Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3857A4F0C40711EFAEFE7DB0762E951A.roa
File: 3857A4F0C40711EFAEFE7DB0762E951A.roa (raw, json)
Hash identifier: dPfsQWuPIEnudumEL4Xicn7yMML5xIN9HNnEbP0z5zI=
Subject key identifier: C9:41:0D:02:FE:AC:F0:F6:F7:FB:B5:3F:65:0D:9D:09:47:54:9C:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3857A4F0C40711EFAEFE7DB0762E951A.roa
Signing time: Fri 27 Dec 2024 04:01:16 +0000
ROA not before: Fri 27 Dec 2024 04:01:12 +0000
ROA not after: Sun 12 Dec 2027 04:01:12 +0000
asID: 17561
IP address blocks: 154.194.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76013 (0x128ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:01:12 2024 GMT
Not After : Dec 12 04:01:12 2027 GMT
Subject: CN=676e268c-5eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:4c:cf:68:78:1a:22:24:fe:a1:b2:cd:83:
c3:c4:42:b8:0e:fe:aa:93:05:ac:33:1e:95:94:8a:
ba:ff:96:84:f8:35:29:76:90:54:69:25:53:31:cc:
40:6c:9a:c4:05:c4:e2:64:c3:ba:2a:de:64:f0:b0:
29:a4:86:5f:de:95:39:8d:09:10:4d:0b:fe:b0:cf:
66:81:0b:45:eb:04:71:f8:7c:13:42:78:43:19:f4:
b1:d9:86:30:07:65:ea:43:78:92:fa:31:dd:97:09:
e5:eb:b0:3a:8d:2c:06:c6:52:f0:2a:65:e0:58:f0:
5f:e7:d4:bc:c5:91:75:e0:03:3b:e2:82:e5:21:82:
c0:f2:b0:8e:01:f2:9f:b6:75:1c:6f:83:d1:af:f5:
c1:17:c1:f8:55:ae:8e:5d:fe:67:b9:43:1f:53:8d:
a4:50:21:b9:8d:5a:eb:ec:aa:97:7e:ea:e4:90:3d:
ed:35:d4:2f:41:2a:de:78:ba:29:08:20:04:5f:05:
9b:e8:c0:05:df:79:cc:f5:3c:01:fd:05:20:d2:cc:
69:3c:d7:5b:52:5a:8c:6b:59:d1:97:b0:34:7b:cb:
e5:45:ff:1e:84:53:94:b7:21:85:c3:df:39:d2:03:
d1:97:17:d6:97:80:d4:b7:47:06:c1:7d:8a:e5:d6:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:0D:02:FE:AC:F0:F6:F7:FB:B5:3F:65:0D:9D:09:47:54:9C:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3857A4F0C40711EFAEFE7DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5a:e5:1d:48:ba:29:8e:83:43:fd:2a:e5:9d:c9:1f:45:3a:
86:c0:9c:c2:ba:e7:dc:34:10:82:2b:44:e2:87:41:55:30:9a:
2e:6a:8f:a7:eb:02:96:11:a7:34:95:0a:4d:1b:94:38:e7:4e:
31:fe:7b:b4:31:2b:28:73:33:02:fd:2a:ab:08:c9:26:78:95:
5d:e9:ad:45:8a:f2:b6:06:30:72:c8:a5:1e:13:75:41:c1:88:
fe:bd:7c:52:a3:a8:40:84:76:ef:89:10:a7:fb:22:6b:89:88:
42:32:f2:7a:4c:3a:df:ae:ff:9f:0d:d7:61:49:d0:60:b6:60:
a5:db:5e:75:90:73:5e:81:65:cc:29:ea:cb:b4:24:70:f9:4f:
45:53:d0:09:7a:23:fe:c0:66:37:dd:9b:fb:46:5f:f6:52:2c:
53:38:dc:f7:07:7c:ad:e4:b9:0b:95:85:70:24:1b:9f:0e:0f:
6d:82:10:75:e6:e9:65:f2:55:78:70:c0:b4:55:e1:ae:89:24:
66:02:7f:7f:19:1d:cb:a9:7b:0a:55:c8:c2:99:98:ca:0e:03:
53:20:ea:cf:59:1d:d1:e7:91:15:ff:6c:bd:e9:3b:9c:3d:56:
75:c7:12:57:47:1a:f3:43:a0:a7:d6:14:9b:51:09:d1:f8:02:
68:9d:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:00 2025 by rpki-client