Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/772C70D8DFEC11EFA470B3AC762E951A.roa
File: 772C70D8DFEC11EFA470B3AC762E951A.roa (raw, json)
Hash identifier: h0Lw9DLkQSQsHrpy2jf7zatHQPZXtQdm/gdClZm2VoQ=
Subject key identifier: 4C:F3:EA:1F:5E:55:C1:06:C0:72:A0:68:1B:07:13:3C:AA:F4:94:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/772C70D8DFEC11EFA470B3AC762E951A.roa
Signing time: Fri 31 Jan 2025 16:00:18 +0000
ROA not before: Fri 31 Jan 2025 16:00:14 +0000
ROA not after: Sat 03 Jan 2026 16:00:14 +0000
asID: 40065
IP address blocks: 154.202.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85505 (0x14e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Jan 3 16:00:14 2026 GMT
Subject: CN=679cf392-279b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:fc:b7:81:50:5c:51:b9:72:bb:3e:22:0d:
1e:f9:3e:80:fc:4b:b8:a9:03:27:00:76:77:bd:99:
63:92:86:fb:cd:2e:c9:ff:f1:b5:8b:77:eb:8c:c5:
06:99:fd:22:46:44:bd:44:49:65:2c:1c:11:9b:35:
7e:df:25:95:41:f5:f2:17:2b:a3:b7:5f:3f:1a:71:
4b:66:45:26:dc:e8:49:24:50:32:2c:4e:8b:b8:fa:
aa:71:0f:4e:19:b5:ad:d9:79:bd:19:be:99:c0:71:
ff:47:d7:3f:d6:25:eb:7b:b5:bc:fd:f6:92:f2:c7:
09:a0:50:4f:0c:90:02:01:60:4a:26:be:2d:f0:bc:
fd:25:bf:db:8e:f9:cb:7d:f5:27:7e:fa:e4:5f:3d:
49:c2:4a:ee:ec:df:c3:98:1d:af:16:af:62:4e:6d:
3e:ed:d4:30:3a:36:d4:bf:ab:fa:a2:b0:7c:23:43:
2a:28:97:c1:a3:d7:bd:57:f8:4b:7e:b0:45:59:48:
6a:cc:9f:5a:02:e9:19:35:87:35:b5:f5:7b:37:97:
c0:7b:41:3b:0d:d7:2f:3d:cd:e2:9c:e8:0b:c8:78:
a4:1d:44:86:65:2e:e7:ff:de:89:4d:43:c8:6a:cb:
9e:7c:b6:4d:e5:fd:de:9f:ba:c9:9a:32:a4:70:b7:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:EA:1F:5E:55:C1:06:C0:72:A0:68:1B:07:13:3C:AA:F4:94:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/772C70D8DFEC11EFA470B3AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.32.0/19
Signature Algorithm: sha256WithRSAEncryption
49:81:38:2f:b1:fe:de:6d:05:07:e3:5a:eb:b2:2b:85:47:c5:
9a:cb:9a:2f:ef:08:80:81:98:77:86:53:43:ba:76:8f:13:a8:
32:ea:3d:55:3a:99:d3:cd:2f:80:d2:07:cf:51:cb:8b:91:c1:
ea:14:60:5f:72:02:2f:98:2d:4b:19:7c:bf:b6:6d:53:f4:86:
e4:b1:ea:65:19:ae:70:50:7c:67:bf:c2:69:c0:70:59:1c:60:
2a:11:79:72:d6:41:88:8b:21:f2:52:a3:b1:56:fb:63:7e:53:
06:a3:49:60:c8:2a:00:02:aa:3a:db:a5:80:7a:d5:cb:13:48:
de:a6:c4:a6:41:a6:cb:46:43:15:c5:77:61:03:da:b9:0b:61:
6c:bd:be:70:b0:35:1e:83:62:bc:5c:00:1c:78:a2:07:4a:a8:
ce:2f:db:1a:6d:2a:f1:7f:10:ea:5e:d2:a5:7e:cc:d3:05:a7:
63:ab:3b:58:1c:e5:18:e9:fc:1d:4b:b6:3b:3d:4d:88:d1:71:
16:df:3a:27:c8:9a:ca:70:6c:90:3b:9a:a5:50:fd:15:01:0e:
20:b9:f0:a9:c1:a4:ea:63:21:7a:6f:28:bf:3c:72:3e:fd:42:
7c:a6:e2:9a:60:b4:79:dc:eb:cc:09:70:a5:0a:d9:a4:e6:eb:
42:6b:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:21:08 2025 by rpki-client