Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F0F154D58811EF8D07ACB3762E951A.roa
File: 42F0F154D58811EF8D07ACB3762E951A.roa (raw, json)
Hash identifier: z8qMc2dpLnJKdxb8XLoFRtg9Xf/qoxO/Bb7lpqIDZzY=
Subject key identifier: F3:72:DC:F6:00:5D:89:E3:12:21:8F:03:6E:DF:47:38:80:EE:D0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F0F154D58811EF8D07ACB3762E951A.roa
Signing time: Sat 18 Jan 2025 10:37:49 +0000
ROA not before: Sat 18 Jan 2025 10:37:45 +0000
ROA not after: Sun 09 Mar 2025 10:37:45 +0000
asID: 272369
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 11:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81386 (0x13dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 10:37:45 2025 GMT
Not After : Mar 9 10:37:45 2025 GMT
Subject: CN=678b847d-bea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:3e:1e:31:4b:e3:c5:a2:cf:1d:d1:1c:79:
5d:70:2c:ee:48:60:2d:7d:ec:bc:a6:83:0b:0d:6d:
a7:88:57:da:b8:08:36:14:47:db:02:ba:8b:13:35:
80:cf:72:68:77:1e:da:a0:1f:95:a7:0c:8b:34:4e:
0f:29:8b:cc:70:27:e7:9b:d8:6b:d9:3e:ee:da:62:
be:1e:4c:48:29:bd:a7:81:e5:73:8f:e3:75:22:aa:
56:6b:d9:b6:ea:62:72:1b:94:e4:3d:37:36:b6:3d:
77:ef:be:5d:2b:b3:31:73:3f:3b:0d:5e:16:8a:17:
e5:97:b8:69:04:33:5b:c1:ff:0d:cb:dc:fb:10:97:
4d:89:6d:17:8f:32:b0:ff:51:ed:ba:97:72:1d:79:
a6:ff:0c:bc:65:aa:f0:b3:7d:5a:d7:cf:0b:3c:48:
6e:40:85:a2:6b:72:46:11:83:a1:fc:5c:85:56:3c:
63:41:d1:f7:fa:f0:13:8e:15:67:09:b7:a3:7b:aa:
4d:34:40:6d:30:5e:54:5a:53:2d:10:df:ce:59:de:
2c:82:4d:48:06:bd:88:7f:80:7f:52:d1:a8:3f:89:
d3:50:f6:12:e4:24:f9:ce:4c:e1:02:bc:d3:88:fb:
92:dc:de:44:b5:0c:b7:d9:d1:88:c3:0f:de:23:8b:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:DC:F6:00:5D:89:E3:12:21:8F:03:6E:DF:47:38:80:EE:D0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F0F154D58811EF8D07ACB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:be:2f:1d:da:40:e4:09:39:bb:bc:33:ae:5d:08:af:d1:d7:
44:be:23:36:1b:f6:f0:3f:16:86:50:1c:c7:1d:2a:11:ec:1f:
f9:d2:92:49:34:f1:2b:8b:df:ef:75:85:6f:1a:84:d1:a3:65:
e0:aa:66:0d:a3:92:48:4f:0f:15:a5:44:24:18:71:6f:39:f8:
d3:fc:78:b3:76:5f:6f:01:e6:0d:81:18:32:75:2f:2d:c3:00:
64:58:61:6f:04:50:73:9c:5c:17:73:de:df:67:91:87:a4:55:
82:a8:2a:9f:15:47:ac:ef:56:14:94:32:33:47:f8:73:d5:08:
8a:eb:64:c2:ec:1f:3e:d6:03:0a:56:0c:af:7c:9a:e7:c6:71:
e9:92:70:af:95:8c:ce:dc:46:cf:fa:9a:df:00:ec:fe:f2:8e:
49:2d:1d:6c:79:84:26:fd:67:11:9e:61:29:43:91:19:5d:ca:
74:45:4e:1e:e9:e2:ee:3f:ad:06:cb:0c:95:3c:22:ba:3b:6d:
11:2d:fd:46:ad:a1:a6:aa:8b:b6:07:ea:07:b8:6e:f3:5a:de:
43:bc:78:a6:f4:00:db:51:9a:44:5b:53:71:9c:89:b4:be:4e:
17:27:e0:30:4c:e3:c1:5a:d6:0e:26:3a:87:cb:1a:31:63:76:
e5:65:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:56 2025 by rpki-client