Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAEB5CCF81C11EFA37D15B4762E951A.roa
File: 7DAEB5CCF81C11EFA37D15B4762E951A.roa (raw, json)
Hash identifier: H2RZ0NvzhRvRmoVRnEK//q/Pb7ZQU19QfOKDAxFBGno=
Subject key identifier: 52:33:1D:F5:71:72:FD:47:6D:B7:31:BF:E5:10:77:9F:AA:54:21:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAEB5CCF81C11EFA37D15B4762E951A.roa
Signing time: Mon 03 Mar 2025 10:44:32 +0000
ROA not before: Mon 03 Mar 2025 10:44:28 +0000
ROA not after: Wed 30 Apr 2025 10:44:28 +0000
asID: 63139
IP address blocks: 154.93.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94261 (0x17035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:44:28 2025 GMT
Not After : Apr 30 10:44:28 2025 GMT
Subject: CN=67c58810-ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:b7:5d:7f:c2:5d:cd:be:5d:94:bb:ed:c8:
2b:a2:72:77:ec:1f:02:5f:83:2f:0f:fb:ba:de:8c:
80:ee:90:ba:ed:55:4b:35:c9:4b:61:fc:a9:32:76:
02:63:1c:fb:bc:88:49:62:cb:b7:2e:c7:b5:7d:3e:
5f:25:eb:70:46:9b:f6:84:7e:c0:82:7d:c6:1e:c7:
ef:cb:0f:10:88:39:09:48:7c:40:de:81:57:17:24:
94:06:86:87:3b:d5:39:d0:a9:c1:f1:2c:57:7c:98:
6f:4c:d8:be:24:77:c3:a9:a1:78:c7:03:ad:91:ee:
24:56:da:1d:50:c8:45:a6:c0:cb:ec:6d:57:ac:69:
f7:f4:36:32:6e:13:3d:f2:ab:1c:7e:dc:b3:bd:2a:
77:f2:e2:f2:86:3a:04:78:61:36:2a:d5:a3:7d:b8:
23:10:22:3f:41:3d:a6:da:fe:b0:fb:27:94:be:f4:
c1:56:65:80:a6:fc:04:e1:c6:03:06:a5:60:31:93:
df:79:46:2c:11:29:45:54:a9:08:ec:e2:69:7c:1d:
8c:bf:4f:16:cc:6c:56:a3:97:5e:83:4e:7b:61:69:
31:cd:bc:25:cd:ce:87:7c:4f:e2:fa:7d:54:1e:3c:
00:d1:68:53:77:36:58:bd:82:dc:4a:cb:86:4b:c7:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:1D:F5:71:72:FD:47:6D:B7:31:BF:E5:10:77:9F:AA:54:21:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAEB5CCF81C11EFA37D15B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:85:ee:fc:ef:01:37:3b:ea:27:28:49:55:09:74:25:23:ed:
c9:b3:65:e6:c7:d5:b3:c2:5a:2c:8f:9a:8b:44:c6:e6:0a:6c:
43:6f:b4:75:a2:05:ab:d1:3d:db:83:99:5c:13:2a:d0:f3:36:
14:97:e3:4f:d8:ac:87:eb:4c:53:d5:12:8a:23:38:f7:d0:a8:
c2:8e:22:81:57:f0:b8:2f:9a:4c:e4:2f:19:f6:60:84:6c:fc:
5e:6f:fb:e3:e8:2b:7e:5c:99:45:09:cb:4f:fd:2d:14:aa:37:
3d:b1:41:43:16:fb:d2:ff:0b:d0:7e:ba:58:22:e6:10:3d:f0:
d5:58:cc:8f:4a:fe:81:93:ed:b9:15:37:ff:fb:f4:6c:d2:0c:
fd:f0:30:3e:ac:37:5a:68:7b:67:7e:8e:15:13:88:5e:32:43:
51:fd:52:d6:fe:18:7a:25:32:69:29:57:6e:f3:a5:fa:67:d4:
84:c2:f6:9f:73:73:ea:1d:fc:2e:31:a6:87:e7:41:47:27:12:
c0:6e:3a:54:71:06:93:50:e5:32:be:78:ff:67:a5:ed:1b:0f:
60:c4:ea:bf:1f:e6:6f:7e:eb:67:79:35:56:56:d1:19:68:c8:
8f:36:3f:31:8d:22:58:a6:81:b7:6e:10:4f:11:1c:d7:89:f5:
04:a4:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:44 2025 by rpki-client