Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C810B3EF81D11EFA60332B9762E951A.roa
File: 4C810B3EF81D11EFA60332B9762E951A.roa (raw, json)
Hash identifier: o8aZVkQD8/x9EYQ26LUVl+YPNX6EVjtwa+JV8048KWg=
Subject key identifier: 35:83:63:83:BF:56:C2:FA:F4:58:C3:35:D7:45:D8:AF:62:62:D2:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01703D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C810B3EF81D11EFA60332B9762E951A.roa
Signing time: Mon 03 Mar 2025 10:50:19 +0000
ROA not before: Mon 03 Mar 2025 10:50:16 +0000
ROA not after: Wed 30 Apr 2025 10:50:16 +0000
asID: 63139
IP address blocks: 154.93.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94269 (0x1703d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:50:16 2025 GMT
Not After : Apr 30 10:50:16 2025 GMT
Subject: CN=67c5896b-6440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:36:80:c3:8b:0e:c2:ac:51:23:32:ab:f3:
e4:df:79:8d:3f:00:39:29:5c:23:bf:2e:01:be:9c:
2a:88:99:76:80:e7:e3:ff:1b:88:0b:7a:c6:34:a1:
84:54:06:bf:ec:7f:53:68:0d:da:ce:2d:bb:90:04:
ec:9c:e3:b4:6f:f0:6a:92:31:9e:85:91:3b:47:3a:
85:1e:19:31:a9:0c:05:56:4d:4b:86:5a:21:71:4b:
8e:82:ef:e7:cc:4a:4a:1e:93:e5:cd:8b:b7:21:08:
36:a0:92:82:67:08:77:a1:83:2d:f0:ad:2a:2a:88:
ae:04:bb:dd:35:96:63:f0:ef:b4:33:61:ef:d7:68:
67:69:0a:66:72:db:a5:8c:03:be:17:89:6b:71:09:
81:19:15:d7:79:fc:d8:40:d4:83:8e:28:18:da:44:
9c:b1:5d:5f:f7:d0:b5:63:42:f4:48:fd:53:6d:0c:
bf:a8:df:7c:cc:a7:cc:d1:4f:ba:03:1e:9d:e6:6e:
a7:10:24:86:ff:0f:fb:c4:99:f9:18:a0:3b:37:77:
6d:24:8e:d9:30:6b:88:bd:d1:0e:f5:af:da:10:ca:
b9:8f:ea:69:35:23:e6:1f:b7:d5:2d:af:14:a8:de:
b8:a5:e8:44:9d:78:7b:1d:64:c7:65:e9:14:59:5d:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:63:83:BF:56:C2:FA:F4:58:C3:35:D7:45:D8:AF:62:62:D2:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C810B3EF81D11EFA60332B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.79.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e4:96:88:2c:45:88:54:2c:bb:6f:ed:f4:e1:2e:b6:61:8e:
37:10:34:04:a1:15:ee:01:b4:38:17:0a:2e:77:2f:47:80:ce:
40:26:9e:bc:19:a6:f7:70:a8:93:b2:4c:19:e4:c5:d3:a0:f3:
96:13:c0:c3:22:2c:1d:99:b6:a2:64:07:78:db:0c:d2:61:e7:
bd:f2:e3:8d:07:b1:b3:55:a5:c4:3d:eb:ee:6e:b7:bc:8b:a3:
4a:04:5a:e0:d2:c4:12:6e:42:26:f8:3d:cc:fc:c6:07:cb:0b:
69:c9:30:ed:38:39:69:3a:9e:22:ea:d5:44:8a:41:9a:66:b3:
39:03:fe:79:af:dc:4d:05:8c:a8:4b:4c:20:f1:08:bf:22:b0:
4c:63:f6:b5:fe:04:14:f4:cc:8b:46:af:81:93:d4:62:28:89:
fc:ad:7c:e1:70:04:a3:25:62:7c:26:aa:4a:ba:ff:66:a3:c0:
57:d3:a5:92:6a:84:2c:6a:f8:16:f2:63:1a:56:36:53:5e:c1:
4c:6a:fd:61:78:fc:2a:70:ba:fd:05:8f:03:6d:a8:d9:58:3d:
b7:22:25:0c:73:70:94:da:27:3a:16:5a:4c:9f:97:56:aa:13:
80:ad:f3:15:b4:17:01:d2:20:f2:e6:4c:75:8f:14:c1:c0:79:
ba:e0:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client