Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE6A20CF39911EFAD96D346762E951A.roa
File: 5FE6A20CF39911EFAD96D346762E951A.roa (raw, json)
Hash identifier: AFGH/9yg2l4AiREoqSm7yChzY2akqUnQMj253ngf3to=
Subject key identifier: D3:9A:DE:46:9C:06:04:13:67:E5:08:5E:CD:5D:0D:31:51:7B:A8:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015F98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE6A20CF39911EFAD96D346762E951A.roa
Signing time: Tue 25 Feb 2025 16:55:54 +0000
ROA not before: Tue 25 Feb 2025 16:55:50 +0000
ROA not after: Wed 09 Apr 2025 16:55:50 +0000
asID: 138915
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90008 (0x15f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 16:55:50 2025 GMT
Not After : Apr 9 16:55:50 2025 GMT
Subject: CN=67bdf619-794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:9f:5a:c1:bb:7b:d3:2e:8e:c8:b7:41:e1:
76:61:12:8f:2a:82:84:e7:9c:15:6b:7d:6d:46:ac:
bf:6e:3c:e7:8b:f8:32:ff:91:a7:1b:6d:88:5a:d3:
b7:67:cc:31:55:39:b9:d7:9f:49:12:f9:62:dd:ce:
4f:c3:7a:c1:a5:ba:5a:d2:13:c9:6f:a9:d9:7c:33:
78:af:05:c8:7d:69:0f:d0:22:e6:cd:d0:55:ea:55:
1a:11:66:8a:cd:49:af:9f:62:f8:87:ad:22:57:10:
03:57:09:77:d8:0d:0c:4a:20:d1:d4:ba:e2:c8:94:
1f:11:ef:34:1c:0e:11:a1:d3:00:cc:41:34:04:d2:
b4:e0:35:40:1f:0b:c1:d5:d6:9a:f4:e1:d5:f3:88:
dc:f8:43:b9:78:59:7f:05:7e:08:c6:12:80:f4:c9:
82:dd:03:80:43:62:a1:0a:ff:96:e2:24:a6:4b:bf:
04:69:52:5d:29:2a:a5:ae:45:b1:2f:37:15:05:6b:
bd:6b:55:67:75:e4:0b:7c:49:e6:50:35:62:2b:b5:
22:77:e3:df:75:72:d3:ba:74:cc:82:84:a4:79:8d:
8a:11:c0:35:9a:56:cd:f8:a7:23:3e:b9:d0:00:f6:
bf:d6:f2:02:64:cc:de:1e:22:1c:d1:4a:a8:cb:40:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:DE:46:9C:06:04:13:67:E5:08:5E:CD:5D:0D:31:51:7B:A8:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FE6A20CF39911EFAD96D346762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7e:09:06:28:b9:8b:d5:7b:d1:ec:2d:32:9a:32:8b:6a:e3:
c4:87:38:d0:ae:0d:44:1c:3f:fe:df:ee:7c:a7:9a:d2:99:4d:
06:0a:a0:ed:3a:02:fd:3c:a9:4b:d5:c9:53:53:d9:45:29:16:
04:6a:4d:4f:47:d4:c8:da:9c:7b:9e:e2:b8:9b:66:a5:eb:5a:
ac:ed:2a:51:97:44:19:18:01:6e:db:51:ef:9b:3c:1b:9d:2f:
17:4f:e4:0b:ac:f8:c2:11:7b:b3:68:92:20:13:8a:c7:50:3b:
83:1f:c1:b3:a5:a4:af:ef:56:9b:5e:1d:30:bf:80:cd:8a:36:
af:14:81:51:ba:14:a7:68:56:bc:9a:9a:2e:26:ad:d6:ac:39:
8d:85:2c:ee:31:38:7b:1c:33:c2:96:e2:5b:ab:0d:69:f1:9d:
b1:f0:82:82:8c:eb:42:27:1a:82:a1:4c:cf:c1:94:71:08:e6:
ee:5c:70:24:51:85:3b:d2:7b:b2:43:15:ac:6b:ec:3f:fb:fb:
5f:2b:5d:80:e1:d9:00:bc:eb:30:63:dc:5c:6c:c0:1e:b0:a7:
41:ba:82:6f:91:84:77:61:71:a3:10:b2:a5:33:b0:f2:2e:63:
3b:f5:74:d9:2e:2d:2b:a3:16:9b:f3:04:c1:55:8e:a0:8a:13:
e0:71:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:06 2025 by rpki-client