Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6E79DEDA5311EF91781C68762E951A.roa
File: 1A6E79DEDA5311EF91781C68762E951A.roa (raw, json)
Hash identifier: O9zml10xQHboUGkbAd+DDoZAYB+V7g78r9JZhlK6MMI=
Subject key identifier: 9D:78:98:FF:23:D9:4F:9D:07:3F:95:80:07:60:A0:10:EF:01:8C:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01472F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6E79DEDA5311EF91781C68762E951A.roa
Signing time: Fri 24 Jan 2025 12:59:53 +0000
ROA not before: Fri 24 Jan 2025 12:59:50 +0000
ROA not after: Wed 28 Jan 2026 12:59:50 +0000
asID: 28087
IP address blocks: 154.196.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83759 (0x1472f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 12:59:50 2025 GMT
Not After : Jan 28 12:59:50 2026 GMT
Subject: CN=67938ec9-f87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:f7:1f:f0:dd:82:ce:7e:38:18:5a:17:a1:
64:d7:b9:db:57:5f:26:4f:6b:b1:31:03:8f:93:80:
bf:5d:ce:56:28:bc:ed:49:88:83:73:b1:c5:68:60:
9c:83:89:83:2d:2e:fd:de:2c:7f:55:f9:0a:c7:74:
5d:27:ea:42:2d:28:8b:6d:26:d4:77:af:b7:a6:70:
b2:7d:c8:19:85:4e:88:32:1a:24:d2:c7:3d:e8:10:
df:38:ac:0b:e9:e6:39:55:c5:ac:31:5b:9f:d3:f0:
49:e4:59:af:51:c6:3a:e6:92:2c:bc:c0:f0:c6:88:
26:83:ed:f4:f4:dc:be:6b:1a:b4:54:c2:b6:35:7f:
6e:4f:b4:f3:5f:8a:e4:9c:74:54:17:7f:e4:cd:14:
37:76:57:63:0c:42:79:5a:6d:5e:c5:43:92:a6:a7:
87:a2:f7:cd:eb:6b:89:02:63:90:66:ab:26:bc:18:
f3:58:10:46:ad:12:da:e5:64:fb:0e:46:00:77:fc:
1f:85:54:30:68:a7:0a:41:23:23:82:ef:0d:69:9b:
16:cc:9a:b9:51:53:49:91:67:1c:eb:f1:c9:d4:dd:
9c:ff:b4:a3:11:66:67:c1:e8:03:78:6d:bd:37:21:
fb:15:6c:78:be:8f:f2:66:82:19:b9:6a:ec:fb:c0:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:98:FF:23:D9:4F:9D:07:3F:95:80:07:60:A0:10:EF:01:8C:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A6E79DEDA5311EF91781C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:94:16:8c:8e:6b:63:7b:02:51:bc:2c:7a:0e:e9:90:2f:07:
1c:61:5c:b9:f3:e2:4a:52:2d:cb:63:0c:92:22:1c:ac:b7:6d:
b1:77:da:3f:cc:34:4d:68:88:d7:78:3f:45:9f:f0:c9:16:d7:
f0:b2:d0:57:11:ac:e1:7c:63:c3:ae:7d:54:fe:40:02:1b:95:
13:0c:e4:7c:6f:eb:b6:c3:e1:79:b2:53:db:63:f9:e3:f1:fd:
77:23:5b:b6:fd:61:c3:92:b8:06:4c:2a:ce:37:97:68:16:56:
58:ee:9d:3b:d4:e1:80:0f:90:3e:54:fd:f1:93:43:4b:f1:ce:
f4:0a:b3:00:18:da:5a:91:7a:0b:89:71:eb:96:e1:3a:a2:f2:
da:ef:d5:f2:32:e7:1a:06:e6:af:fc:57:cf:f3:d6:f7:97:8e:
b2:e2:e1:7a:e8:35:ae:6d:62:56:43:a8:8f:4d:a3:6a:57:04:
9b:20:0c:03:2d:3b:7d:cb:8f:80:1c:60:eb:bd:50:a0:88:1e:
8f:18:64:d2:bd:f6:bf:9b:35:11:a4:be:d4:d9:55:e1:b3:39:
0e:ad:0c:1f:f7:15:94:71:4d:61:c2:48:3f:0e:d5:2a:54:a3:
f3:30:f8:57:99:39:99:a9:44:e4:ae:fc:70:44:5b:5b:56:99:
43:6d:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:29 2025 by rpki-client