Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4E7228C92211EF98EBBB92762E951A.roa
File: 3A4E7228C92211EF98EBBB92762E951A.roa (raw, json)
Hash identifier: V4FOXG+r4jqH7egejtTSzG1PdW2zOCl/lquZZKSsQns=
Subject key identifier: A7:7C:1F:48:60:0E:62:93:F2:C5:DB:44:5E:EE:C3:70:74:5A:16:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013335
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4E7228C92211EF98EBBB92762E951A.roa
Signing time: Thu 02 Jan 2025 15:57:12 +0000
ROA not before: Thu 02 Jan 2025 15:57:08 +0000
ROA not after: Sat 13 Dec 2025 15:57:08 +0000
asID: 984
IP address blocks: 154.222.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78645 (0x13335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:57:08 2025 GMT
Not After : Dec 13 15:57:08 2025 GMT
Subject: CN=6776b757-1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:66:f1:1c:bf:4e:03:4e:86:73:19:82:c3:
44:b9:75:35:10:e0:e6:a5:da:cb:9c:ad:0c:9b:52:
b9:d8:d3:83:fc:93:6f:c7:bc:cd:2c:68:a9:92:a2:
fe:a7:70:23:0a:e7:ea:e0:36:da:ba:ad:77:ce:ad:
d6:35:72:45:70:f3:ef:56:77:09:cb:04:9d:6b:4f:
62:27:95:5d:9e:5b:1d:f8:7f:27:f4:f1:6f:a3:27:
5f:63:1d:ee:0a:8e:ec:f7:28:d5:32:72:0c:0d:15:
cb:b0:4f:d9:00:7e:7b:b1:61:95:c9:cf:83:85:c2:
65:28:5d:fe:59:a7:30:fd:41:c8:02:10:1e:36:d5:
6a:22:7b:a8:6e:30:f8:6c:23:ff:19:9b:10:0c:79:
5e:34:bb:1d:57:a8:e9:b2:13:77:39:16:37:58:54:
ed:50:72:45:c2:63:c3:c1:a7:c3:6f:9b:06:90:0d:
dd:31:82:fd:93:1e:3e:70:9f:a4:e3:5a:43:03:57:
03:84:cb:da:06:e0:a3:12:94:3d:7f:07:66:67:d5:
0e:4b:97:39:fa:53:03:a3:48:13:d2:79:81:72:9b:
d4:d4:85:d0:d1:1f:1a:d0:ed:ac:bb:10:5b:78:59:
73:92:97:91:5c:91:2f:a5:fe:ee:a1:81:fe:33:30:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:1F:48:60:0E:62:93:F2:C5:DB:44:5E:EE:C3:70:74:5A:16:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4E7228C92211EF98EBBB92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:3f:46:86:47:9b:1b:fc:62:7e:16:25:61:79:32:39:2b:
f8:b8:1a:e8:6f:15:5e:56:e9:6e:8a:a0:81:bd:53:6f:f8:e8:
d4:1c:0a:5a:a3:a4:f1:1b:8a:04:a4:e3:0f:27:8e:ab:14:51:
62:5f:d6:cc:b0:a3:bd:11:f4:f2:52:96:ea:3f:bf:fa:51:ba:
d1:d7:c6:ac:ed:84:0a:b4:13:3a:17:e5:6a:5d:e7:e0:ad:b3:
41:74:40:fd:5d:c7:96:ee:54:64:61:bb:80:99:92:ca:61:8c:
87:94:86:00:b3:db:9d:a5:36:3c:20:8e:a2:66:c8:58:7d:fb:
0b:88:91:30:4b:f7:80:46:49:de:6f:93:59:7e:4b:79:c0:04:
36:78:b5:45:d1:c7:b8:66:bf:96:1c:e2:13:ed:95:87:d0:7b:
21:71:c8:8f:de:0a:5d:d1:55:52:67:18:92:ad:df:29:05:76:
13:63:e8:8c:9a:5d:01:d3:75:ff:0f:d4:e0:99:95:c8:b2:33:
43:0b:66:9b:28:92:ed:3a:1a:63:5c:2a:41:a9:3d:11:bf:73:
f3:c6:c9:47:2d:3f:8a:6d:2c:fc:b6:44:e6:e0:27:54:f0:2d:
cc:e2:99:f3:48:3c:d4:53:7a:9f:0d:d8:b4:5a:74:92:b6:e9:
3b:5a:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:36 2025 by rpki-client