Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849C6D66F8DF11EF8BDEC465762E951A.roa
File: 849C6D66F8DF11EF8BDEC465762E951A.roa (raw, json)
Hash identifier: qENVYfld8OGB/Wy2pNagGTTgdfUzPOSGyGK3vOi7AMk=
Subject key identifier: 89:1A:11:D8:48:46:A7:A4:C2:C3:97:90:1B:DA:2B:28:9D:22:9D:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849C6D66F8DF11EF8BDEC465762E951A.roa
Signing time: Tue 04 Mar 2025 10:00:36 +0000
ROA not before: Tue 04 Mar 2025 10:00:32 +0000
ROA not after: Wed 30 Apr 2025 10:00:32 +0000
asID: 63139
IP address blocks: 154.94.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94626 (0x171a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 10:00:32 2025 GMT
Not After : Apr 30 10:00:32 2025 GMT
Subject: CN=67c6cf44-8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:30:ca:dd:3b:11:86:d6:ef:79:64:69:f2:
7b:57:35:27:70:29:19:f1:bc:9c:19:12:5a:1b:e3:
b9:82:c9:fb:57:ab:f0:b9:6a:87:32:91:73:d1:82:
36:a9:96:79:af:1a:95:9d:37:a6:ea:4a:31:7c:9d:
18:ee:9b:6f:2b:f9:97:b5:2c:65:00:3c:36:77:d7:
62:10:77:40:29:b5:d9:10:09:f3:d4:21:0a:d5:20:
8b:ee:7b:90:82:a2:1d:01:2c:5a:4a:42:cd:ae:52:
6d:8b:b9:f1:a7:10:f8:23:c5:e2:de:eb:04:03:00:
f4:2a:18:13:84:bb:74:8a:c8:52:25:2c:a5:d8:2c:
a2:4d:ff:bb:33:d5:bc:d1:2e:a9:63:ff:22:b8:d8:
aa:ce:68:e7:19:db:0a:ab:82:aa:58:2e:40:f6:90:
89:3a:c2:77:67:52:2f:0e:24:2e:28:ea:1f:dd:c5:
f2:b8:96:84:91:2f:aa:75:6b:dc:c1:35:9d:cd:c4:
17:0a:33:4d:a4:cf:ef:1a:61:c7:9d:83:df:46:78:
45:5e:15:56:bc:0a:cc:16:24:08:79:28:f6:62:41:
e9:bb:a7:19:5e:43:6b:bf:52:85:97:c4:30:77:7e:
70:24:be:94:0f:4d:59:81:f4:61:0a:0c:ca:5e:e0:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:11:D8:48:46:A7:A4:C2:C3:97:90:1B:DA:2B:28:9D:22:9D:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849C6D66F8DF11EF8BDEC465762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.105.0/24
Signature Algorithm: sha256WithRSAEncryption
82:71:0c:fd:e5:2f:69:f4:e4:ea:ee:92:f9:01:1d:43:b6:31:
be:6f:a5:5f:3d:26:73:9c:67:db:8f:04:8d:4b:eb:7d:cd:b8:
22:ae:8e:5e:6a:cc:56:4a:56:5d:62:44:c9:64:47:17:f4:52:
83:89:ba:92:ad:63:ba:9a:f0:1e:b3:9c:3a:1e:ab:d3:70:d9:
9b:16:2f:ba:6a:53:6a:af:f5:e6:a0:44:46:34:fc:e9:dc:33:
ae:96:bd:6d:57:d3:96:8a:28:eb:6d:5a:de:d6:7f:dc:a2:75:
91:ca:5c:87:14:e6:b6:64:c1:b2:c7:df:09:df:0f:e9:ac:f8:
6e:1a:36:1e:71:43:a9:2b:e0:39:12:6e:7c:99:4f:19:be:13:
49:4d:16:50:30:c1:bc:99:d0:26:2b:c2:fd:fb:e0:aa:66:39:
24:29:3d:9b:04:9c:36:1c:a7:38:70:53:99:1e:54:15:6c:26:
f3:4c:ff:71:da:1d:84:41:a8:d9:c8:e0:9b:3b:5c:36:c1:4e:
a3:02:2b:1e:2d:3a:0a:c8:aa:64:b7:47:33:89:d7:fe:67:2e:
68:41:79:46:5b:b3:16:13:a7:c7:d7:ce:14:84:c6:47:1b:e8:
9c:53:85:82:8a:66:72:5a:ae:18:db:f5:5c:17:82:8d:41:60:
99:41:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:59:15 2025 by rpki-client