Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5381C576032211F0B9B9DA96762E951A.roa
File: 5381C576032211F0B9B9DA96762E951A.roa (raw, json)
Hash identifier: seOukPdfXp9yncTvUss8eelLj4S94jo/ojHt3VRQ8h4=
Subject key identifier: 85:44:1A:E5:EC:53:94:9A:0F:CA:17:6C:4E:82:C8:B0:39:46:36:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017479
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5381C576032211F0B9B9DA96762E951A.roa
Signing time: Mon 17 Mar 2025 11:24:01 +0000
ROA not before: Mon 17 Mar 2025 11:23:58 +0000
ROA not after: Sat 17 May 2025 11:23:58 +0000
asID: 328608
IP address blocks: 154.194.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95353 (0x17479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 17 11:23:58 2025 GMT
Not After : May 17 11:23:58 2025 GMT
Subject: CN=67d80651-c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:08:b7:15:c4:c2:cd:06:b8:5d:f6:32:d4:
ff:1c:01:5c:96:ed:03:89:3e:ac:74:06:32:e3:44:
78:05:51:6a:dc:b6:e3:b1:82:c0:62:ca:1d:c8:4d:
d6:cc:b1:a1:fd:cd:98:bf:a8:39:dd:30:d8:26:9e:
ac:b6:2c:85:09:e0:45:26:6d:68:6f:43:5b:95:65:
8c:b5:77:2e:28:07:ef:55:32:b4:4d:f6:3b:23:fe:
f5:0c:44:a3:be:67:da:75:bd:04:c7:74:2a:46:ac:
79:0e:6f:e7:8d:47:e1:c9:5a:51:32:22:85:c6:e2:
3b:07:ab:91:ef:37:ff:b7:b8:15:33:46:72:03:b9:
12:34:0d:19:1b:da:06:8e:ca:b7:33:f2:7a:f1:9e:
49:ea:61:49:d1:ce:34:13:68:d6:34:59:9d:57:f9:
0e:9f:65:ba:68:45:a4:ef:33:30:a1:3c:34:c9:ca:
ef:1c:c2:c5:58:d8:07:ce:5e:6b:15:54:f4:06:9c:
82:c7:f1:fe:70:79:85:e0:22:24:46:d5:11:a0:93:
7f:ff:b1:2b:e9:a9:84:6b:64:6d:a9:21:3b:6e:a6:
74:83:ff:d3:ae:a1:94:70:fe:f4:15:39:94:18:3e:
3f:1c:fd:3d:37:dc:61:c7:64:7f:44:a6:b7:09:dc:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:1A:E5:EC:53:94:9A:0F:CA:17:6C:4E:82:C8:B0:39:46:36:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5381C576032211F0B9B9DA96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0c:5d:7f:eb:78:5d:67:41:3c:72:ad:07:d5:98:60:9c:c7:
46:11:42:d4:8a:1b:95:26:ea:a9:c7:50:9f:21:a9:0a:17:1c:
0f:04:f4:65:d8:54:22:fc:07:90:ba:6d:3b:ab:5e:24:25:4b:
2c:96:21:86:81:cc:7a:24:68:f1:7c:6c:d3:fa:7a:42:2c:b6:
07:c9:35:f9:f0:67:a5:4d:45:dd:68:cc:b1:c5:6a:87:13:52:
48:ed:5c:44:83:d9:19:3c:ec:ec:a2:95:74:76:a8:83:ac:e1:
d2:d2:05:d0:65:84:c3:af:91:e8:95:d8:1f:38:ee:72:be:fe:
ba:57:93:3a:c9:da:8a:bf:3b:05:45:87:b3:39:ab:d0:2d:fd:
96:e7:93:ba:68:54:75:d3:7b:ab:fe:b3:7e:9d:6c:10:72:ca:
65:50:60:7d:ba:f9:66:92:d4:61:92:4a:ed:5d:ce:a0:e1:bd:
d6:c7:cf:20:73:b0:10:c9:ac:ec:e2:0d:55:89:cc:2c:19:c2:
be:ff:0b:b3:22:3c:4a:62:95:c1:6f:ba:2b:2b:9b:f9:11:d4:
d4:b8:7a:ba:5d:6e:f3:ad:f6:d7:18:7f:52:9c:a7:71:a3:86:
ed:1d:88:e2:6c:80:81:68:39:d5:1a:63:69:6f:1b:64:ac:67:
cf:42:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:36 2025 by rpki-client