Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B34D7C070111F0A3DEBE88762E951A.roa
File: 83B34D7C070111F0A3DEBE88762E951A.roa (raw, json)
Hash identifier: Z8a1apzb99lONWxWUpLJuiRNw1qzaePXkfBLPS2VyTA=
Subject key identifier: 10:42:32:1F:73:57:F8:B9:CB:92:11:41:02:D6:CC:BE:98:ED:54:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017572
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B34D7C070111F0A3DEBE88762E951A.roa
Signing time: Sat 22 Mar 2025 09:39:13 +0000
ROA not before: Sat 22 Mar 2025 09:39:10 +0000
ROA not after: Wed 09 Apr 2025 09:39:10 +0000
asID: 21859
IP address blocks: 154.94.35.0/24 maxlen: 24
154.94.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95602 (0x17572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 09:39:10 2025 GMT
Not After : Apr 9 09:39:10 2025 GMT
Subject: CN=67de8541-d4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:84:27:79:e2:9e:5c:06:6e:8a:ba:27:7b:
8a:50:3f:bb:11:0e:f4:2d:1b:04:1c:2a:1f:07:90:
b4:63:c7:11:0b:54:a7:1b:a2:58:ef:bb:f0:94:c4:
2c:c7:76:9c:8c:6d:77:37:26:92:b0:6c:ce:1a:f9:
c9:6f:df:a7:ee:a2:ba:d4:2c:4a:c0:11:83:44:a4:
ab:79:7e:ab:0a:3a:36:f9:10:19:5b:d9:00:6e:3d:
66:00:a1:4c:34:46:ea:cf:05:42:e1:45:bd:40:30:
2e:b8:50:31:39:02:34:50:e5:f2:3a:22:ce:48:c7:
23:dd:e3:2a:99:e0:c2:69:70:44:76:2d:1c:16:4f:
94:e7:6a:45:d3:c9:8d:1f:29:7b:0a:df:3b:db:93:
e0:57:a8:ca:83:f9:2a:92:22:bd:12:10:89:e5:b4:
d5:af:e7:00:60:47:9e:dc:d5:87:90:30:59:63:a9:
07:7d:59:b6:4a:03:db:93:dc:c9:08:a6:c2:51:b4:
ea:30:97:b2:81:c5:4f:f1:b7:ce:01:8c:e0:4a:43:
6f:91:1b:c7:c1:9f:5a:29:86:65:c4:54:70:6b:f7:
2e:d8:f1:68:25:3c:7d:54:64:67:37:81:bc:b9:49:
cf:03:a2:99:90:c2:57:0f:f2:fa:96:d7:7d:4a:57:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:32:1F:73:57:F8:B9:CB:92:11:41:02:D6:CC:BE:98:ED:54:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B34D7C070111F0A3DEBE88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.35.0/24
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8e:c2:25:50:e9:a3:57:63:d6:ee:48:1b:55:71:4d:fb:f0:
1a:d9:4c:91:0a:81:47:bb:90:b0:3f:a3:51:f5:32:d3:4c:ad:
ac:fd:e7:be:8b:ef:c0:95:30:cc:b5:b9:4d:06:ac:7d:2b:f7:
72:de:e4:92:b5:d7:a8:de:b7:b5:a4:c8:6c:60:08:b0:1d:b1:
3e:30:f8:04:29:0e:ad:f5:8a:30:0f:8a:df:c3:ec:37:6d:3a:
c8:74:a1:3e:6e:2b:e3:7d:71:90:89:57:de:f4:cb:ef:26:1a:
c3:bb:42:db:ff:9d:19:6b:9d:b9:8a:5c:99:49:15:a0:37:a2:
99:14:37:9d:61:f1:1c:cc:ed:1e:ef:b6:9b:9e:ec:a7:24:b4:
c0:bc:13:2e:e1:70:7f:aa:94:4e:82:7a:b6:95:e5:d1:50:a7:
69:63:7d:9f:a2:28:fa:85:08:f6:2e:a7:fc:0f:40:c9:1a:70:
31:5c:91:79:08:e6:b7:6d:bd:22:39:54:4b:15:d7:91:be:2f:
68:a7:ab:6d:81:2b:ad:6c:ee:33:94:f2:ae:9b:9f:0b:67:d1:
ce:e8:7e:82:29:47:f5:83:58:71:cf:cd:ff:7f:18:f6:92:b4:
d1:8c:7d:b4:b1:3b:88:81:a2:32:66:17:6f:f9:d7:b8:af:8c:
35:95:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:05 2025 by rpki-client