Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F88944EF83C11EF9DA3B38D762E951A.roa
File: 5F88944EF83C11EF9DA3B38D762E951A.roa (raw, json)
Hash identifier: gYCj9e/JaLzFnmYQnGrIoHSq92r24N7LSMDSeTz+8T4=
Subject key identifier: 27:C0:70:06:46:E8:F1:C7:E5:8B:75:CB:6E:F5:BA:CF:B9:A1:14:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F88944EF83C11EF9DA3B38D762E951A.roa
Signing time: Mon 03 Mar 2025 14:32:46 +0000
ROA not before: Mon 03 Mar 2025 14:32:42 +0000
ROA not after: Mon 07 Apr 2025 14:32:42 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94437 (0x170e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 14:32:42 2025 GMT
Not After : Apr 7 14:32:42 2025 GMT
Subject: CN=67c5bd8e-7ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:96:e0:f6:5a:e4:63:5e:35:5a:56:73:f5:
50:4a:2d:d4:77:00:ac:40:1e:22:f0:e3:18:c8:bc:
b4:34:60:aa:b4:7d:0f:2e:df:fb:92:e6:dc:e9:37:
8c:2d:85:98:28:d2:4f:7c:56:d6:f0:39:1f:98:b1:
b4:d0:73:95:ef:3c:f1:da:96:23:35:39:02:1d:f6:
9c:4f:e7:9b:33:84:ef:40:24:ed:39:6e:40:8f:80:
3b:4b:f7:99:1c:57:a4:61:b2:ce:52:49:31:79:f7:
a4:de:a8:a9:18:d7:61:65:a1:99:c7:c3:1d:f8:75:
c1:19:86:63:ee:58:1b:f4:c6:ec:70:f4:81:f4:c2:
49:59:a2:37:06:83:f5:fd:f3:63:e0:b3:38:49:f6:
ab:53:38:bb:c6:f7:00:8d:e7:4e:df:96:05:8a:a5:
58:f1:8d:12:57:c1:a4:ce:32:5f:17:ca:0b:f7:72:
2e:a5:52:86:44:0b:1d:2d:e4:14:97:6e:c0:fa:a4:
1e:66:bd:46:bc:bc:34:01:af:09:44:76:d3:f4:6a:
cd:70:40:78:46:de:9c:2a:d9:65:59:58:d0:2e:41:
55:0c:e0:25:47:06:fd:63:4d:41:08:16:8e:d6:2f:
c9:60:08:bf:dd:9a:f8:7f:19:bf:b1:11:7a:c0:21:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:70:06:46:E8:F1:C7:E5:8B:75:CB:6E:F5:BA:CF:B9:A1:14:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F88944EF83C11EF9DA3B38D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b2:87:1c:ca:10:48:8f:24:44:69:b9:d1:7c:24:c8:6f:7c:
98:56:1e:91:59:30:77:e3:fa:90:3d:c7:b5:b7:cf:81:b5:ea:
62:fa:03:35:75:0e:fa:34:bb:3b:3b:27:ff:3b:80:5a:9a:64:
54:52:23:15:86:98:8b:c6:19:f7:b6:0a:48:f8:f7:fe:8d:21:
7c:5f:79:7a:97:80:b2:63:34:ac:6f:3d:88:d2:46:75:da:1e:
5c:cd:cf:6c:fb:f0:91:f3:ce:58:9a:83:c8:7a:21:af:94:94:
48:cb:33:ca:43:c9:40:1e:8f:12:7d:30:18:1d:1a:fa:79:0a:
a3:b3:20:89:cf:25:22:77:5f:9e:bc:e0:06:11:c5:37:4d:c4:
6a:fe:65:7a:4c:5a:f9:51:83:3e:a4:d1:2d:ec:ee:03:90:cf:
94:52:1b:3b:4b:6c:e6:10:33:b0:b3:a3:be:39:fd:02:60:37:
c3:1d:ad:81:24:d5:19:a3:9f:10:57:d6:84:e7:5e:3c:df:eb:
1e:21:a8:8e:68:02:4d:59:73:85:a5:3e:dd:d2:44:9f:a7:b4:
d8:ce:fd:09:99:77:38:90:af:b0:73:a9:1e:5c:42:31:2d:6d:
ee:58:8c:87:28:14:6c:b5:84:d0:b7:c0:74:85:1c:a7:a8:6d:
6b:cd:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:20 2025 by rpki-client