Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6962C76AF46711EF85939C58762E951A.roa
File: 6962C76AF46711EF85939C58762E951A.roa (raw, json)
Hash identifier: 0wvFEDVQKvZ3dWikaAX4S6PZCo1wEVzQlOtNn8ymUBA=
Subject key identifier: 18:83:1B:4A:81:FC:B1:0C:E6:AD:90:1D:1A:F2:79:8E:9C:48:D8:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01654C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6962C76AF46711EF85939C58762E951A.roa
Signing time: Wed 26 Feb 2025 17:30:46 +0000
ROA not before: Wed 26 Feb 2025 17:30:41 +0000
ROA not after: Sat 19 Feb 2028 17:30:41 +0000
asID: 17561
IP address blocks: 154.197.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91468 (0x1654c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:30:41 2025 GMT
Not After : Feb 19 17:30:41 2028 GMT
Subject: CN=67bf4fc6-e625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:ed:32:63:3c:12:d0:d4:24:fd:76:97:43:
6d:50:81:03:8d:f5:3d:62:54:a6:69:41:9f:0d:6a:
4e:61:73:b0:0d:61:30:20:b1:f1:49:25:ca:70:5f:
c9:31:af:f0:4f:72:ef:47:21:b1:d8:a2:e1:22:48:
3f:d4:00:d0:7b:49:dc:5b:da:25:62:97:06:89:3f:
0c:f8:e3:85:d4:4f:7b:52:d3:70:c4:b5:5d:53:a4:
fa:b5:61:c8:ba:50:5f:e2:dc:cb:a2:11:8c:e1:8c:
df:51:c1:e1:75:76:f9:c0:67:fe:c7:07:ea:a6:2c:
30:9c:58:b7:33:7f:d4:3c:b1:e5:7d:6c:86:f2:31:
54:48:64:9b:f2:7e:ca:4c:e9:53:95:ff:47:b5:e5:
ce:9b:18:e3:e2:65:20:b0:e2:45:11:56:16:44:de:
86:04:fc:76:68:38:a6:19:84:d2:2b:44:7a:c9:e8:
a4:d7:d3:41:70:74:6e:9f:98:56:aa:b5:3c:64:1a:
14:58:1b:f2:30:c2:c7:4e:f8:f3:14:8b:a1:e4:cf:
5b:29:ce:f8:6d:c9:b6:08:53:6d:2b:ef:c3:60:cd:
d9:96:08:14:f0:b6:f6:23:94:e9:f3:d5:a4:55:fc:
47:63:e1:0d:16:bf:43:ab:cf:40:6c:92:4e:de:5c:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:83:1B:4A:81:FC:B1:0C:E6:AD:90:1D:1A:F2:79:8E:9C:48:D8:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6962C76AF46711EF85939C58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.106.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:25:e5:db:40:89:9a:3f:f7:48:35:a0:fc:f5:80:af:10:de:
fa:a5:aa:01:86:88:74:07:b9:6d:b7:8b:a7:42:9e:c9:87:55:
28:45:0b:d1:4c:3f:62:ef:15:66:4e:f9:5c:94:d9:3f:6b:09:
3f:ad:90:d6:32:b1:00:49:68:50:c9:2f:84:a5:d9:25:0d:07:
e2:ee:4c:68:34:f5:31:33:3d:52:a8:84:ef:ef:01:de:d5:b0:
69:3d:bf:99:28:91:c2:bc:19:ba:7c:fb:d1:bb:50:5f:a6:6b:
80:8b:9a:d3:42:e4:86:25:52:63:28:4c:78:ae:97:84:52:09:
6d:53:d0:d9:00:f5:ea:36:3d:91:35:4c:91:2b:98:63:eb:4a:
e3:56:96:03:3c:cb:d2:90:6c:5d:53:0f:b9:c9:c0:f4:43:fa:
cd:18:5d:eb:22:8c:1e:09:a2:42:a7:4c:52:a5:4e:cf:5c:14:
ff:e7:2c:1d:83:c1:a5:4d:8c:be:5a:b3:43:c7:2a:15:e8:77:
9d:6a:f0:57:fa:3f:ce:66:3b:9c:f0:7b:8b:e6:8c:4a:9d:67:
fc:b1:7e:1b:df:cc:7f:40:18:8a:a0:45:0b:95:9f:f6:7c:66:
68:23:88:f0:5d:1b:a7:0d:b6:0b:4d:41:f6:f6:e3:14:e5:d2:
b6:da:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:36 2025 by rpki-client