Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D1F000E06B11EF9B4EB392762E951A.roa
File: 50D1F000E06B11EF9B4EB392762E951A.roa (raw, json)
Hash identifier: XvmsvU7bLzrwjAwhjlhNjfMz4QAa/ZJW/piPHRAaqmA=
Subject key identifier: B0:7A:78:EA:BD:C7:D6:16:DA:A5:52:32:3C:16:A4:44:6B:D8:89:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D1F000E06B11EF9B4EB392762E951A.roa
Signing time: Sat 01 Feb 2025 07:08:19 +0000
ROA not before: Sat 01 Feb 2025 07:08:15 +0000
ROA not after: Thu 01 May 2025 07:08:15 +0000
asID: 328608
IP address blocks: 154.88.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85642 (0x14e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 1 07:08:15 2025 GMT
Not After : May 1 07:08:15 2025 GMT
Subject: CN=679dc863-7790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:e1:f2:aa:b9:47:2a:56:af:1a:45:fa:4e:
45:58:f5:03:e0:bd:04:31:3a:fa:b7:4d:05:5e:85:
af:5d:c5:b1:2b:b2:1a:cd:96:9d:95:27:44:57:8e:
85:8e:a1:43:4f:cd:56:0e:63:29:b2:cf:b1:82:ac:
98:d8:d0:7f:27:e8:a4:19:d9:a7:66:83:01:e9:e4:
1e:f9:62:86:b5:a9:ec:66:4b:3d:a7:3a:c1:16:8e:
a7:01:8c:32:bb:bb:2c:e7:d3:e7:ce:26:3d:39:10:
50:5d:bb:1a:12:d4:e6:20:64:34:37:8e:30:90:58:
99:e8:6e:87:84:3e:38:4f:8c:9f:cf:94:a2:d4:79:
b5:be:b3:45:0b:4b:e7:3c:72:da:5f:03:b8:40:82:
6e:a3:6f:5c:31:6a:7c:bc:68:f0:97:8b:68:d9:ae:
32:6e:5f:3b:5a:d6:17:44:f2:a8:45:0e:96:b6:aa:
84:2c:3d:c8:5f:92:4f:c4:d2:bd:c2:59:a5:6e:39:
10:be:64:42:73:13:eb:b8:81:a0:ed:a0:ec:88:4c:
29:3d:a6:98:7b:3a:fc:0b:d6:78:86:1f:f1:4a:af:
ca:94:e9:c0:c3:c9:2a:16:81:64:59:f7:e5:7a:61:
63:52:ac:ec:1f:63:bf:b0:fc:01:bf:b2:fb:6f:17:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:78:EA:BD:C7:D6:16:DA:A5:52:32:3C:16:A4:44:6B:D8:89:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D1F000E06B11EF9B4EB392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:fe:da:7a:bc:56:d2:b7:69:65:5e:85:39:d9:6b:fb:a2:ea:
18:e0:7d:23:04:5c:0a:df:96:46:71:70:bc:60:40:40:29:ba:
be:ea:9d:9a:a9:f0:7b:3f:22:e2:15:23:11:f5:67:66:38:0c:
02:b8:b2:07:20:e6:0c:b7:42:b4:79:62:ab:6c:f5:18:ae:dc:
17:1e:22:b1:36:32:43:60:ac:83:1e:af:2b:bf:76:c7:bf:4f:
65:1f:00:d8:cb:30:e8:72:b5:89:fe:c8:78:40:64:59:f1:ac:
d2:fe:e7:5f:93:5e:64:d5:9f:44:71:2a:46:32:58:4c:38:35:
9c:f7:4f:a6:5b:2c:c6:7d:da:b1:d0:93:8e:b8:58:80:2b:c2:
e9:d5:17:07:1a:a7:07:3f:a9:ed:76:68:59:ad:07:6e:0b:3a:
18:e0:08:49:c9:0e:63:88:d3:91:71:29:be:17:df:ee:fd:4e:
b4:de:d0:18:88:c4:1a:f9:f3:4d:4f:c1:66:10:44:9a:2c:f3:
1f:22:26:2d:3f:d0:83:1a:3c:c3:5d:c8:09:1f:36:36:b4:95:
05:ed:bf:5e:c7:4b:50:7e:7c:62:f8:41:0d:d8:8e:49:a6:d6:
f9:f5:8e:24:1b:ac:7d:87:b4:9e:c0:7b:d6:40:fd:cd:9f:00:
5f:32:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:29 2025 by rpki-client