Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6009E9640EA711F0A30E2848762E951A.roa
File: 6009E9640EA711F0A30E2848762E951A.roa (raw, json)
Hash identifier: wxY42Nnmyl+DPFN46fryiMSRn4/P7U8loOhkrRTkdnA=
Subject key identifier: 5F:14:32:F8:08:5A:EA:ED:15:EC:02:E7:46:5B:74:73:BC:60:26:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01772B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6009E9640EA711F0A30E2848762E951A.roa
Signing time: Tue 01 Apr 2025 03:14:08 +0000
ROA not before: Tue 01 Apr 2025 03:14:04 +0000
ROA not after: Mon 21 Apr 2025 03:14:04 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96043 (0x1772b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Apr 1 03:14:04 2025 GMT
Not After : Apr 21 03:14:04 2025 GMT
Subject: CN=67eb5a00-01cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:8d:8b:e3:3c:83:c4:d0:01:b5:ce:b1:86:
f3:22:95:2c:d1:52:14:40:d3:fa:7e:f2:87:7a:3a:
e1:58:fa:42:5d:e9:f2:56:0a:2e:31:e7:c6:5c:6f:
ef:f8:e1:1f:6e:a3:8e:8d:e9:31:22:22:ef:37:47:
7a:41:72:2d:7d:49:b0:8a:d2:2d:ba:ad:f1:a6:2c:
e1:60:57:d6:76:80:f9:35:2b:73:3f:0c:7b:fe:e2:
8b:6f:e9:70:8e:0a:37:9b:f3:85:53:f5:d9:9b:6c:
1e:87:ba:50:03:d8:33:68:b4:30:af:3b:25:b8:8e:
41:b2:61:72:c2:75:75:29:ce:92:c7:a2:88:42:8e:
4a:09:05:d6:8f:cb:8d:ce:09:0b:2e:97:69:87:60:
10:c7:43:95:aa:59:2b:99:22:1d:88:46:bf:79:6a:
3b:f9:7d:c1:e8:b7:08:eb:8e:0c:1b:13:53:3d:ae:
f6:e5:59:23:aa:63:ee:64:60:b8:eb:f2:c8:34:d1:
81:e8:42:24:7b:b6:5c:71:d3:ce:ed:1f:d4:99:fa:
63:9d:9f:b5:8b:db:88:96:cc:b6:c1:50:e1:b5:96:
1b:b8:52:98:99:09:87:9c:20:63:91:02:10:35:a3:
4f:2a:f0:1d:ef:28:18:2c:ae:54:4c:c1:f6:57:32:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:32:F8:08:5A:EA:ED:15:EC:02:E7:46:5B:74:73:BC:60:26:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6009E9640EA711F0A30E2848762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:04:27:0b:98:b8:3e:86:4a:e6:a6:75:55:10:1a:4e:26:a9:
16:b2:bc:c3:6e:1d:af:ee:52:ae:c6:8a:52:4f:5d:38:3f:93:
82:92:b5:a7:1c:de:d1:6f:b8:fc:f1:36:da:e2:58:88:1f:9d:
fc:4a:73:1a:69:a7:f6:d7:d6:e3:db:43:7b:dc:ce:9a:ab:76:
57:6d:8f:21:7b:b2:bf:1a:2c:63:8f:13:d3:53:1a:b2:e4:c7:
73:18:73:51:5d:25:f3:e0:a0:cf:16:53:3b:b5:8f:76:dc:c2:
79:e6:9d:cd:55:a4:e4:07:36:53:5d:ec:b6:99:da:e4:c1:65:
3f:04:fa:3d:a1:a0:10:ae:66:36:cd:49:a4:15:38:e4:b0:f3:
3e:50:ea:b7:ff:e4:63:9b:4c:ed:8e:db:e1:b1:5b:94:04:b9:
b7:a0:1a:a9:14:ef:5a:fc:30:a0:61:63:82:c2:7a:96:10:f4:
d3:3c:b6:4e:95:89:bd:a2:93:4c:2a:fe:61:9f:6f:8d:d7:04:
b3:ae:aa:98:ca:24:a7:1d:8f:02:2a:28:2f:da:08:1d:78:1f:
81:6a:87:4c:7f:e8:40:ea:ae:0d:ed:93:0a:57:15:d1:f2:a4:
12:5b:5e:a5:b4:aa:6d:4a:fd:27:74:8f:83:45:cd:36:4b:5f:
f3:f4:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:41:56 2025 by rpki-client