Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2872097E00C811F0AD47D178762E951A.roa
File: 2872097E00C811F0AD47D178762E951A.roa (raw, json)
Hash identifier: +XOjgkZyFlzPzDgioYVe1y5lHDpjLaC/CrKIrADDSB8=
Subject key identifier: D3:FF:16:DB:6A:01:6F:F5:ED:09:CF:01:36:A0:6B:97:0B:67:CC:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017450
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2872097E00C811F0AD47D178762E951A.roa
Signing time: Fri 14 Mar 2025 11:33:32 +0000
ROA not before: Fri 14 Mar 2025 11:33:28 +0000
ROA not after: Fri 25 Apr 2025 11:33:28 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95312 (0x17450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 14 11:33:28 2025 GMT
Not After : Apr 25 11:33:28 2025 GMT
Subject: CN=67d4140c-8e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:71:73:76:0a:06:8c:23:1c:20:e9:fb:7c:
51:79:7d:b7:a0:1c:f2:3a:d2:63:4a:02:ec:89:b5:
ec:0c:77:dd:3b:3c:66:7a:be:01:38:10:0b:17:64:
f9:3a:0d:5b:11:b7:f2:e6:c8:1e:14:28:6c:f2:89:
e8:63:0e:29:44:1f:5c:a3:36:84:2e:99:86:76:82:
c4:7e:4d:c8:03:19:17:b3:55:78:b0:44:9f:48:b8:
f8:b6:42:39:b4:96:4e:cf:63:c4:d5:a4:00:69:38:
5c:48:1e:1e:18:88:aa:f3:8a:5c:1d:7a:0b:74:87:
76:f1:34:fa:ca:99:57:f0:0c:f0:33:6d:44:d3:b7:
94:29:b6:59:26:65:29:3f:85:32:44:e4:7c:9d:6a:
ca:59:01:68:6e:54:f1:6d:d2:7c:dc:3f:e5:cf:3e:
3e:83:38:7c:5a:c0:8e:01:ef:18:54:3f:3f:f5:5f:
e1:09:79:7f:b1:a1:8b:0a:3e:82:41:a9:f0:e8:71:
45:0e:85:f3:46:d0:e9:ba:69:8d:34:52:4f:66:0e:
fe:6d:b5:9b:e2:aa:09:94:41:56:ac:05:cd:bd:99:
5a:6d:9c:45:5a:32:c7:63:f5:c3:bc:38:07:a3:0d:
ea:f1:aa:03:2d:e7:9a:81:0e:50:10:f0:f5:06:48:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:16:DB:6A:01:6F:F5:ED:09:CF:01:36:A0:6B:97:0B:67:CC:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2872097E00C811F0AD47D178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
94:d5:28:ad:43:ef:72:47:e1:94:66:dc:e9:da:5d:96:1a:db:
e3:05:0f:3f:61:6a:48:5f:b8:45:29:28:da:ae:0e:ce:fb:ef:
b2:cc:16:55:b5:23:73:a2:a7:e9:cf:42:a6:7b:f0:d7:51:62:
ed:de:fb:47:b8:89:96:2d:41:68:1b:7d:cb:5b:33:bd:ab:dd:
99:69:92:54:29:b4:f2:21:6f:21:c4:aa:60:0f:42:99:ae:8b:
f1:e1:e5:d9:03:4a:c0:7e:a6:fe:65:45:af:89:d5:5a:c5:0c:
5f:8a:ad:fa:bc:07:d8:88:73:88:dd:2e:19:8f:46:45:59:27:
45:f4:7a:b4:9f:af:9d:4f:da:69:b6:f6:d1:5f:91:bb:fe:b7:
be:25:32:b3:02:d4:5f:f9:86:e1:f9:7b:72:68:69:3b:e3:3a:
47:96:dc:9b:8e:77:d0:3f:58:b2:98:72:2b:0f:19:7c:cf:57:
24:c5:61:1c:18:aa:3d:0f:6e:32:9f:26:0f:b0:ba:34:38:4b:
eb:41:d1:8b:b4:e4:ad:5b:b3:9b:fa:2f:d3:ab:46:ad:70:9e:
f3:46:c7:60:c3:39:7f:a8:cb:ea:3d:13:d0:76:ce:11:2c:b4:
2a:2f:33:c3:8c:89:5a:5f:e5:4a:e0:4d:44:65:da:8a:11:7b:
10:0a:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:50 2025 by rpki-client