Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3069F35EF5CD11EFAA15077D762E951A.roa
File: 3069F35EF5CD11EFAA15077D762E951A.roa (raw, json)
Hash identifier: 0fb/ftmcbLCnOmKfnfufWr7iZDtp1fCR8VyVroxD9ns=
Subject key identifier: 3B:ED:8F:5B:68:71:B2:25:64:1A:85:75:22:A8:CF:71:6E:89:52:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3069F35EF5CD11EFAA15077D762E951A.roa
Signing time: Fri 28 Feb 2025 12:11:50 +0000
ROA not before: Fri 28 Feb 2025 12:11:46 +0000
ROA not after: Fri 11 Apr 2025 12:11:46 +0000
asID: 138915
IP address blocks: 154.203.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92948 (0x16b14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:11:46 2025 GMT
Not After : Apr 11 12:11:46 2025 GMT
Subject: CN=67c1a806-760e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:e4:b3:0c:96:80:67:c6:7c:30:0e:af:af:
70:21:47:e1:1e:7d:41:ad:83:de:fb:77:d2:93:2f:
21:4a:7e:c3:0b:a7:e8:dd:43:ee:33:74:fb:ab:03:
2b:22:41:cc:ec:93:b8:aa:fa:5e:dc:dc:7b:a5:f1:
4d:6d:ea:04:85:b4:df:73:58:97:b8:5d:d7:e3:06:
b7:fb:d3:f6:c5:5e:c4:f2:89:1a:8b:2e:4d:6a:8a:
b2:46:a9:9d:0f:9b:8d:28:f0:79:38:69:cc:91:df:
eb:2a:72:17:4d:7c:c8:9e:51:5a:ea:d5:35:da:52:
38:aa:9f:52:89:cb:a6:b6:10:5b:b9:5d:fc:44:44:
78:d0:27:10:a4:9a:79:76:be:dd:23:3c:14:1a:4d:
aa:27:2e:f9:10:89:48:0f:0c:c4:c6:56:3d:71:d5:
42:52:05:69:d9:18:46:27:9d:9a:fa:66:0f:4d:a3:
cd:a9:fa:47:68:5b:8e:2a:08:06:0d:aa:6c:9e:c7:
51:46:7d:5e:74:50:54:94:eb:aa:5b:2b:91:ff:5b:
80:01:e4:01:93:c7:dd:4e:3e:e2:99:33:ec:c4:cb:
2f:e3:db:87:9d:03:c8:4e:90:5a:0b:7f:13:3d:1d:
ea:c2:e6:03:c5:29:23:20:fa:f2:03:ef:1f:bb:f2:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:ED:8F:5B:68:71:B2:25:64:1A:85:75:22:A8:CF:71:6E:89:52:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3069F35EF5CD11EFAA15077D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:02:7e:af:a0:fc:11:97:06:5b:7a:89:92:1d:6e:25:e4:e7:
7f:0d:58:45:8a:16:fe:73:4d:cb:e3:aa:8c:52:31:02:e0:7d:
98:c4:20:cd:aa:d0:42:3f:12:ec:bf:ed:f9:3b:4e:a6:c3:ab:
d7:dd:95:77:f9:fc:b6:49:00:07:05:9b:12:e9:fb:69:77:5d:
3d:d3:e9:ba:05:e3:f8:85:45:5c:f0:63:62:36:0e:fa:f4:f3:
aa:fa:cf:30:b3:16:f2:6b:9c:df:a2:36:f4:f2:5c:50:7a:0a:
48:0a:b8:ba:84:d0:1f:9c:0f:34:4e:00:39:b5:32:f7:5b:9b:
b6:d9:f6:d5:a2:bf:bb:70:f2:a9:44:2a:84:68:c8:b2:9f:ee:
55:e7:b7:18:1c:7f:86:67:9a:b5:72:df:b1:69:34:05:d9:9a:
94:10:ff:2b:03:40:ad:30:0f:13:e6:8e:28:35:a5:68:96:e5:
35:06:14:2c:d0:75:a9:ca:d5:7b:59:23:3c:c3:47:a4:55:71:
33:d5:79:47:f3:36:8d:4d:f9:1d:06:87:77:35:32:b6:1a:c0:
64:d8:23:f5:82:bc:8a:92:2a:e6:37:4b:96:b3:c2:1b:12:52:
0d:70:e7:d7:44:55:45:d7:f5:41:de:bf:b6:91:97:54:7f:fc:
77:5a:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:16 2025 by rpki-client