Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD7F10C36A11EFB710E1BE762E951A.roa
File: 3FFD7F10C36A11EFB710E1BE762E951A.roa (raw, json)
Hash identifier: 4tRtfGpmjs0pgrH+bYhb0wQf8hHDfX40okGPe6jwiVQ=
Subject key identifier: 64:9D:C9:D8:3F:0D:6D:E1:A3:2F:77:A9:6C:51:3F:21:60:F9:36:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD7F10C36A11EFB710E1BE762E951A.roa
Signing time: Thu 26 Dec 2024 09:17:38 +0000
ROA not before: Thu 26 Dec 2024 09:17:34 +0000
ROA not after: Sun 12 Dec 2027 09:17:34 +0000
asID: 17561
IP address blocks: 154.94.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75490 (0x126e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:17:34 2024 GMT
Not After : Dec 12 09:17:34 2027 GMT
Subject: CN=676d1f32-0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:b5:6a:a3:e1:23:0a:a8:91:94:ef:0b:ff:
28:7e:cd:e2:54:ab:28:41:46:b3:59:41:13:e1:cd:
87:84:6a:79:a0:45:fc:ac:17:a0:b9:bf:06:76:4d:
0c:27:61:77:27:7a:3b:36:da:2f:60:50:74:55:1d:
d2:14:0d:04:ea:40:c3:f6:b9:53:8e:b2:2f:80:f1:
cd:bb:8c:b1:17:e3:dc:d5:dd:27:66:1e:92:15:7e:
05:85:c4:da:22:d9:ee:85:b4:d6:03:a2:73:45:0d:
ae:87:31:46:4a:02:c2:fe:38:34:cd:39:4d:6f:86:
02:e8:02:11:f5:ca:76:41:2d:73:a5:c2:d7:27:95:
f6:58:0f:28:6d:12:a2:44:9d:08:09:6d:39:04:d2:
fb:4e:5a:e8:21:9e:44:46:d4:62:7e:2b:36:59:75:
69:4a:33:f7:d9:3a:1c:c3:e6:f7:fe:3b:6b:a6:23:
00:f6:c6:30:58:19:0b:43:45:e0:32:7a:f9:15:d1:
75:bd:18:b8:86:0c:8f:e9:66:78:8f:7b:d5:19:57:
0f:3b:28:1a:4b:e0:1a:0b:67:46:87:a0:ca:1c:ef:
da:6f:ab:01:53:1b:ab:f1:f9:ef:46:4f:90:de:48:
d9:3a:3e:7a:a3:f6:a3:18:8b:3b:54:f1:fc:7c:5d:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:C9:D8:3F:0D:6D:E1:A3:2F:77:A9:6C:51:3F:21:60:F9:36:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD7F10C36A11EFB710E1BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c2:c3:41:2f:11:b7:13:4f:8a:6b:7d:6e:0a:30:39:b7:5d:
a7:37:91:78:d5:a0:2f:89:a3:7a:a2:c4:38:86:f0:2f:7e:da:
b1:6a:a9:9c:79:09:a4:bd:15:b0:ce:d9:89:56:26:0d:eb:2e:
bd:f5:70:97:a5:79:de:dd:d6:69:8e:30:7a:76:bd:48:a7:87:
aa:2d:5c:b9:20:14:3f:3f:97:a7:e0:e1:91:8e:d2:46:ec:85:
54:ff:c1:7b:c2:b6:2e:e4:73:38:a9:85:1f:72:31:38:18:a4:
2d:42:03:18:a1:2b:e2:e1:e0:bd:6d:d2:55:83:51:c3:3c:61:
6f:c1:af:05:43:51:4e:6c:f6:64:8f:70:70:ad:d7:51:b5:e3:
8a:79:04:d8:7e:e8:9f:cc:f0:38:32:5f:d5:96:4a:1e:00:70:
d1:d4:bd:21:77:65:08:73:3c:49:26:55:3b:32:17:45:b9:39:
1b:1a:1c:4a:d3:c5:ef:1c:26:b8:d8:1b:70:81:fe:7c:70:2a:
e6:e1:01:2e:4f:96:9d:53:50:c8:51:dd:95:de:dd:44:b7:63:
f9:1d:4d:ad:b6:ca:f4:49:af:31:98:77:63:cc:15:5c:60:05:
fd:53:98:53:1e:62:49:2a:8b:30:9a:40:6c:8e:9c:b0:8b:98:
33:6f:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:54 2025 by rpki-client