Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB3C21EEF3F11EFB81BB5B8762E951A.roa
File: 3CB3C21EEF3F11EFB81BB5B8762E951A.roa (raw, json)
Hash identifier: SYsjpjHZaMhyGHG3RlV5c/nTolTjrblA3iSDEs8uWvA=
Subject key identifier: 30:76:93:76:B5:12:DE:62:8D:26:88:1B:92:3F:FB:F7:AC:D4:34:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0158AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB3C21EEF3F11EFB81BB5B8762E951A.roa
Signing time: Thu 20 Feb 2025 04:00:36 +0000
ROA not before: Thu 20 Feb 2025 04:00:31 +0000
ROA not after: Wed 31 Dec 2025 04:00:31 +0000
asID: 17561
IP address blocks: 154.82.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88236 (0x158ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 20 04:00:31 2025 GMT
Not After : Dec 31 04:00:31 2025 GMT
Subject: CN=67b6a8e3-a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:f5:fb:05:cc:f0:cc:b2:4e:e3:5a:1f:66:
17:2d:05:d6:6e:6b:f6:7e:d7:1c:18:63:3c:b4:b9:
d8:97:2a:34:0c:f0:b7:e7:f0:f9:6e:35:4e:4e:1d:
23:72:e9:dd:a0:7e:90:c2:fa:56:58:be:66:8a:e3:
50:ed:2c:d5:9c:06:9b:f0:7f:1b:1a:f7:9f:26:27:
d2:46:d3:0d:2b:32:de:33:e2:76:f2:8b:5d:b9:51:
47:f6:d2:2b:ee:e7:eb:c0:4b:e2:77:92:35:49:b5:
9c:20:0b:d0:5e:4c:44:de:8d:f8:33:52:86:cd:68:
ea:a4:f8:8d:46:63:ab:c4:f8:aa:ca:fc:bc:6a:9d:
9c:aa:09:64:ac:1d:32:00:91:7f:3f:ac:4d:c3:23:
9f:e5:0f:c6:fc:48:23:29:46:ea:f3:b1:42:14:55:
ab:ed:39:3c:32:d7:12:d5:c4:f7:77:d9:e4:e5:5e:
74:55:72:e9:e4:b8:d6:35:bc:9e:14:95:77:b8:db:
99:3a:8e:4f:57:af:ba:43:46:66:ed:1f:ba:36:73:
4b:9d:bc:27:5c:30:a7:5d:4c:40:aa:f4:88:f4:ce:
df:7b:5f:ff:cd:97:b8:b9:19:0b:f0:e6:88:0e:30:
f3:ac:ff:f5:b9:b8:e7:3a:20:14:76:34:90:fa:19:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:76:93:76:B5:12:DE:62:8D:26:88:1B:92:3F:FB:F7:AC:D4:34:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CB3C21EEF3F11EFB81BB5B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6b:64:8a:26:74:13:b0:75:20:ff:cc:04:47:0a:3b:84:00:
0f:ac:fa:12:34:04:93:cd:b3:26:6f:4a:e6:70:7b:1b:3c:15:
ad:70:7b:1a:f0:fb:91:35:c4:10:af:14:25:71:bc:66:3a:f9:
b5:2d:97:fc:aa:ff:c9:18:97:3c:de:b7:32:53:56:1c:20:1a:
3f:99:1a:03:05:b0:84:5e:6f:c2:06:bd:d4:63:01:93:49:41:
0a:24:8f:09:45:6f:70:71:45:e9:0f:11:31:6a:f6:64:ce:10:
18:7b:2a:12:3e:48:d6:99:b2:d2:32:6a:b5:1c:b0:c6:54:b0:
88:be:18:86:16:be:71:e0:c2:0a:13:49:0b:45:1d:88:70:07:
16:d0:79:e6:4b:44:72:90:65:26:4c:bc:a6:a9:d9:e4:3d:3a:
c7:08:76:b4:ad:8d:4b:55:3c:29:b3:11:a5:74:59:da:b5:d6:
07:1e:77:74:e8:eb:74:4b:a6:b1:5c:36:35:28:22:29:3d:71:
6c:06:54:7a:5a:c0:21:a7:0e:7a:2e:e1:ec:15:97:99:d9:e0:
53:8b:5f:7e:96:ab:23:ec:06:4a:76:69:7e:59:d0:9a:71:b2:
41:70:58:90:4d:aa:f1:c4:e8:4f:96:2b:f8:2b:3a:ec:d6:e4:
64:79:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:30 2025 by rpki-client