Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37945BF0CF6D11EF8C69E5A4762E951A.roa
File: 37945BF0CF6D11EF8C69E5A4762E951A.roa (raw, json)
Hash identifier: GWOlyUWKLr8Lho1sSREXNMyiEl8YKV2/tsOBBFb7kg0=
Subject key identifier: 38:D4:F3:FA:92:0F:06:68:C6:E2:83:F2:80:26:19:10:EA:98:CD:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37945BF0CF6D11EF8C69E5A4762E951A.roa
Signing time: Fri 10 Jan 2025 16:09:06 +0000
ROA not before: Fri 10 Jan 2025 16:09:02 +0000
ROA not after: Sun 12 Dec 2027 16:09:02 +0000
asID: 17561
IP address blocks: 154.81.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80454 (0x13a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:09:02 2025 GMT
Not After : Dec 12 16:09:02 2027 GMT
Subject: CN=67814622-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:ae:51:c9:91:0e:99:1b:92:7d:c9:7c:45:
cb:e7:76:62:2c:98:6f:96:27:98:8b:fd:70:b9:f7:
b2:5a:cf:d8:b4:15:8f:34:2d:01:b1:17:93:14:cd:
ae:d6:ed:9e:d9:be:89:98:5d:77:8f:2c:01:6f:62:
cf:30:1c:8f:72:b6:48:80:8f:43:8a:94:c7:8f:98:
e5:27:43:43:ec:78:12:08:c6:7b:04:dd:04:99:13:
35:a9:aa:82:11:9c:b7:d7:42:a3:63:64:a6:01:27:
14:ad:63:6f:d3:1d:20:df:f0:63:b9:4d:91:86:d7:
6b:ce:51:6d:64:c9:4c:05:43:f4:fe:f3:bd:cb:41:
53:93:07:a1:d0:d1:5c:b1:49:72:ca:45:04:a5:61:
8c:e3:cc:fe:2a:ca:e3:5f:67:34:c9:92:43:2f:ae:
14:b9:b7:2b:0d:15:4f:85:0a:be:0c:b6:22:1b:04:
e0:87:5c:9b:12:25:1e:a9:7a:87:db:69:c9:1f:6f:
50:19:be:71:75:fb:83:4a:a0:60:10:70:99:d7:14:
e0:7c:9e:9d:09:68:25:8f:23:92:11:47:64:3f:4c:
8c:6d:ab:0e:48:3c:d2:e0:5e:ac:a4:a3:76:34:42:
f9:30:34:47:96:70:0d:1c:30:2a:25:cf:4d:07:fc:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:F3:FA:92:0F:06:68:C6:E2:83:F2:80:26:19:10:EA:98:CD:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37945BF0CF6D11EF8C69E5A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.154.0/24
Signature Algorithm: sha256WithRSAEncryption
77:de:60:93:1b:47:8d:82:96:f9:49:44:c2:71:1a:68:f5:f8:
d8:a5:f4:9d:ef:4c:a2:18:ba:9d:e4:22:92:bc:4d:fc:53:5b:
fc:65:34:1e:09:aa:b1:de:0a:65:cc:ef:e7:c4:e9:94:10:5c:
02:e9:03:79:70:86:c4:84:8f:32:a3:28:0c:c8:a8:d8:d0:72:
0e:19:e6:b4:63:dd:27:4a:4a:16:cd:b5:7d:7b:46:57:63:f3:
2d:09:f1:95:27:23:c7:d6:82:21:73:8c:f2:f7:50:ef:2f:33:
a2:c8:ac:3c:ee:73:4f:1e:b3:1d:28:1c:c9:c1:9b:8b:5e:0b:
87:f1:4e:0d:b4:2f:88:6e:5a:70:86:18:22:bd:0e:1e:39:7c:
0a:ca:b3:63:d6:97:5b:9c:f7:0e:1a:d8:d0:35:85:23:1d:ad:
68:d3:a5:fe:cb:b3:d2:45:fd:5b:66:2f:7c:78:b7:39:1d:ca:
b4:39:6d:a4:cf:f9:9a:cb:20:2d:ce:f1:92:51:0a:30:38:9d:
d6:66:70:b5:f0:74:3e:66:2d:48:66:48:49:c0:15:eb:71:74:
71:a1:3f:e4:a1:8b:28:aa:63:73:29:cc:41:5f:61:6a:35:ae:
d7:ff:03:94:70:a6:37:3d:3a:7d:ce:08:d4:17:c9:21:25:a7:
7c:b7:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:33 2025 by rpki-client