Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFD68AEF34C11EF8E4DD440762E951A.roa
File: 2DFD68AEF34C11EF8E4DD440762E951A.roa (raw, json)
Hash identifier: +X3zIDLXUqDxnVADoob9OUo06ndiHGdxnLwW+/q3QWE=
Subject key identifier: DC:D7:30:4B:C4:1C:57:EC:3E:0F:38:52:9D:02:E5:C9:E2:74:49:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFD68AEF34C11EF8E4DD440762E951A.roa
Signing time: Tue 25 Feb 2025 07:43:19 +0000
ROA not before: Tue 25 Feb 2025 07:43:15 +0000
ROA not after: Mon 07 Apr 2025 07:43:15 +0000
asID: 63139
IP address blocks: 154.223.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89444 (0x15d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 07:43:15 2025 GMT
Not After : Apr 7 07:43:15 2025 GMT
Subject: CN=67bd7497-e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:d5:18:a7:8d:98:e3:ca:f9:4b:a6:9e:2a:
6f:b3:91:27:f3:c4:95:21:72:0d:d6:4d:31:7c:63:
94:d8:74:dd:b8:b7:04:9c:61:09:1c:44:4b:2b:ce:
4f:6a:84:83:ad:01:b6:e3:d6:56:82:81:d7:65:cd:
c8:28:3b:c0:66:09:de:76:19:12:c4:74:fe:f4:1e:
f2:10:66:c2:3a:a7:a5:c1:f4:05:7e:e6:ef:f1:f4:
37:c0:17:50:43:8e:79:62:ed:7c:ac:66:db:fe:5c:
8a:10:05:d7:67:34:78:1e:5c:9a:5c:31:68:62:e5:
fe:eb:ce:19:d4:ee:7a:ed:0f:e6:a1:14:89:aa:e9:
ec:89:b1:01:23:aa:04:6f:05:f4:06:e7:5a:0c:c8:
9a:10:f0:ae:81:98:33:ea:6c:7b:b3:aa:c9:d5:80:
d5:82:f7:ec:59:71:76:56:59:13:0e:88:32:50:7b:
20:1a:65:0e:47:7a:45:a2:d1:b4:6b:ab:e5:d0:b5:
ff:ce:d5:10:9f:bb:31:18:c8:dd:b4:f1:a0:c3:e0:
73:6b:9c:27:de:7f:65:72:96:07:c2:e4:15:6f:d1:
50:12:48:e9:ae:88:c9:50:20:5c:73:dd:77:51:78:
85:d2:81:dd:de:6f:4e:72:51:7b:c5:45:01:03:63:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:30:4B:C4:1C:57:EC:3E:0F:38:52:9D:02:E5:C9:E2:74:49:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFD68AEF34C11EF8E4DD440762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1b:eb:87:57:6d:7e:24:a0:16:b3:f7:fe:ad:18:c7:e6:38:
bd:e5:44:cb:1a:e5:15:dc:d6:82:6e:3a:5e:b1:79:50:4b:6b:
6f:e4:08:83:18:48:69:9a:45:1a:7e:0e:d5:37:b8:8e:3f:a0:
23:71:f6:8e:ba:e3:f5:e6:30:8f:6d:0f:55:e5:0c:98:2d:8a:
63:ee:23:84:58:c2:02:c1:6f:49:a0:f9:00:d5:54:86:50:58:
2e:be:5f:4f:66:3c:2c:1c:72:a4:6e:f5:17:02:04:0d:ba:bd:
60:8a:1e:24:89:70:82:36:17:c8:31:c7:dc:e2:02:7e:1a:37:
4a:89:82:fd:c8:08:8e:5f:1c:bb:88:d5:06:d6:62:fa:44:2a:
49:a4:8e:6d:1a:2c:e4:7f:9c:59:e4:2f:14:dd:6c:34:c4:8b:
c6:f3:a1:6e:de:56:16:63:75:52:f7:f0:c9:7c:8a:b5:7c:08:
54:de:e5:d2:ff:22:56:91:f8:76:bb:a3:17:44:9b:ef:09:e6:
01:2a:43:09:b7:e5:aa:9c:39:86:c7:6b:63:10:ed:0a:3a:0e:
bb:83:5a:ba:7a:d7:04:99:cb:bc:c5:03:bf:ab:e5:fb:79:9c:
bd:29:20:4d:4e:ab:0e:8c:ba:3d:c3:f0:54:30:0c:65:af:6f:
ad:18:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:38 2025 by rpki-client