Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F65A138CDEF11EFADAE6FA3762E951A.roa
File: 3F65A138CDEF11EFADAE6FA3762E951A.roa (raw, json)
Hash identifier: ccMvM2yx/mZEHROqat9iPjiatyYCsSV5D4uXJklA07Q=
Subject key identifier: 91:8A:98:EE:A1:43:AD:86:F9:29:4D:CD:A1:0A:6A:9F:08:D9:93:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013829
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F65A138CDEF11EFADAE6FA3762E951A.roa
Signing time: Wed 08 Jan 2025 18:34:52 +0000
ROA not before: Wed 08 Jan 2025 18:34:48 +0000
ROA not after: Mon 03 Jan 2028 18:34:48 +0000
asID: 17561
IP address blocks: 154.197.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79913 (0x13829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:34:48 2025 GMT
Not After : Jan 3 18:34:48 2028 GMT
Subject: CN=677ec54c-037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:ef:12:fa:54:00:f7:62:d2:a6:18:89:3e:
07:69:65:16:1b:29:ad:6f:58:8c:c9:93:63:84:90:
39:48:a4:3e:44:57:f5:a3:2a:6e:5c:f7:27:91:a7:
ab:d4:a4:6a:33:0a:ea:c4:c6:dd:70:2b:11:0e:52:
45:b1:05:72:7f:9a:f5:c4:ee:7d:a0:9a:b9:de:cd:
9f:bb:e8:61:cb:ee:c7:0e:74:f2:c6:f9:bd:69:d9:
76:d2:96:09:7e:bd:f8:8c:d3:20:2f:c2:e2:20:41:
fd:79:b0:9a:44:99:69:b8:55:e5:92:4a:37:92:28:
50:88:f8:58:b5:44:c8:b1:4f:f4:c8:63:6e:85:3b:
72:d1:2d:ab:6c:c6:fe:12:72:33:69:db:7b:76:8c:
6f:23:8d:23:a9:58:2f:2c:b8:8f:d8:d9:ac:88:1f:
6c:ba:94:31:7d:c6:74:98:60:8e:bc:fb:a3:1b:7b:
bc:d0:47:a4:a0:e1:74:24:63:ca:e6:d9:33:2c:be:
fc:dc:02:9f:1b:73:30:87:6c:07:82:ba:4f:ab:35:
bf:6f:d3:e2:6b:e0:98:11:ff:c7:5e:cd:d9:d8:8a:
fb:ce:48:83:e8:32:6b:0b:31:ad:38:15:b3:86:03:
81:56:4e:d5:eb:ff:b7:31:5f:17:ef:f4:b3:13:0d:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:98:EE:A1:43:AD:86:F9:29:4D:CD:A1:0A:6A:9F:08:D9:93:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F65A138CDEF11EFADAE6FA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b0:78:a2:ce:db:64:57:06:80:70:c0:f0:00:96:ae:a2:9b:
7a:1a:6e:44:bf:8d:39:26:2f:99:90:99:3e:8b:30:fd:9b:e2:
3d:ac:c7:65:aa:c6:36:48:38:dd:15:fc:90:dd:fb:38:87:6c:
f5:cc:05:4c:c1:18:7c:32:1a:19:8d:a8:93:e1:8d:65:73:6e:
8a:65:1e:08:7b:5e:90:cd:e7:fc:36:85:24:ba:3c:c7:aa:08:
87:d0:66:4f:93:f4:81:9c:f8:57:1f:6b:d8:a2:90:e9:1f:dc:
d4:e5:48:4a:13:50:1a:e9:4d:0a:53:b3:be:dd:68:3d:6e:76:
34:df:6a:20:71:25:e5:d9:01:ef:5c:a4:ef:0e:69:2f:af:53:
e1:6b:bf:86:ce:09:8f:b9:e9:ef:bc:09:bb:8b:e7:50:cf:01:
c7:d8:fe:db:9c:cf:13:05:9e:1d:53:d0:a2:fd:90:e1:e1:4a:
9e:19:04:de:f0:eb:77:67:05:b6:48:13:ae:7d:c7:30:1b:27:
86:4d:3e:76:e0:98:61:ea:e3:b8:86:89:29:2f:ef:30:33:8f:
c6:b3:47:f2:8a:96:b9:f8:68:92:fa:6d:1d:f6:57:64:a9:47:
69:ea:55:79:ab:d1:77:7f:27:fc:c3:13:89:8a:3b:f6:ae:03:
46:84:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:26 2025 by rpki-client