn8=
Subject key identifier: 5D:4C:0B:01:87:A5:E5:34:8D:38:30:2D:39:F5:20:1C:FF:75:AD:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A418340CC011F09C4AF0AD762E951A.roa
Signing time: Sat 29 Mar 2025 17:06:05 +0000
ROA not before: Sat 29 Mar 2025 17:06:01 +0000
ROA not after: Mon 05 May 2025 17:06:01 +0000
asID: 395793
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95944 (0x176c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 17:06:01 2025 GMT
Not After : May 5 17:06:01 2025 GMT
Subject: CN=67e8287d-dbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:4b:df:54:36:a4:7b:a2:ba:89:89:2c:f1:
b3:3a:b0:34:8b:cd:df:a2:7c:30:53:a8:d0:03:8b:
96:66:01:7f:e4:e2:f5:ca:fa:79:e1:0a:fc:8a:72:
57:4a:cc:45:11:ba:f2:07:4f:79:55:82:42:d1:a5:
ae:85:b9:e0:96:c9:55:24:10:88:85:29:02:83:b8:
a6:c8:be:cd:d4:7a:ae:1c:ed:53:36:ee:e0:ed:48:
19:2b:d5:9f:61:24:79:c5:47:84:d8:5f:2f:f4:da:
1e:37:3c:b6:09:75:38:c9:94:0c:44:55:7c:30:88:
d3:d3:5f:5f:da:1d:05:ff:b6:71:9b:8d:73:22:f0:
43:a4:17:41:f5:e5:ea:cc:dc:98:e1:7d:37:53:2e:
11:87:15:3e:4e:49:88:7c:fb:a0:2b:e9:22:24:53:
e3:ed:2d:26:1f:f7:f1:b5:9f:16:f0:33:9f:2a:ec:
e8:ad:6f:c2:66:30:05:32:32:f2:5f:b7:34:7d:61:
7e:80:c4:84:9d:d7:77:44:4e:3b:ff:45:51:99:2b:
1e:89:38:9c:87:84:2f:11:89:a1:3c:95:2e:40:2f:
97:df:9a:a5:1b:ea:48:d3:a9:b2:0b:c2:92:43:88:
b6:7a:8b:e0:69:ba:f7:a8:15:4b:f8:16:86:0a:aa:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4C:0B:01:87:A5:E5:34:8D:38:30:2D:39:F5:20:1C:FF:75:AD:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A418340CC011F09C4AF0AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:85:50:f8:81:28:4f:60:bb:f8:8f:96:8e:ee:d7:4c:50:be:
b6:95:30:d1:97:fc:3b:b2:6b:28:a9:e7:11:1d:00:bb:9f:86:
d4:03:c5:54:7e:54:8b:b1:7f:52:f1:af:80:ed:74:1b:a9:24:
7f:f9:38:a1:e5:0c:14:d2:ba:8c:d6:4e:92:47:8e:7e:fc:f4:
62:5e:91:44:04:84:1c:08:3c:6c:c5:a2:11:95:04:b7:fa:c3:
10:7d:c3:b6:6c:ac:f4:b7:00:29:bb:c3:95:c5:66:5a:1e:4f:
25:3c:d4:e7:d4:b6:9f:ef:1a:37:56:a3:50:ab:c5:07:0f:8e:
b6:aa:a1:8b:9b:8d:53:78:57:2d:cc:5b:92:0f:3d:ac:da:69:
c2:9d:a4:19:23:cb:5c:e6:30:bc:9a:40:89:42:8a:0c:8f:c0:
b9:7a:7d:88:23:28:24:7c:49:ab:10:e9:df:7a:af:ce:97:5a:
8a:d0:2b:ad:bb:d4:90:b3:23:f2:d9:d1:35:62:43:4b:92:3a:
56:d6:93:87:40:fd:c7:13:f7:b6:ef:42:3e:b8:15:3e:da:1b:
4c:0d:3b:d0:72:0e:e7:a5:9a:06:b7:17:a5:b9:6f:5c:12:eb:
b5:e4:79:fb:31:a4:a9:6f:43:45:99:ba:67:08:cd:75:f6:b3:
14:a6:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:43 2025 by rpki-client