Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C585244FE5011EF8B39AD9A762E951A.roa
File: 6C585244FE5011EF8B39AD9A762E951A.roa (raw, json)
Hash identifier: GTy+GnJjDYUT9iwWeOSbl6qZukOEYxyXTwReAPjkR7w=
Subject key identifier: 57:05:1F:96:37:02:62:D9:15:45:C0:A7:3E:E5:F6:17:A3:08:1A:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017378
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C585244FE5011EF8B39AD9A762E951A.roa
Signing time: Tue 11 Mar 2025 08:11:24 +0000
ROA not before: Tue 11 Mar 2025 08:11:20 +0000
ROA not after: Mon 14 Apr 2025 08:11:20 +0000
asID: 397630
IP address blocks: 154.83.44.0/22 maxlen: 24
154.84.132.0/24 maxlen: 24
154.84.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95096 (0x17378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 08:11:20 2025 GMT
Not After : Apr 14 08:11:20 2025 GMT
Subject: CN=67cff02c-ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:73:c2:88:c6:03:14:11:25:03:79:53:75:
a0:88:4c:7b:bd:98:7e:7e:23:e1:ee:08:b8:c0:95:
37:19:67:83:fd:24:2a:2e:36:9f:44:6c:4b:c7:31:
af:54:ca:9b:8e:3c:36:89:6e:03:dd:d1:4d:36:c1:
ce:7d:52:e0:1c:6c:ac:27:74:fc:af:00:a1:2a:08:
28:32:a1:c8:b7:44:3a:2e:29:3d:8d:aa:7a:3d:21:
76:21:77:93:27:d9:97:30:c8:bd:14:ef:b9:d2:db:
28:5b:ea:5b:ca:e7:57:9e:66:de:3c:1e:9e:e0:d7:
65:28:db:9c:39:fe:9e:63:21:b5:c3:68:7c:fd:6a:
48:e4:9c:a0:df:b7:57:78:93:3c:c8:c1:db:86:32:
36:3e:eb:07:40:e0:36:8b:68:b1:8c:ab:80:73:ba:
44:9e:9e:40:da:ca:0a:cb:bf:06:6e:64:dd:6b:e5:
bc:ee:56:b0:d9:d5:49:bf:24:4e:df:06:49:79:8b:
96:0d:4a:39:cf:64:eb:91:1c:63:94:6a:b2:be:a7:
f1:06:e3:3a:69:8f:e6:f5:c0:f2:c5:a4:b4:5a:c7:
4d:8b:68:db:91:bb:38:e7:00:60:42:ab:dd:44:79:
8d:08:99:aa:8d:a6:83:4a:c9:f7:6c:b0:88:3e:f3:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:05:1F:96:37:02:62:D9:15:45:C0:A7:3E:E5:F6:17:A3:08:1A:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C585244FE5011EF8B39AD9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.44.0/22
154.84.132.0/24
154.84.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fa:c0:2e:9e:86:7d:ea:34:30:45:ee:96:b5:89:e4:a6:a5:
c1:d0:7a:5e:97:56:f3:7a:fc:cd:a8:31:a0:d8:c1:a2:1d:5c:
bc:77:5e:a0:04:cd:c4:87:e4:ec:e3:df:df:b0:c3:07:b1:e4:
28:c7:c3:93:b4:7e:da:17:f8:02:1b:9b:95:b3:52:6f:a2:a7:
21:9e:a5:5e:3f:03:86:91:b1:1a:d9:d8:cf:48:99:a1:eb:73:
f7:ef:25:de:89:6e:d5:80:2f:ef:a0:6a:12:4e:19:4c:ea:43:
37:dc:84:ae:ac:8f:83:c2:7c:de:56:17:15:5f:64:f2:f8:ce:
51:2f:2f:23:81:c7:4a:db:7a:55:b9:98:72:90:1b:64:a1:d6:
d7:92:0f:cb:56:de:60:54:3a:83:3a:9e:28:97:14:4f:d4:35:
96:51:53:9e:94:75:0b:0b:ae:98:4a:7b:91:ab:22:e6:92:4b:
06:b6:e1:e4:85:6f:16:c1:62:6f:e2:e6:3f:27:d6:f7:e2:c7:
da:df:2f:fd:31:08:b8:71:ec:3b:93:87:e0:f1:19:4b:0c:81:
a1:2e:09:e9:7e:76:c5:12:bc:04:ce:45:1a:63:c0:db:4e:c9:
b1:a1:05:2f:c7:b7:c8:b8:30:4d:b1:35:25:ce:15:fb:4b:41:
cc:79:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:00 2025 by rpki-client