Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DAFFC7AE23F11EF91130456762E951A.roa
File: 4DAFFC7AE23F11EF91130456762E951A.roa (raw, json)
Hash identifier: 9T0IKcBvAT9Q5jMwaze7+OKfFbvkpBc52KZQiEfcpKs=
Subject key identifier: DF:3E:C8:07:9B:E3:61:87:E5:63:06:9B:A7:DD:EF:2D:06:29:44:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015025
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DAFFC7AE23F11EF91130456762E951A.roa
Signing time: Mon 03 Feb 2025 14:58:19 +0000
ROA not before: Mon 03 Feb 2025 14:58:15 +0000
ROA not after: Wed 30 Apr 2025 14:58:15 +0000
asID: 150008
IP address blocks: 154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86053 (0x15025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:58:15 2025 GMT
Not After : Apr 30 14:58:15 2025 GMT
Subject: CN=67a0d98b-aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:6e:96:16:80:61:f0:a9:4d:9c:f5:5e:fb:
83:01:70:eb:8b:88:1a:95:23:ea:e6:38:f0:7c:e8:
aa:dc:0a:8d:49:10:5f:70:f2:7b:d3:72:47:71:3d:
0f:3c:8a:91:3e:fc:1d:23:e5:f4:84:02:42:2b:0f:
7f:73:c1:b1:98:48:c2:11:9e:fb:f8:00:c8:62:d1:
d8:df:f0:2f:01:24:14:ae:1e:2d:78:bf:59:5c:9f:
a8:eb:08:ae:db:80:f8:80:42:1e:46:8b:3a:15:be:
0b:fe:2f:a8:bb:35:27:ee:f9:7d:09:05:ed:47:05:
f1:bb:ef:38:df:6f:dc:b6:26:bc:fb:b8:ba:ef:c0:
fc:30:a0:ba:1b:cf:2b:8c:a6:98:d0:91:c0:48:8a:
da:5d:8d:de:06:bb:e9:92:88:e0:a8:b4:2c:00:dd:
c4:3d:97:f0:13:b9:c1:3f:37:f5:04:2a:cc:2e:48:
22:fa:f2:52:cf:90:f7:4b:aa:68:52:98:c2:32:41:
01:81:1d:dc:b4:21:55:6e:b9:16:07:b4:17:41:cf:
34:9d:59:16:34:84:98:5b:52:5a:d1:13:6f:0d:2e:
ed:c4:da:a7:03:79:98:24:fa:02:56:86:92:99:8d:
c8:35:dc:f4:6b:10:2d:04:53:cd:e5:6a:1f:e4:4f:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:C8:07:9B:E3:61:87:E5:63:06:9B:A7:DD:EF:2D:06:29:44:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DAFFC7AE23F11EF91130456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e7:b9:f5:d8:26:2d:74:3a:3b:fe:be:30:89:4b:94:9e:8d:
8a:de:e8:f0:e1:10:fa:70:4d:31:80:38:05:fc:a1:c7:b7:8d:
06:93:bc:28:20:8c:67:24:f9:b5:b1:e6:a8:ae:d2:67:20:a4:
34:e4:2c:69:aa:ad:ce:91:cc:75:74:eb:69:5c:02:00:eb:9c:
39:d9:83:4f:53:b2:fe:9b:7c:5f:0a:6c:00:1d:45:3c:9c:6d:
de:7f:5e:ca:d7:de:ba:8e:4e:f7:d8:d8:02:e4:f3:b6:47:db:
aa:e5:99:3c:73:26:55:8d:10:34:7d:db:02:3a:bb:11:dc:a8:
11:09:23:77:31:3a:91:ad:e1:5e:bf:fc:47:d8:97:b2:96:8a:
9d:01:87:5e:4b:bb:21:6c:70:56:fa:d3:8b:c3:c6:5d:de:16:
54:3e:63:ec:79:8d:8f:ae:03:5a:a5:a8:14:a9:18:e9:6b:13:
81:35:40:54:07:db:78:1d:d9:b8:16:c8:6d:2f:11:74:00:dc:
01:c4:9b:8e:91:70:97:e7:63:2b:14:f1:53:ca:49:53:0d:36:
8c:23:42:52:58:ed:06:7b:93:e6:5a:3d:d6:03:ee:97:8d:31:
f3:45:39:10:af:e1:01:d0:06:6f:97:89:42:36:17:c3:b1:b0:
c5:92:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:34 2025 by rpki-client