Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE486CE60A11EFA12DC64C762E951A.roa
File: 78BE486CE60A11EFA12DC64C762E951A.roa (raw, json)
Hash identifier: r0v9x/dLUkMQDoyBocH/8YbCtvmYwwtCNU0sxfg54ts=
Subject key identifier: 3E:E7:B5:72:94:4A:0D:7A:12:B9:0A:24:55:B1:E1:78:01:36:2C:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01542E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE486CE60A11EFA12DC64C762E951A.roa
Signing time: Sat 08 Feb 2025 10:50:12 +0000
ROA not before: Sat 08 Feb 2025 10:50:00 +0000
ROA not after: Tue 27 Jan 2026 10:50:00 +0000
asID: 138456
IP address blocks: 154.194.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87086 (0x1542e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 8 10:50:00 2025 GMT
Not After : Jan 27 10:50:00 2026 GMT
Subject: CN=67a736e4-4f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:9b:d7:0f:31:b7:81:3c:96:df:61:b8:da:
45:75:c8:71:e5:4b:be:5a:97:b6:e8:61:6d:05:f1:
e3:14:da:f7:1b:57:45:14:0f:08:a4:9f:34:e9:2d:
a2:20:23:b4:3c:08:78:c9:81:a7:76:7c:58:71:57:
ce:79:44:5e:77:b7:3b:7f:17:0b:cf:54:84:12:a1:
c1:23:86:bb:3e:9a:12:9a:f0:15:f1:b0:6a:55:b1:
3f:64:ab:3b:a6:74:bf:6b:b8:4b:a0:18:19:dc:66:
37:38:08:4e:bd:b0:a4:25:00:95:11:43:81:2b:10:
6a:0e:39:61:18:0c:56:5c:d2:44:1c:45:38:8d:35:
da:96:ba:1c:5e:51:19:59:e4:c6:d8:60:74:e0:a0:
18:c9:62:25:46:fa:aa:68:9c:eb:ae:4c:f9:f2:1b:
28:60:41:08:92:c2:60:76:d2:f2:ab:5a:32:58:a3:
f1:b6:ab:6e:88:bf:1b:ba:92:db:4e:53:4a:5e:64:
6b:e8:a2:d9:a7:f3:08:1c:06:e1:e1:c8:1a:a3:9d:
33:5c:0c:70:cd:7f:9d:dd:7a:15:ca:fd:25:86:fc:
71:b4:61:c9:6c:e3:9f:12:54:46:26:56:1e:f9:99:
a8:c4:fa:de:8f:ef:84:fb:30:a0:7f:51:27:46:d4:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:B5:72:94:4A:0D:7A:12:B9:0A:24:55:B1:E1:78:01:36:2C:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BE486CE60A11EFA12DC64C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f0:45:e6:fe:68:09:de:25:d1:46:f5:e4:49:eb:b6:55:2e:
92:0d:b7:3b:ca:5a:2c:7b:ca:42:62:84:03:3f:c2:b0:40:74:
b7:98:9e:87:4c:6f:93:67:0c:5b:61:1a:98:eb:d3:69:ed:cd:
c3:28:f3:01:af:d1:e3:18:82:34:a8:17:69:65:fa:39:9a:ed:
f1:86:5c:8a:38:ca:52:44:ae:b3:82:03:42:81:db:56:07:70:
0e:56:68:24:2a:34:e8:bf:f6:d4:fb:4c:c4:2c:95:71:84:05:
57:73:6d:31:45:2f:22:86:61:a4:42:41:62:3a:90:17:eb:e3:
80:d2:67:ba:b2:64:1c:df:7a:4b:29:00:2f:e0:ff:58:f7:4f:
d4:e1:78:08:f1:7d:c0:19:f0:92:d6:37:58:5b:ec:e7:0f:4d:
2a:7b:2e:43:a0:e1:0e:e7:49:00:87:30:ae:a2:15:e6:71:e4:
a2:13:22:e8:36:0c:8c:cd:78:9e:d3:66:1b:f6:3a:3f:68:b7:
b5:ce:39:db:99:6d:4b:e4:a3:2c:67:ba:e9:67:c4:22:d2:ef:
90:5d:e1:3d:9d:8e:c6:e2:b6:f2:2f:18:4d:6d:2c:75:6d:3c:
4f:9c:99:0b:8c:cd:24:c5:db:90:47:41:13:09:2e:08:a4:f9:
54:51:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:37 2025 by rpki-client