Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3750A2FEC8AE11EF91D382B2762E951A.roa
File: 3750A2FEC8AE11EF91D382B2762E951A.roa (raw, json)
Hash identifier: ks5t/Py6D8b+V+E4HMYU3o6phRhPBnY0ijzeVjpJfi4=
Subject key identifier: 66:2A:6F:9F:AA:16:75:23:5A:40:93:22:F7:0A:6B:F6:F5:43:0A:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3750A2FEC8AE11EF91D382B2762E951A.roa
Signing time: Thu 02 Jan 2025 02:06:45 +0000
ROA not before: Thu 02 Jan 2025 02:06:41 +0000
ROA not after: Mon 13 Dec 2027 02:06:41 +0000
asID: 17561
IP address blocks: 154.220.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78224 (0x13190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:06:41 2025 GMT
Not After : Dec 13 02:06:41 2027 GMT
Subject: CN=6775f4b5-9ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:9f:74:a6:73:cd:2c:e7:98:c5:12:df:ad:
de:34:a8:76:c9:66:cf:a3:b2:cc:0e:9e:91:ce:82:
df:f0:06:5f:e9:2a:21:4e:79:3b:60:e1:b5:2b:71:
cb:aa:31:de:00:ee:c6:5e:57:8d:9c:a0:37:6f:71:
c6:85:b5:4a:ef:d8:ef:ce:7a:56:53:71:e8:55:bc:
5a:d1:7f:c9:9b:1c:b2:86:bf:ce:27:18:cb:2e:bf:
96:04:77:fa:bb:79:92:9f:5c:63:8c:cd:20:dc:09:
55:e3:98:38:fe:a6:02:ed:58:2f:5f:14:0c:3f:d4:
98:fb:50:f4:76:c7:e4:12:53:37:5b:56:51:6c:f8:
a6:75:05:5c:57:d8:72:13:3e:68:7e:d7:18:ab:ea:
bf:7a:3c:1d:f0:78:8d:10:f2:b9:44:25:90:3b:a0:
ac:89:c5:98:96:0f:d8:95:da:74:2a:ea:f3:9e:5d:
bc:29:e3:df:0e:7f:ea:f8:b2:66:64:7c:88:f2:a0:
61:32:2a:49:b6:49:65:11:28:92:93:95:9d:f0:62:
0c:46:00:e0:ed:b6:54:9e:67:99:32:65:9b:db:76:
e8:ba:1c:7e:8e:66:1b:ce:9c:e6:1d:33:0c:73:97:
8c:1d:fc:b5:b8:f6:e0:4f:18:3a:6c:17:15:da:fa:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:6F:9F:AA:16:75:23:5A:40:93:22:F7:0A:6B:F6:F5:43:0A:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3750A2FEC8AE11EF91D382B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9f:32:d1:40:da:a0:d3:8b:ff:b2:41:cd:ea:0b:8f:e8:27:
8c:46:5c:67:c5:d8:56:27:58:85:bc:05:59:0d:6b:1f:27:4f:
a6:9e:3c:1e:f1:ee:3a:08:c8:a4:84:4d:d9:b7:32:36:2e:da:
e8:c9:f5:58:2f:a5:d9:f9:cc:f4:35:ba:79:36:49:9e:4f:67:
b6:97:75:b6:3c:39:b5:50:34:af:c1:f5:42:1f:a1:09:c8:0d:
55:88:ce:ea:03:9a:22:ad:58:61:0e:25:43:2e:d8:d2:5f:1e:
fe:96:7e:3c:51:a9:1a:f1:da:8e:21:ee:39:2c:37:af:96:1e:
77:0a:8d:70:13:2b:91:23:4e:89:93:f8:06:58:04:be:01:14:
7a:e8:38:02:d2:50:0c:93:49:af:59:b2:19:36:f1:f3:f9:58:
76:71:d5:b6:8f:ac:e1:00:af:59:3c:30:c9:0c:f8:2d:dc:6d:
dc:81:43:5c:05:0c:8c:73:e6:d1:82:4b:93:6b:ea:9d:6f:38:
84:ce:d5:76:43:89:b7:09:f2:4c:45:81:a1:ca:57:12:4f:a8:
be:49:30:9c:1f:94:c2:9e:f0:69:d6:66:12:87:3f:3a:82:c5:
71:bb:b5:ce:c3:c1:56:c4:7e:e3:f1:46:34:f4:bc:82:38:55:
08:54:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:00 2025 by rpki-client