Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1DC62800B511F0A8CB0C80762E951A.roa
File: 2E1DC62800B511F0A8CB0C80762E951A.roa (raw, json)
Hash identifier: MU0cX8CUZ2AAB90zbcGo6TmKfo77w+ViQJ9XUJHNREA=
Subject key identifier: F1:A9:D2:0E:CF:25:4D:CF:01:5F:40:82:D4:C6:A5:B3:7B:F4:A9:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017430
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1DC62800B511F0A8CB0C80762E951A.roa
Signing time: Fri 14 Mar 2025 09:17:41 +0000
ROA not before: Fri 14 Mar 2025 09:17:37 +0000
ROA not after: Sun 13 Apr 2025 09:17:37 +0000
asID: 150706
IP address blocks: 154.212.129.0/24 maxlen: 24
154.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95280 (0x17430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 14 09:17:37 2025 GMT
Not After : Apr 13 09:17:37 2025 GMT
Subject: CN=67d3f435-07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:a6:c0:87:ff:bc:9d:75:cb:11:80:a8:9e:
d6:af:e0:fa:1f:62:19:0d:ac:33:24:71:3a:53:1e:
af:84:fa:c2:c5:20:f9:41:ad:bd:8a:56:2c:e4:43:
25:11:c3:f6:85:a3:fc:f2:89:ab:d9:f8:9d:e6:89:
00:8c:8a:8e:0d:87:42:6c:52:5d:5c:27:bc:1e:f8:
cc:e3:52:8e:7a:dd:14:2c:cc:fc:fa:12:5f:cb:97:
22:e8:71:a9:b9:39:b5:d8:92:2b:11:05:ec:a7:5d:
cf:a3:b8:e7:57:6d:f5:f4:6c:3d:04:c4:c5:59:a3:
79:76:31:f7:0b:a4:3f:c3:3e:2c:88:e2:48:e4:0c:
db:a2:68:2c:61:be:c7:40:48:d9:da:e3:b0:30:dc:
7b:13:db:74:48:86:b8:f1:4c:be:01:71:55:3d:52:
6b:89:64:4e:1d:81:18:0d:cb:c4:4f:71:5a:97:7b:
4e:13:08:f7:5c:3f:3d:1a:7e:67:db:c7:70:ef:e7:
e0:c4:b8:b7:39:5e:3b:23:a6:f3:ff:a5:ba:d1:bb:
12:e1:99:f1:4e:b3:ef:b0:34:b0:3b:b3:de:af:29:
b2:20:b0:11:16:d2:98:b2:f6:15:8c:8e:ec:e2:7c:
5b:2a:85:3e:ac:06:79:79:3b:50:4d:11:ae:29:54:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:D2:0E:CF:25:4D:CF:01:5F:40:82:D4:C6:A5:B3:7B:F4:A9:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E1DC62800B511F0A8CB0C80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.129.0/24
154.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:77:78:cc:11:55:ee:2a:b4:9b:1d:71:b6:75:15:3f:1d:74:
d7:76:71:f2:bd:8c:24:b2:4e:fb:de:c7:89:65:3e:9d:b7:41:
ac:5a:4c:40:63:01:d8:8e:58:88:44:9a:9f:0e:62:b2:01:58:
c7:0f:d8:2e:10:c1:df:c3:d8:39:81:11:47:3f:cb:78:ac:a5:
8b:20:b6:93:42:88:4b:bf:66:97:ec:db:ba:d4:a9:55:9a:be:
5d:1d:51:64:fd:9c:f0:fb:45:90:9c:b0:aa:05:57:56:73:29:
70:b8:cd:98:d4:52:ae:60:17:c8:d1:81:46:b1:0b:a8:e4:70:
ab:0a:e7:b5:c1:e6:9a:77:23:de:3f:52:d3:e8:32:e0:07:bd:
7c:1b:4f:01:c9:30:2e:fb:08:5a:39:57:19:4e:3b:80:fd:fd:
ca:4c:7b:be:e1:5c:10:52:71:c2:dd:ef:8d:64:55:86:17:6a:
d2:19:b4:5a:66:c5:00:67:54:69:80:f6:99:b7:48:27:82:ea:
69:3e:44:6b:6c:7f:11:67:ff:f6:ee:85:29:89:8e:38:f3:dd:
23:05:ef:67:00:e7:ee:48:75:07:53:c8:51:c1:52:82:8e:21:
e8:b3:97:e9:1a:b2:0f:7a:ac:78:6c:71:1e:a2:c0:33:dc:1f:
8c:90:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:24 2025 by rpki-client