Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E4DFBB2FE4A11EF88E03375762E951A.roa
File: 2E4DFBB2FE4A11EF88E03375762E951A.roa (raw, json)
Hash identifier: HiD3nrB38T+yJsvaVofQqccn/E/rTbGYZz8o3Dyu5/A=
Subject key identifier: 1E:59:9E:25:79:04:5C:2B:0C:04:51:F8:F2:0E:89:CE:BF:C0:0E:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017362
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E4DFBB2FE4A11EF88E03375762E951A.roa
Signing time: Tue 11 Mar 2025 07:26:43 +0000
ROA not before: Tue 11 Mar 2025 07:26:39 +0000
ROA not after: Thu 17 Apr 2025 07:26:39 +0000
asID: 20473
IP address blocks: 154.83.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95074 (0x17362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 07:26:39 2025 GMT
Not After : Apr 17 07:26:39 2025 GMT
Subject: CN=67cfe5b3-b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:79:6a:21:2d:42:d1:f7:9b:8a:8d:72:73:cb:
ec:fc:24:ae:e6:56:3c:80:75:8c:04:f6:b2:2f:c3:
e3:cd:14:04:bf:a3:cc:87:1d:c4:16:3c:de:25:81:
cf:fc:83:ce:27:90:61:e0:8f:73:13:af:dc:4b:db:
0f:82:58:4b:77:24:fc:47:3e:81:57:ea:d4:f8:f3:
7b:c5:33:2a:41:7e:50:b9:fd:91:c6:e8:65:d8:3d:
43:e9:b6:ee:c5:b7:73:cf:11:3e:fd:79:f0:a9:0c:
2e:9c:cf:64:a5:cc:fa:1d:ee:a6:af:ee:3a:a7:93:
31:b7:ed:5f:60:1b:ae:84:35:f6:df:ec:8d:c8:87:
9b:4b:f4:6f:64:b2:09:41:9c:ce:01:ea:29:fa:95:
6c:92:e7:af:01:41:89:b7:ef:1f:4f:a7:12:6a:cc:
69:18:77:e8:7d:b0:41:3d:7b:87:53:3c:90:30:e4:
db:bd:44:7c:00:d3:30:7e:0d:f9:38:5c:46:86:5e:
30:07:9a:80:d3:2f:5a:0d:4f:fa:80:18:e6:d6:bc:
2b:80:ba:75:fb:d4:70:f6:1a:a7:1e:90:dd:6c:6d:
96:09:cb:99:f2:60:a6:e8:3c:7b:f7:ca:37:89:a6:
d9:f1:65:06:c1:9d:20:81:ba:56:37:99:43:ce:03:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:9E:25:79:04:5C:2B:0C:04:51:F8:F2:0E:89:CE:BF:C0:0E:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E4DFBB2FE4A11EF88E03375762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.188.0/23
Signature Algorithm: sha256WithRSAEncryption
57:39:a2:b7:f6:84:12:32:11:2f:31:4d:95:59:f7:62:fb:3b:
4b:47:26:3d:19:72:0f:71:86:2f:56:04:60:51:51:ee:44:61:
c0:ae:cc:5b:5f:f9:d3:42:f5:2e:60:d5:e2:c0:0d:3d:63:48:
81:7c:ff:f5:f9:82:ff:4b:d2:f6:5f:e5:79:d4:da:85:6f:fd:
2b:a4:cf:fe:cf:28:0a:5f:98:d3:e4:e2:e8:2f:12:5a:57:8d:
37:b1:48:a7:8d:7c:f6:74:03:70:97:a7:af:b4:d9:b7:19:0e:
27:3d:e1:10:6c:75:eb:cb:b2:66:d9:c2:7e:c6:c3:52:99:8a:
ac:8b:61:ff:d1:e2:d9:40:27:f8:b4:86:31:e5:43:37:cd:d3:
42:d0:fd:17:22:83:fb:ca:d8:18:08:7f:e4:63:7f:cc:4a:85:
dc:3f:bb:1c:23:1f:ab:30:27:42:4b:dd:c8:6c:ef:56:bb:39:
be:05:b8:0e:53:47:50:61:fb:48:cd:ac:cf:87:bd:1b:93:97:
6a:b2:94:ff:cb:d7:ad:73:36:9e:ec:56:63:69:dd:84:7f:db:
84:ff:1d:65:31:43:ff:e9:b5:3d:8d:3a:38:18:e1:7b:c3:22:
c6:ac:34:57:22:16:81:3c:de:7f:3e:ff:c4:42:39:46:ad:6d:
40:cf:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:08 2025 by rpki-client