Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE88C46AB3511EFB6D6F9A8762E951A.roa
File: 3BE88C46AB3511EFB6D6F9A8762E951A.roa (raw, json)
Hash identifier: 3iej0vSccHkFF4v4F/PDBOtC5PDxwczd+yQ5dbl2PNk=
Subject key identifier: 26:4E:83:55:C6:C7:7F:AB:59:01:24:52:7F:A2:96:C1:FA:B6:DE:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011356
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE88C46AB3511EFB6D6F9A8762E951A.roa
Signing time: Mon 25 Nov 2024 13:57:40 +0000
ROA not before: Mon 25 Nov 2024 13:57:36 +0000
ROA not after: Wed 07 Jan 2026 13:57:36 +0000
asID: 139057
IP address blocks: 154.85.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70486 (0x11356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 13:57:36 2024 GMT
Not After : Jan 7 13:57:36 2026 GMT
Subject: CN=67448254-da37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:6f:37:35:3c:8c:b3:d5:5f:8a:b3:b8:d2:
28:b7:87:16:dc:63:09:f2:00:a6:51:e0:2d:76:a7:
9d:2f:93:2d:6d:14:34:33:70:86:52:52:e0:17:f3:
0b:af:6b:1f:ca:42:60:8b:4a:5b:6c:21:5a:8e:e7:
c9:c7:f7:7d:1a:54:2e:8b:bb:03:47:05:61:4f:10:
64:18:6b:94:81:58:14:89:20:5d:43:da:96:75:68:
b4:74:6d:df:b2:d6:ec:38:53:3c:e5:25:08:1a:04:
11:b5:79:ae:f2:0e:f9:37:9b:a3:95:ce:16:40:49:
82:a0:b4:42:00:2c:d6:62:df:67:04:ac:59:f2:af:
7d:db:b0:b7:92:00:3f:87:28:01:9c:ed:66:5d:ba:
55:f3:15:79:2c:6c:c1:77:b5:92:be:a7:1a:d6:41:
48:ba:c7:e6:f4:5b:da:11:53:b4:93:5a:25:f7:89:
2e:8b:0f:97:a2:68:ee:d4:f9:3e:0f:66:ca:04:b2:
83:ae:d3:2d:15:bf:af:25:b2:23:fd:18:ca:c5:ff:
d7:9b:b3:fe:f6:89:80:fb:0a:25:0b:62:9a:4d:e8:
82:8a:ad:f4:e9:3a:32:66:2b:f4:bd:d0:ce:31:77:
04:92:c2:3b:c3:83:af:40:6c:b2:70:1f:1b:d4:7f:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:83:55:C6:C7:7F:AB:59:01:24:52:7F:A2:96:C1:FA:B6:DE:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE88C46AB3511EFB6D6F9A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:8c:57:4e:04:e1:5c:25:0b:12:a5:41:e9:99:25:a8:b0:8d:
6d:b9:0c:9a:e3:f6:9d:16:97:44:27:26:d9:19:bd:b5:e7:0a:
18:cf:0a:c4:bd:f6:c5:d2:9e:2e:15:45:5a:70:9c:04:44:44:
af:dd:a0:ed:85:f6:84:e5:2a:ff:c9:31:ef:dd:4e:c9:65:32:
3b:c1:56:a5:67:5e:0d:fe:d3:65:53:e0:e8:49:68:88:ef:4d:
45:a5:70:71:c4:6e:44:d6:ba:68:06:43:34:7e:16:ee:0f:51:
f5:4e:a6:1b:92:04:15:3c:f0:8d:b8:00:f4:90:5d:25:09:17:
6e:9f:fa:90:8f:f4:2d:49:46:45:a8:ef:9b:bb:ee:b2:c3:58:
f7:af:cd:9b:c5:59:b8:dd:7d:99:62:bd:fc:cb:3b:ca:31:08:
f3:c8:01:16:9e:d9:d0:7a:4f:d9:bc:c4:ad:eb:83:f9:a7:b3:
cd:16:fb:6e:dc:22:2d:46:0d:64:c6:d7:c6:90:70:33:9d:79:
3a:40:c6:cb:0b:ad:76:8f:58:92:f2:96:f6:88:b3:31:15:fc:
a3:8c:17:b7:83:49:3d:f1:25:c0:87:bc:6a:83:ce:cd:92:45:
a1:26:17:22:c6:40:51:f8:71:03:9d:62:2c:1d:25:6d:3e:5d:
20:ec:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:48:19 2025 by rpki-client