Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41037946F5C911EF946C5861762E951A.roa
File: 41037946F5C911EF946C5861762E951A.roa (raw, json)
Hash identifier: RQJkpd3wl9D4BicH4kvptYlRS7gtAqu/dhxWELtD/wA=
Subject key identifier: 47:D1:B4:C9:BC:B2:43:21:F5:02:A3:69:3B:D9:13:95:5F:31:88:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41037946F5C911EF946C5861762E951A.roa
Signing time: Fri 28 Feb 2025 11:43:40 +0000
ROA not before: Fri 28 Feb 2025 11:43:27 +0000
ROA not after: Fri 11 Apr 2025 11:43:27 +0000
asID: 138915
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92926 (0x16afe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:43:27 2025 GMT
Not After : Apr 11 11:43:27 2025 GMT
Subject: CN=67c1a16c-7572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:d4:58:9b:7e:a8:b2:ec:3d:ed:ec:71:f2:
aa:09:06:5f:79:9b:71:e2:59:56:c0:8d:c4:4a:ea:
50:98:a2:79:24:6b:06:09:f7:51:de:9c:ea:02:24:
32:ed:96:e1:b5:22:0a:d9:32:9e:5e:80:f5:37:04:
77:53:70:33:20:94:05:69:06:0e:7f:a6:ab:97:d9:
cf:44:ca:a2:fa:b7:58:5e:58:ac:27:85:e8:09:51:
aa:81:cf:0c:0c:b4:24:ba:b6:39:a3:a1:ab:a8:0a:
5c:89:55:8b:ca:41:0c:00:b7:b3:30:e5:ea:00:4a:
64:e4:66:92:f7:16:16:ff:3f:74:5b:63:ea:84:ad:
d0:7c:d2:8a:9f:db:a3:95:c8:90:7d:b0:d0:05:42:
bd:27:37:26:cd:af:66:63:0a:a4:21:aa:c5:2c:85:
b9:8d:ce:dc:77:5e:ac:c7:df:31:a9:af:e2:59:90:
cb:55:68:45:6f:61:13:ec:c7:84:e3:b0:3b:49:70:
11:b4:b9:ba:98:9e:db:df:b3:f0:62:60:e3:51:78:
1d:88:55:ac:d6:85:0a:dc:58:33:52:dc:4c:8b:7b:
c1:de:22:b2:9c:17:3a:6a:a6:8d:69:e0:16:af:06:
4d:e8:c9:1f:1c:99:3d:6f:8f:15:60:66:3e:b7:54:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:B4:C9:BC:B2:43:21:F5:02:A3:69:3B:D9:13:95:5F:31:88:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41037946F5C911EF946C5861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c4:ca:34:c2:f3:d9:3e:3f:ba:8c:d6:e1:3d:21:27:45:c3:
ca:73:97:7a:95:04:c1:1c:fb:44:26:14:26:33:27:f8:17:1c:
46:1a:9c:4c:13:14:f7:10:85:e8:b3:5b:7f:e6:69:11:fe:37:
87:de:16:69:0a:b3:da:9f:ec:11:0b:ca:a9:f6:c6:f1:2a:3a:
8c:1f:2e:49:dc:9b:d4:45:19:81:4d:ee:88:7d:7a:59:99:2a:
4f:87:1d:3e:e6:2c:b2:c6:8c:b7:28:cc:c3:04:29:50:fc:b7:
13:e6:7e:b5:67:94:fd:68:68:25:5f:91:9e:cb:2d:f4:8b:91:
55:de:ef:c3:fc:05:da:7a:4e:f0:3f:51:7e:58:40:e1:24:c8:
ab:90:0e:7a:f9:dd:ae:cd:ea:d9:23:73:18:e0:77:23:d7:08:
e9:cf:fe:99:08:1a:3f:2c:32:aa:a6:30:11:8e:1e:e1:c3:84:
4b:7d:47:fe:13:7b:a9:cb:8f:f6:d7:63:90:05:4d:fc:4e:4d:
a6:17:56:57:08:49:c7:22:d2:10:6c:2c:27:8d:48:1e:a5:6f:
d8:a5:98:3c:de:a4:49:d0:3c:05:8a:6b:c4:39:94:f5:aa:22:
3d:68:43:c8:7c:a9:3a:68:76:9b:5e:1d:61:e7:d2:bb:25:2d:
9a:ef:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:21:13 2025 by rpki-client