Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F70AA6FF1211EFBDE1447A762E951A.roa
File: 36F70AA6FF1211EFBDE1447A762E951A.roa (raw, json)
Hash identifier: TxH2A8uPJmnYCXvKuiJ/40qX90F8WMqDJWuW/P9ll1o=
Subject key identifier: 48:18:F0:79:6F:63:B7:F1:69:2D:C1:C0:C1:0A:24:53:79:DF:3F:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01738B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F70AA6FF1211EFBDE1447A762E951A.roa
Signing time: Wed 12 Mar 2025 07:18:37 +0000
ROA not before: Wed 12 Mar 2025 07:18:33 +0000
ROA not after: Fri 18 Apr 2025 07:18:33 +0000
asID: 14315
IP address blocks: 154.92.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95115 (0x1738b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 07:18:33 2025 GMT
Not After : Apr 18 07:18:33 2025 GMT
Subject: CN=67d1354d-e032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:83:01:4f:34:57:25:f7:d9:59:ee:3e:9b:
43:90:ca:ae:44:1c:00:9e:ff:4c:fa:39:dc:b8:f1:
18:8c:67:07:8d:10:6b:e5:56:a3:d0:2b:34:80:d9:
49:a3:61:7d:94:fd:94:0c:f3:b7:bd:c6:4e:d3:3e:
47:67:19:69:68:37:f4:b7:54:96:a9:70:01:cd:68:
24:19:a9:68:1e:e2:4b:01:34:c4:05:27:2d:aa:e0:
5c:a5:9f:a2:85:17:7f:62:84:fc:d3:4a:a8:46:67:
4c:9e:7b:92:70:3e:9d:ad:da:9f:db:03:e3:10:d9:
2d:16:f2:ba:48:81:5b:24:aa:2b:42:36:8a:b6:34:
aa:7f:af:5f:81:1d:33:6b:75:c8:af:fd:0c:7d:47:
22:f8:c1:f6:f5:bc:ef:43:85:59:72:cb:52:d7:4a:
ef:c8:56:1f:89:03:29:81:ed:1a:4d:cf:4c:aa:3d:
b6:e9:62:f7:77:b0:55:de:33:4b:e3:0a:4e:45:af:
7f:fd:9c:98:89:8b:e1:40:90:77:e6:c1:aa:f9:38:
01:dd:6d:21:b6:6c:ba:db:3e:0d:40:20:b4:c8:77:
d2:4f:e1:01:67:79:4d:93:5d:bc:94:ea:16:63:ef:
a8:09:77:89:f9:14:0d:08:e4:aa:fc:4e:0d:49:73:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:F0:79:6F:63:B7:F1:69:2D:C1:C0:C1:0A:24:53:79:DF:3F:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F70AA6FF1211EFBDE1447A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:df:54:d7:44:47:95:40:e0:70:de:12:b5:61:7a:a7:0c:1e:
46:57:03:4b:15:bb:24:f4:58:86:95:22:c4:42:c1:3b:c4:93:
e4:ac:94:52:9f:42:c0:17:44:bd:0b:6b:ba:9c:ef:57:b1:3e:
b0:45:db:4e:22:10:27:3e:8a:ce:2a:b2:ed:da:f9:84:1e:9d:
17:76:a1:e3:03:f8:f0:96:76:e1:c2:7a:29:4b:40:73:b2:b6:
0c:7f:a1:99:01:53:e0:40:aa:83:5b:ed:86:df:ce:c2:3f:25:
2a:8b:e2:b9:e9:7d:f2:97:42:56:ff:b8:8c:9e:9a:f4:93:b5:
cf:04:ca:70:1e:43:0f:9e:47:85:a7:93:c2:0e:dd:ee:82:90:
89:ae:86:56:8c:60:ff:1a:5c:ec:d6:5f:00:9b:0d:62:5d:bd:
0b:37:e6:8d:e2:57:61:42:64:77:99:ec:8f:6e:95:73:57:9f:
11:5d:04:d9:2f:f6:65:96:7b:a4:88:51:ea:94:d1:fe:96:1c:
e0:e3:0c:65:06:4b:22:33:d5:76:cf:35:c5:e3:76:0c:1d:b8:
11:e4:af:dd:08:75:14:1b:81:73:01:5a:99:a1:ee:2d:bd:1e:
03:c1:dd:9d:c5:7b:87:b2:ba:96:61:4b:7b:ab:04:9e:05:bf:
a4:1c:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:34 2025 by rpki-client