Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C3E60A057A11F09A7414B3762E951A.roa
File: 66C3E60A057A11F09A7414B3762E951A.roa (raw, json)
Hash identifier: kqBJD2oa5VEGT7PKXo9Jykxf+hfUK3XyfprWdh2BsdM=
Subject key identifier: D7:7C:C4:7D:82:33:47:61:AC:DA:B1:A7:BE:82:CD:EA:66:E6:40:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017537
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C3E60A057A11F09A7414B3762E951A.roa
Signing time: Thu 20 Mar 2025 10:59:32 +0000
ROA not before: Thu 20 Mar 2025 10:59:28 +0000
ROA not after: Wed 09 Apr 2025 10:59:28 +0000
asID: 18013
IP address blocks: 154.211.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95543 (0x17537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 10:59:28 2025 GMT
Not After : Apr 9 10:59:28 2025 GMT
Subject: CN=67dbf514-3244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:a9:80:9e:4a:2d:ee:b6:6f:72:87:58:d3:
93:09:2e:8a:51:5b:42:75:16:2a:ba:2b:1b:43:a4:
eb:72:18:b5:2a:d5:ab:a1:5e:e7:27:93:e0:92:12:
4d:05:23:9b:c6:90:f8:d1:c1:68:8e:5e:2a:e1:c8:
fa:dc:2a:09:b4:d2:c8:99:db:7e:a6:11:f5:27:ad:
5c:5e:8b:8a:90:d6:d2:97:a8:8e:0a:32:53:3e:88:
0c:b5:76:0b:9f:6b:c0:0d:cd:1f:66:83:52:44:2f:
f7:b9:7f:05:08:11:d2:06:e3:21:82:32:88:9a:36:
2a:bd:3a:28:f1:71:83:95:70:8c:08:7d:b5:ec:e8:
e1:64:0d:b1:f5:0d:67:76:41:27:fa:cf:c8:5d:d7:
66:fc:40:c7:a6:07:0c:70:0d:a4:f0:3b:de:48:a4:
a8:cb:bb:7a:88:c8:48:c2:8e:96:f8:b4:55:5a:4e:
11:87:7c:26:15:2f:3f:45:2b:b2:da:40:52:1a:d4:
62:d7:c6:b1:82:97:7d:ba:79:0a:e3:37:c5:ab:f9:
68:54:e8:7b:ac:c1:b6:d1:f8:23:10:b3:90:85:3c:
04:56:73:19:e8:0e:99:73:6b:58:09:21:8d:6b:2f:
91:a3:07:08:d7:80:5f:1c:a8:80:6a:82:c8:81:b8:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:C4:7D:82:33:47:61:AC:DA:B1:A7:BE:82:CD:EA:66:E6:40:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C3E60A057A11F09A7414B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:67:d3:a5:36:24:f5:ca:ab:06:15:00:37:d2:92:b0:dc:ce:
0f:f5:89:ee:4a:fd:d4:36:b9:65:b4:4f:ed:83:a0:a3:c7:f9:
b7:6b:94:f9:dc:28:71:d2:c3:74:49:ab:5e:f9:ce:cf:09:11:
8f:8c:13:97:fa:ab:bd:51:aa:93:a4:c9:b1:f6:4e:29:26:c2:
4d:0a:94:b6:4b:07:cd:9b:48:1c:83:9f:23:c9:cc:85:54:a2:
df:d3:54:d9:39:9e:1c:bb:fb:c5:33:8a:ae:7b:64:40:22:1f:
41:3c:82:f1:70:53:83:5b:3d:4c:f8:60:83:0f:76:6a:ab:2b:
01:23:23:69:4d:7f:6b:10:2c:ae:34:5d:7e:8f:2a:ef:f5:bb:
33:9a:06:d3:94:63:b9:8b:93:5e:89:4e:c3:58:4c:4f:94:98:
c4:dc:36:ed:48:37:e1:09:ab:02:97:68:ed:47:0e:cf:f3:64:
22:fb:32:1b:e9:0d:c5:88:40:d3:15:fe:2f:8e:44:0d:b4:68:
33:12:b6:bd:c7:08:2e:aa:e5:17:a1:fe:6f:c5:72:fe:2c:0c:
1b:5b:e6:99:d5:a9:cb:5c:4c:c0:80:63:ed:ac:ce:7d:d4:14:
d8:29:f3:81:9c:31:21:d6:b2:cf:4d:c6:cb:a4:3e:7d:ab:d1:
77:64:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:12:57 2025 by rpki-client