Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380CF5E4D97A11EF831B04B1762E951A.roa
File: 380CF5E4D97A11EF831B04B1762E951A.roa (raw, json)
Hash identifier: cCOFefolWMKGPHv23VJ6bvr4v3I0rGbETuqRALRTg1s=
Subject key identifier: 42:29:62:C4:3E:EC:97:25:01:09:BC:8C:05:B5:4E:F7:0A:AB:3F:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014178
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380CF5E4D97A11EF831B04B1762E951A.roa
Signing time: Thu 23 Jan 2025 11:07:22 +0000
ROA not before: Thu 23 Jan 2025 11:07:18 +0000
ROA not after: Wed 28 May 2025 11:07:18 +0000
asID: 62240
IP address blocks: 154.195.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82296 (0x14178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 11:07:18 2025 GMT
Not After : May 28 11:07:18 2025 GMT
Subject: CN=679222ea-f960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:01:7a:0a:96:fa:b1:f1:32:ad:92:18:46:
59:49:be:d3:c6:e4:a6:12:4f:b7:c0:36:e3:99:20:
d7:62:7e:9e:7d:62:b6:b9:17:28:26:e2:c0:a5:3a:
d9:bf:1a:63:5b:ec:4f:21:9d:7e:e2:00:91:4e:fb:
52:68:a8:a4:4f:84:99:af:68:f9:be:9a:3d:6b:72:
25:69:af:fb:06:ed:58:1c:e6:54:ea:2d:f4:47:7e:
85:3f:2b:d4:87:02:49:0a:e9:e4:32:34:7f:7b:46:
dd:f0:45:62:8a:46:c9:bf:4c:3d:05:20:a7:c1:e1:
9a:fe:7d:25:f0:c1:a5:da:fa:57:f3:57:94:11:21:
03:6b:66:fc:10:2d:93:ca:7f:4d:83:a7:3a:1f:a2:
ed:5c:33:2d:4a:28:8e:d9:bc:c6:4d:35:d2:c3:ec:
49:25:2a:f5:79:76:28:8f:08:91:12:ad:c7:65:d8:
12:4e:6e:d5:76:92:9f:54:27:21:76:14:41:53:18:
55:3b:7c:01:f0:bf:43:e2:36:52:ce:51:82:4b:d7:
8f:44:89:94:a7:62:50:0d:82:3b:09:cc:bb:3c:bc:
e3:50:31:05:ad:49:8b:09:88:f9:aa:b6:97:6d:b9:
83:85:11:98:77:3b:7c:c3:16:30:6b:17:09:d8:7c:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:62:C4:3E:EC:97:25:01:09:BC:8C:05:B5:4E:F7:0A:AB:3F:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380CF5E4D97A11EF831B04B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.118.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f9:cd:4b:98:0f:9f:ec:de:5f:56:dc:70:b7:e0:3c:38:0e:
6c:88:dc:b5:61:bc:b3:e0:f8:e8:6a:55:36:1b:75:5d:5f:9b:
f6:dd:1e:ed:fa:52:34:e0:57:b0:1e:05:52:30:27:d4:74:1a:
be:f5:dd:5d:61:b0:6e:f6:8e:ec:d9:28:cd:bd:3b:c4:30:12:
fe:a0:65:2e:af:1e:11:00:6f:05:3a:09:75:a5:21:21:68:c3:
2b:1c:16:8d:39:41:0b:0c:58:06:24:22:18:ce:e9:2e:8d:fd:
72:93:25:69:b2:fa:2f:ff:08:5a:53:e1:84:ec:19:75:08:e5:
27:4e:5c:0b:71:13:53:c3:bb:31:28:89:38:18:a0:6b:aa:72:
0f:79:9d:d3:f8:3d:d8:d4:b2:cf:5e:6e:c5:26:44:cd:88:1e:
cd:07:24:7c:4f:48:f1:5e:fc:32:70:ee:45:06:bc:77:38:cd:
3f:9a:41:e0:2b:5b:79:e7:ad:f2:f1:cb:3a:90:9f:1c:27:46:
72:3e:c7:92:20:94:bc:bc:6e:a6:84:c6:e1:9c:6b:65:d1:ee:
22:ca:a1:8f:86:27:7e:7b:13:5e:ea:b7:04:95:91:24:d8:e6:
ed:4a:57:8d:61:65:52:12:5f:9e:c7:d3:19:c5:74:88:82:27:
06:62:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:26:13 2025 by rpki-client