Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2C0F2EF47311EF9A26E4AD762E951A.roa
File: 7E2C0F2EF47311EF9A26E4AD762E951A.roa (raw, json)
Hash identifier: vs/DMSEJ+CbGyqnYFm5N5JmgWIYIMp1RsP87dBk5fW8=
Subject key identifier: 04:11:AB:A8:76:86:A4:45:77:9F:A6:38:56:FC:63:63:66:2F:46:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016574
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2C0F2EF47311EF9A26E4AD762E951A.roa
Signing time: Wed 26 Feb 2025 18:57:15 +0000
ROA not before: Wed 26 Feb 2025 18:57:11 +0000
ROA not after: Sat 19 Feb 2028 18:57:11 +0000
asID: 17561
IP address blocks: 154.218.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91508 (0x16574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:57:11 2025 GMT
Not After : Feb 19 18:57:11 2028 GMT
Subject: CN=67bf640b-bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:58:96:be:08:6a:7d:6c:95:24:00:06:aa:
af:f4:58:f5:c8:75:9c:9a:f9:74:7c:2b:67:ab:8c:
71:38:0e:75:fe:be:6c:21:c0:2a:70:f6:0d:48:90:
e1:c8:25:2d:f1:b3:7d:94:98:f4:db:19:75:95:12:
c7:26:dc:17:a1:b0:00:87:66:c1:d7:79:b4:5b:93:
4a:66:bd:33:58:c5:68:81:ef:79:ae:b7:7d:40:1b:
9a:f6:3f:9b:8f:d6:35:13:d8:5d:1d:1d:4b:8c:c0:
55:b1:3a:33:96:c1:77:e0:fe:74:fd:87:5d:f7:6c:
6a:1a:14:0b:d1:48:51:61:67:19:09:3a:62:98:2b:
0d:1a:78:b3:2d:e6:fb:91:2a:ab:6f:0c:87:ea:a8:
23:fa:d7:a1:bc:0f:c6:42:a6:fb:75:2e:b1:9e:c5:
ce:37:76:a5:ac:35:06:2e:52:8f:6d:1c:33:b7:72:
05:e4:75:ad:65:cd:56:9f:96:39:6f:92:97:be:97:
7a:75:05:ed:a0:80:ea:1d:97:4a:a8:01:6c:be:6f:
0a:1e:ff:66:a6:3f:3f:e4:58:9d:67:e4:b8:7c:a3:
0b:71:b9:c7:45:18:61:b5:2e:83:a5:ee:ab:1b:46:
b8:6e:21:55:d8:a2:84:88:57:0e:e7:a5:db:17:1c:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:AB:A8:76:86:A4:45:77:9F:A6:38:56:FC:63:63:66:2F:46:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2C0F2EF47311EF9A26E4AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3b:75:fe:58:a3:27:7f:d1:99:d6:37:82:64:c2:07:b5:ba:
3d:90:2c:75:82:09:41:68:c6:35:8d:d9:f2:a9:74:f5:8e:86:
df:a2:fa:08:19:0f:89:62:06:17:90:15:08:64:ec:44:2e:f5:
af:17:79:4d:aa:93:71:6a:fe:54:2f:23:49:52:c6:a2:32:02:
d2:0e:a9:bc:1b:92:d7:69:02:89:d8:0c:3c:e4:7f:fa:b3:e8:
52:26:d9:8b:c8:0c:e2:7e:f3:b0:ae:c9:be:e9:20:45:22:c0:
d3:25:d5:5f:89:95:01:dc:4d:1c:73:e5:22:bf:54:b9:86:40:
a7:0a:c6:71:3c:8b:d1:be:46:6e:03:9b:2b:5c:e0:17:d3:1f:
bd:8c:f9:46:c3:a6:b0:79:91:cf:e4:ba:a4:3b:7b:ce:66:b2:
7c:4e:61:ae:57:b6:da:2b:43:ac:a8:a0:fc:7b:b5:40:34:ae:
43:88:ab:b6:aa:e1:7e:24:a7:f2:46:41:1b:bd:a9:4f:45:d8:
0d:19:a9:94:d4:36:ad:6e:f8:8d:19:5a:47:9e:5a:4e:9e:4e:
03:38:a1:b3:0d:11:67:bc:bb:14:ef:61:c1:27:54:bb:fa:62:
10:b5:c2:71:c1:bb:28:d4:f2:81:07:72:f4:3c:5e:a0:e9:51:
bc:10:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client