Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BE038ECC8A211EFB50F3D5D762E951A.roa
File: 6BE038ECC8A211EFB50F3D5D762E951A.roa (raw, json)
Hash identifier: kiUfKzEueExDPDwchj2XSkxxInVOxHHTZs774CnXZHw=
Subject key identifier: 5B:9C:48:54:37:7F:28:CF:28:79:07:73:81:F7:42:85:F4:2A:F8:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01312A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BE038ECC8A211EFB50F3D5D762E951A.roa
Signing time: Thu 02 Jan 2025 00:42:19 +0000
ROA not before: Thu 02 Jan 2025 00:00:15 +0000
ROA not after: Fri 12 Dec 2025 00:00:15 +0000
asID: 984
IP address blocks: 154.218.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78122 (0x1312a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:15 2025 GMT
Not After : Dec 12 00:00:15 2025 GMT
Subject: CN=6775e0eb-4209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:56:dd:f5:09:3c:8f:60:7c:45:8f:e6:0e:
05:5e:d8:d5:2d:01:67:eb:25:59:09:56:2d:98:9c:
3c:3d:de:9c:88:11:24:ba:04:54:b8:1a:e1:8a:8c:
44:a3:96:28:62:ec:f6:5b:7b:f3:d2:d7:47:a2:30:
5d:d2:0e:70:31:a3:01:1a:f4:4d:d2:37:ab:8b:0d:
b3:cc:4a:14:04:5d:b5:85:ab:80:6f:11:01:75:b5:
43:ea:92:25:d6:b1:24:25:0f:04:12:48:b5:51:38:
7e:85:6f:3a:fd:56:e9:19:87:6a:f3:ba:e2:4b:a5:
f3:50:c2:72:27:a4:4e:0f:8b:4d:a5:06:98:d9:02:
f6:24:d1:4e:aa:50:37:d7:ec:14:9b:ee:d9:fa:1c:
63:bc:95:8f:7f:20:23:9f:ff:3e:10:70:13:76:66:
57:c1:a3:97:b2:39:5a:dc:ef:03:91:9f:21:d3:33:
7a:63:74:82:06:42:d2:71:a9:98:a3:cf:a3:18:d3:
60:e3:72:d0:0a:45:13:8a:cd:8a:26:c0:6c:f3:62:
19:91:a0:a9:56:bd:e1:bd:48:64:19:76:ff:84:71:
87:21:13:8a:d1:eb:7c:d9:0d:ac:b4:8b:cb:02:69:
97:37:fc:a8:bf:d8:10:d9:80:ff:f1:c2:ff:54:69:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:48:54:37:7F:28:CF:28:79:07:73:81:F7:42:85:F4:2A:F8:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BE038ECC8A211EFB50F3D5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.49.0/24
Signature Algorithm: sha256WithRSAEncryption
28:08:ff:0b:a4:43:91:cc:ad:08:39:d3:41:d5:47:b7:9e:a9:
af:6a:c4:e7:fe:a7:58:1e:63:4c:19:79:95:25:46:e6:22:6c:
b7:c0:a3:7b:17:ef:09:76:e0:7d:4b:ae:20:14:0a:23:99:6b:
e4:86:2a:7a:2d:81:99:44:31:4d:1c:d5:2e:19:c7:42:90:5a:
76:10:b2:1b:f4:3f:d2:27:5c:0e:e1:bf:37:df:f4:de:5c:cf:
81:4c:e4:ad:5c:4d:a7:cf:ff:2c:95:c4:97:1d:73:52:10:40:
48:be:bc:2a:86:ac:24:7a:bc:cf:dd:f4:9f:6d:19:ee:64:7f:
41:a7:a2:e1:f6:22:c1:48:69:c0:9d:8c:f2:8b:6a:0c:1c:ba:
64:4f:57:0c:91:8b:ce:af:7d:49:b3:22:f5:3d:b3:04:37:58:
68:d8:15:7f:68:de:66:ba:91:1c:0f:e2:ef:24:6a:61:95:47:
58:7b:c3:9e:5d:c3:12:be:99:c5:b5:ea:5c:65:15:d2:b6:54:
fa:12:c7:61:ee:c4:48:13:91:4d:e2:04:8e:9f:39:3e:c3:86:
fe:0c:35:c5:e6:4b:27:8b:ed:62:ba:2d:0a:cc:4e:5b:89:a5:
21:c0:05:d1:6b:9e:7d:e4:74:87:de:d2:4c:38:22:77:18:67:
1c:2b:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:19 2025 by rpki-client