Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6E2D9AF45D11EF91F7D693762E951A.roa
File: 3B6E2D9AF45D11EF91F7D693762E951A.roa (raw, json)
Hash identifier: M9dQOpqydeTM0to1Gn0e1knA7HtEnKmy0AGhtAmfURk=
Subject key identifier: FE:C3:28:14:21:9C:65:42:6F:ED:5F:3F:6B:D6:86:08:93:D7:06:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016518
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6E2D9AF45D11EF91F7D693762E951A.roa
Signing time: Wed 26 Feb 2025 16:17:54 +0000
ROA not before: Wed 26 Feb 2025 16:17:50 +0000
ROA not after: Sat 19 Feb 2028 16:17:50 +0000
asID: 17561
IP address blocks: 154.82.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91416 (0x16518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:17:50 2025 GMT
Not After : Feb 19 16:17:50 2028 GMT
Subject: CN=67bf3eb2-e669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:de:32:00:0c:f9:02:ca:06:c3:96:fe:e9:
78:4e:b1:4e:52:33:ca:33:6a:b0:a0:d2:51:4e:c3:
ef:5e:ac:d3:b5:2e:8d:07:bc:f2:2b:31:78:5b:93:
62:73:15:f7:1a:76:61:7f:57:fc:32:8d:fa:29:6c:
ca:bf:76:db:92:5f:79:31:11:93:d5:00:52:e9:ad:
1e:23:5d:be:cd:ad:20:dc:f0:6c:47:d3:8c:bb:62:
56:23:a9:00:f7:da:82:66:00:7b:58:b3:70:e8:14:
14:05:4b:52:af:fc:38:61:f2:73:3b:3e:36:58:8a:
9d:0e:10:2e:26:de:7e:6b:f3:75:ae:22:93:ab:f4:
0c:54:33:7e:0a:0d:76:f0:b3:9a:77:a2:83:e2:be:
4d:3a:d5:51:d9:c8:02:d9:0d:2b:3a:3b:24:79:54:
91:c7:e6:44:d1:0f:b0:be:23:12:83:5c:56:83:a7:
90:4f:a1:14:f5:89:0f:0d:63:8c:dd:32:63:09:fb:
0c:a9:b5:43:ae:d9:a0:52:1e:25:fe:ff:0b:52:e1:
6e:af:82:0b:63:63:03:1e:42:23:db:10:db:9b:6c:
39:a0:eb:93:f1:65:11:a7:64:32:5a:8a:50:0a:ab:
ca:ce:f9:70:03:b5:10:15:0f:53:e0:b2:45:6c:a6:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C3:28:14:21:9C:65:42:6F:ED:5F:3F:6B:D6:86:08:93:D7:06:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6E2D9AF45D11EF91F7D693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.251.0/24
Signature Algorithm: sha256WithRSAEncryption
82:55:f6:84:94:09:40:b0:08:7c:8e:d1:10:5c:b5:45:7c:2c:
07:ea:ba:68:ff:16:4a:a9:aa:70:04:c5:c7:09:c7:9d:11:00:
a3:7b:f1:f6:e9:ee:c6:9a:56:c9:2d:96:40:20:2d:bd:bd:0e:
ec:9c:a1:08:ac:c7:3a:47:5a:69:88:21:cf:a1:a9:38:82:90:
29:2f:8d:f3:5c:bb:2c:14:85:42:9a:0a:c3:a4:e9:44:d5:f7:
96:ca:4f:e4:a3:74:71:f7:3a:dc:4f:35:9e:79:fe:06:d6:d5:
b5:51:56:91:7f:30:8c:cd:9d:fb:01:5e:9c:9e:6d:a5:ca:f5:
80:be:c1:22:b0:ad:9c:c2:e2:fa:13:da:90:39:92:ed:66:fb:
a9:54:2b:e4:56:d7:a5:27:de:fc:66:4e:6b:d7:28:75:62:3a:
69:44:c4:0e:ac:11:77:70:15:24:21:93:91:2d:f8:51:4b:32:
eb:74:71:86:0f:20:5f:10:b6:c6:a7:1a:05:fb:2f:8d:c2:37:
93:d5:c1:d0:02:a3:12:f2:ef:05:29:d1:77:58:3e:b6:dd:95:
8e:f2:09:c9:17:6c:ce:ca:62:49:f7:fb:ed:bc:66:d6:69:5f:
2e:1f:70:b6:ff:16:64:8a:59:81:84:11:1c:bd:d2:9d:03:4e:
66:f2:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:25:14 2025 by rpki-client