Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A0A9CCF2DD11EF99AC3649762E951A.roa
File: 63A0A9CCF2DD11EF99AC3649762E951A.roa (raw, json)
Hash identifier: oxBo+3PqqwulCp6r4pTwJCrGx/l2FC9s0Prv6aClrOw=
Subject key identifier: 4D:F1:E0:61:55:D3:7D:87:CE:C2:B1:49:22:59:27:C2:B3:F6:A6:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A0A9CCF2DD11EF99AC3649762E951A.roa
Signing time: Mon 24 Feb 2025 18:30:15 +0000
ROA not before: Mon 24 Feb 2025 18:30:11 +0000
ROA not after: Mon 07 Apr 2025 18:30:11 +0000
asID: 63139
IP address blocks: 154.223.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89248 (0x15ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:30:11 2025 GMT
Not After : Apr 7 18:30:11 2025 GMT
Subject: CN=67bcbab6-9e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:db:cf:f0:a1:59:26:5d:ad:88:89:51:13:
ef:dc:41:2d:c2:cf:2d:6a:55:fe:2f:7f:31:fc:81:
0e:d7:fa:f8:75:83:12:bc:bc:65:d9:8d:5c:4d:fb:
fc:6c:01:5c:cf:7e:68:25:dc:2e:e9:7a:6b:8a:32:
4c:63:b0:b1:36:3f:b2:7f:91:97:a1:b3:a6:3a:1a:
7b:0b:de:c7:bf:82:3d:02:ab:d1:91:6c:d8:52:16:
a3:b3:9d:84:68:77:1e:67:24:d9:b9:ce:5c:83:e7:
07:f5:5c:ad:2e:6a:02:7e:2b:28:ae:36:80:32:a4:
67:52:13:ce:cd:08:84:f6:43:d2:8c:4d:98:b9:3c:
a3:dd:87:7d:81:0d:3c:35:bb:9d:8e:e1:b0:ff:90:
9f:e0:27:fd:3d:ba:db:59:46:16:ad:69:31:cf:87:
e8:12:b6:4b:64:49:fc:11:22:0f:cf:f5:66:2d:4f:
a1:42:69:6c:1e:41:22:20:38:25:35:a1:3a:43:d0:
2c:6e:89:78:fe:53:78:f1:da:06:79:f2:ae:62:7e:
9b:71:19:03:69:e7:97:b5:ec:b5:ad:1d:42:10:0b:
d0:37:69:b8:3f:01:2e:27:03:84:eb:27:02:8f:c7:
a7:f1:82:77:f1:5b:7f:d0:79:29:cb:57:32:d8:97:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:E0:61:55:D3:7D:87:CE:C2:B1:49:22:59:27:C2:B3:F6:A6:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63A0A9CCF2DD11EF99AC3649762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:77:20:85:fd:75:4d:bb:39:14:24:55:a0:e7:33:8b:46:db:
38:9c:81:68:4f:13:24:ef:06:64:29:c3:f7:99:85:99:0b:53:
6e:65:c8:e8:75:54:91:e5:9c:0d:b0:10:74:9b:06:52:45:16:
cf:ed:8a:37:90:68:05:51:31:7b:3a:e0:15:a6:0e:4c:cc:da:
ba:10:e0:0e:8c:fc:25:95:32:f9:e8:f7:45:4f:6c:35:78:5f:
2b:a1:df:94:9a:24:06:e4:17:b4:91:fb:38:d9:23:5d:3d:17:
13:2d:9f:9b:ca:02:a9:1d:9b:01:e6:f7:48:72:d1:9c:c2:b6:
b2:d7:11:1c:f9:c5:8b:03:bd:84:c8:0c:89:10:75:d3:3f:5b:
59:fe:55:b7:44:1a:ec:46:18:a5:2d:e7:6d:af:aa:cf:77:1f:
98:b3:49:11:ee:0a:b9:99:5f:ba:55:3a:b4:6a:6a:e7:22:51:
87:c8:82:73:8e:89:48:20:79:1d:e1:c7:cd:a6:ff:3b:27:97:
0d:0f:cf:14:a2:0b:2a:66:03:86:6c:65:58:4e:33:2a:42:5e:
9a:7d:5b:4e:4e:2d:f3:5b:a5:2b:97:b6:a2:e4:2d:43:fa:ca:
ec:61:6f:2e:4d:c4:24:2e:83:7d:c1:55:cc:14:4f:78:42:56:
94:13:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:23 2025 by rpki-client