Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38162D2CC92A11EFA1B89C46762E951A.roa
File: 38162D2CC92A11EFA1B89C46762E951A.roa (raw, json)
Hash identifier: r9ntpOVSoMCWw1zdRP0XM9D9M5iNEmeQG3uZlIL9Sk0=
Subject key identifier: E8:47:D6:AE:39:2A:89:5C:B5:CB:63:DF:B8:D5:5E:96:29:D7:00:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013375
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38162D2CC92A11EFA1B89C46762E951A.roa
Signing time: Thu 02 Jan 2025 16:54:24 +0000
ROA not before: Thu 02 Jan 2025 16:54:20 +0000
ROA not after: Sat 13 Dec 2025 16:54:20 +0000
asID: 984
IP address blocks: 154.222.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78709 (0x13375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:54:20 2025 GMT
Not After : Dec 13 16:54:20 2025 GMT
Subject: CN=6776c4c0-65ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:fa:fb:9f:01:4b:69:91:ff:f4:ff:5b:69:
94:72:2e:64:ee:f2:8c:12:5d:47:12:53:3a:62:9c:
7d:2a:94:45:4e:8c:a1:fa:a6:9f:83:e4:40:a0:2a:
1a:1f:5d:4c:cf:ba:45:bb:4b:28:85:98:8d:b8:ab:
3f:8b:07:a3:f5:03:5c:62:65:f0:c8:1d:7a:e2:f2:
23:18:ae:bc:cc:2f:d9:39:da:f1:ca:53:f9:14:b4:
3b:30:aa:69:e1:a0:89:a3:4e:e6:90:b4:33:74:43:
ca:1e:23:da:07:c0:cf:77:9e:de:a4:1d:f3:cd:b6:
22:28:06:b0:66:f5:38:0d:ed:ef:5b:71:0d:d5:5d:
15:86:fd:2d:8a:85:d4:06:c0:66:02:a2:ad:ad:45:
61:06:3e:9f:7f:2e:62:07:6d:44:ec:c7:1f:7f:3a:
8d:a4:6e:a5:47:45:27:26:47:1d:f1:32:ad:9c:a7:
93:d8:90:2d:a7:e4:87:fd:b0:70:4b:83:31:89:27:
bf:11:97:c3:a3:50:38:7d:70:16:a5:61:82:97:6c:
73:14:d6:73:fa:19:23:d0:dc:bd:a6:73:29:68:4e:
08:c3:69:b5:65:c2:dd:a0:10:e8:8d:c6:53:18:88:
70:23:5b:a1:97:8e:29:83:9a:77:68:f8:77:18:4d:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:D6:AE:39:2A:89:5C:B5:CB:63:DF:B8:D5:5E:96:29:D7:00:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38162D2CC92A11EFA1B89C46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.134.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4c:bd:17:0c:8a:49:58:ab:f8:af:43:e7:db:64:60:c2:c8:
69:33:2a:3a:0b:63:23:c0:19:42:05:c7:34:ee:9b:4e:a8:f6:
da:5e:8a:b9:95:6d:88:08:9e:17:dd:a4:c6:3b:b0:e8:e8:30:
af:ac:bf:8b:6f:b4:30:b1:74:12:89:13:1d:bf:c4:59:f0:5e:
7c:7b:5a:83:9e:6a:aa:76:11:73:49:24:8e:7e:36:57:a7:1e:
f0:ea:ef:dd:a8:e3:42:78:2b:2a:49:64:d0:cc:8d:49:e0:e6:
76:7c:9b:19:9c:a8:11:bc:bd:0e:69:78:c8:e2:ca:66:d8:17:
9f:dc:ca:c9:2d:83:0b:11:ad:5b:4c:6b:65:10:b6:b0:f8:b2:
cb:2d:38:1e:ee:25:8a:af:9a:ac:cd:89:c2:4b:70:e1:34:b6:
ac:76:37:aa:0d:8b:b1:c7:49:e1:b2:8e:7b:44:89:11:88:65:
a8:6a:01:6d:14:e1:fc:87:ad:8c:10:57:aa:66:33:41:ac:b7:
6c:29:b6:61:6b:e2:a8:4b:fd:ca:cc:9c:15:bf:cb:3b:83:73:
83:94:8c:5f:cd:66:c4:ea:67:9d:a1:11:54:5e:3e:47:e2:7f:
90:0e:bd:b7:0b:01:4b:46:7d:e9:c5:41:e2:11:d8:73:98:c3:
f0:94:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:36 2025 by rpki-client