Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A74A16FF3C11EF8CC42185762E951A.roa
File: 39A74A16FF3C11EF8CC42185762E951A.roa (raw, json)
Hash identifier: tsecRcMGqBO6s3xoeKDk+49OKBszTjWrFOnvlTvUbbI=
Subject key identifier: 9F:CC:DB:CA:C4:90:69:3A:17:8F:7A:4D:E8:B0:5B:1F:CD:65:E3:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017402
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A74A16FF3C11EF8CC42185762E951A.roa
Signing time: Wed 12 Mar 2025 12:19:20 +0000
ROA not before: Wed 12 Mar 2025 12:19:15 +0000
ROA not after: Mon 02 Jun 2025 12:19:15 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95234 (0x17402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 12:19:15 2025 GMT
Not After : Jun 2 12:19:15 2025 GMT
Subject: CN=67d17bc8-8ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:d4:0e:31:14:35:ea:36:b9:d2:3f:cc:54:
8c:5c:7b:bf:70:b3:da:b3:58:4b:c8:7f:a6:b9:51:
98:02:46:80:c9:df:d5:ea:81:e0:16:7a:b6:64:83:
3c:ae:db:84:7c:c4:4c:47:76:71:f1:4c:94:25:49:
b3:a7:e5:08:be:ae:2c:64:cc:59:54:15:40:e1:d0:
75:ef:fb:75:4c:2d:12:61:2e:dc:7a:79:7d:e1:dc:
1a:16:9c:87:37:4d:4a:ec:00:62:54:cd:d6:e4:35:
c2:c8:5f:02:e4:96:a1:fa:fc:fc:52:ef:67:5d:94:
0a:a3:34:24:83:e5:81:64:26:09:30:f3:9d:53:b5:
65:91:48:39:b6:62:f5:4c:94:28:b9:0a:e8:7a:97:
e8:fb:7b:ba:53:af:4a:53:bb:5b:41:2c:a8:b0:c4:
1a:bd:6b:cb:fe:1f:cd:1f:98:2d:86:3a:71:38:9d:
29:6e:2d:0a:d0:31:d5:f0:2b:3e:04:af:f1:8d:44:
66:29:3e:38:2e:e0:68:10:13:4c:9b:8e:9a:8e:ce:
6d:ed:b0:a0:3e:03:be:ea:e8:12:36:1c:28:77:27:
e7:6b:08:77:0a:8c:88:33:67:53:d1:07:31:3e:62:
42:bf:e5:cb:c9:23:83:0f:d1:ce:bd:0e:16:b9:37:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:DB:CA:C4:90:69:3A:17:8F:7A:4D:E8:B0:5B:1F:CD:65:E3:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39A74A16FF3C11EF8CC42185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:65:9b:38:f8:48:65:9f:61:cb:4a:8d:7b:cc:15:51:74:24:
20:b7:2b:ff:24:3e:2b:67:ca:d1:4a:43:43:c6:7e:0c:5b:0d:
ea:80:2d:87:7e:f2:5e:56:68:4a:7c:11:03:4d:19:f7:63:50:
b3:98:10:aa:cc:4b:3d:5d:68:cc:f6:43:ea:be:4a:49:a1:15:
92:75:bf:da:3c:5a:c6:be:d1:6f:e3:e0:c1:d1:52:aa:5b:20:
f1:ba:f5:89:bd:f5:1a:98:86:62:f4:a8:aa:94:b0:96:21:fe:
50:33:47:be:d6:15:ff:62:cb:d8:61:41:c9:26:e2:56:73:ee:
f4:a0:43:79:f5:5f:8a:22:9b:81:f7:3c:a2:0f:a6:c7:4e:08:
a2:9b:aa:e9:c1:17:d7:aa:d2:d7:13:a5:57:31:14:bb:07:42:
64:0a:8c:e4:3d:13:bf:3f:f1:8e:d5:a0:6c:71:19:fc:b8:0e:
70:6b:cb:bf:76:8a:ad:31:df:3e:98:a4:12:38:3a:fd:d5:80:
0e:72:c7:96:76:f1:cd:2a:d8:b9:76:0a:18:b4:29:7f:e7:7c:
01:cb:a6:a8:2b:64:a2:2b:98:ca:ee:75:72:05:84:6f:5f:5b:
0c:fb:15:92:f0:ea:3d:da:9b:05:11:ae:87:40:1e:f5:56:cf:
8f:ab:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:01 2025 by rpki-client