Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60376EA8E2CD11EFB29E6D98762E951A.roa
File: 60376EA8E2CD11EFB29E6D98762E951A.roa (raw, json)
Hash identifier: H7mCRH5bBA9+U3S731Gf87Lt/0yE/LWTRPrIUxrawxE=
Subject key identifier: 37:31:37:8B:7A:71:A6:41:40:17:C9:8D:E1:84:DB:D3:E9:12:00:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01508C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60376EA8E2CD11EFB29E6D98762E951A.roa
Signing time: Tue 04 Feb 2025 07:55:18 +0000
ROA not before: Tue 04 Feb 2025 07:55:15 +0000
ROA not after: Wed 30 Apr 2025 07:55:15 +0000
asID: 18229
IP address blocks: 154.210.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86156 (0x1508c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:55:15 2025 GMT
Not After : Apr 30 07:55:15 2025 GMT
Subject: CN=67a1c7e6-a91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:25:da:2d:8d:ab:7d:f1:15:b9:12:cf:4a:
fc:10:92:06:e3:7f:99:9a:c0:8d:b6:fc:74:8d:40:
a3:de:86:1a:87:6d:0d:b7:2c:6e:5c:74:c7:56:40:
22:92:c8:b9:77:c5:f9:8f:c1:74:7c:ef:62:7e:af:
83:a7:a4:77:50:ef:ee:9d:3c:df:d1:2d:2e:79:dc:
36:45:cd:ad:85:a5:c1:9d:03:08:e9:13:08:8a:5b:
f9:d9:62:60:eb:46:aa:c2:cf:cb:e2:64:c1:f1:b0:
74:88:ee:bb:5d:1a:8a:74:e6:61:c8:1b:bc:35:f5:
9b:63:6e:d2:12:6e:11:96:1c:92:7b:48:d5:10:dd:
b5:c4:9f:53:3f:66:6c:24:60:63:f7:a7:29:7e:95:
8c:d5:57:6a:e4:48:55:01:28:a1:eb:98:02:b4:37:
1c:85:fa:75:6a:f7:ec:ad:7b:dc:5c:e5:a1:0d:ad:
27:f2:76:56:33:c6:cf:e8:da:3a:f7:fd:2d:65:6a:
20:14:b9:81:45:f1:5c:b0:0a:ed:15:02:3d:79:fe:
d2:75:1c:53:1b:e4:14:e1:b9:6f:ba:85:5f:a1:53:
21:84:42:30:4d:c7:73:de:be:32:d8:30:c8:7f:16:
91:0e:25:36:b7:6d:01:f7:aa:57:17:55:d1:48:c0:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:37:8B:7A:71:A6:41:40:17:C9:8D:E1:84:DB:D3:E9:12:00:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60376EA8E2CD11EFB29E6D98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.197.0/24
Signature Algorithm: sha256WithRSAEncryption
11:67:b0:bf:2b:23:fa:7d:e9:80:0d:d4:38:af:be:be:b8:79:
3e:b5:0d:ed:f5:4b:6d:c0:e7:87:ff:6e:f7:7c:9b:70:ad:3c:
87:2a:b2:e3:c5:66:2a:81:cc:a4:cf:3a:eb:d6:d2:86:dd:3f:
3d:49:e6:c6:b5:2d:37:d2:de:e5:6e:e9:86:55:1c:33:74:92:
d3:a2:20:62:d2:e9:06:68:60:c4:64:0c:8e:4d:9e:20:41:12:
bb:9b:47:d5:81:75:47:4f:2e:0a:6b:52:69:0c:ec:6f:34:8a:
83:86:76:e5:4f:4b:aa:62:67:0a:21:28:bf:16:a3:44:b1:7a:
45:40:78:86:6a:ef:ef:d8:88:51:fe:87:7b:85:38:1e:b6:f7:
d6:a8:7a:56:20:c1:fa:95:29:b2:2e:95:92:b5:6d:1a:7b:ff:
13:ca:b9:c1:e1:11:a2:ed:d7:28:6d:ea:a0:b9:f4:2c:ef:ad:
e2:77:f3:75:c2:a1:e5:f4:b0:bb:21:ea:b8:d3:b9:25:b6:b0:
df:a1:35:32:a7:2b:da:5c:7b:c9:61:8f:55:b7:86:32:9a:36:
22:68:9a:f3:af:ed:ce:a3:7c:92:59:58:5b:bd:17:47:66:f4:
b8:0a:e9:1d:6c:ac:04:eb:5c:56:ea:4d:8f:8d:a9:2d:1c:42:
d7:c7:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client