Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFFB37A04BF11F08BD36B45762E951A.roa
File: 8AFFB37A04BF11F08BD36B45762E951A.roa (raw, json)
Hash identifier: U9LFBnB0TKgV+1v6wmyVFfi9HLaoBisDNaoGjoE+960=
Subject key identifier: 1D:D5:F8:98:2C:97:4A:96:AD:3F:E6:AB:BA:8C:FD:D5:F9:1B:DB:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01750E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFFB37A04BF11F08BD36B45762E951A.roa
Signing time: Wed 19 Mar 2025 12:41:57 +0000
ROA not before: Wed 19 Mar 2025 12:41:53 +0000
ROA not after: Sun 27 Apr 2025 12:41:53 +0000
asID: 137899
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95502 (0x1750e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 12:41:53 2025 GMT
Not After : Apr 27 12:41:53 2025 GMT
Subject: CN=67dabb94-0850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:03:dc:00:6e:2d:40:a1:1a:55:13:69:de:
17:af:62:3b:a9:a0:9b:6c:6a:a3:40:03:a1:da:28:
e8:39:9d:f8:1a:49:1e:6d:5c:31:05:b7:06:89:95:
88:10:df:2f:9d:98:d0:21:82:39:e2:28:2e:de:45:
1b:c0:70:f0:fd:cc:8c:b3:d3:c5:4b:a8:60:62:de:
60:94:cc:5e:9a:67:5a:13:54:e8:5b:fa:f4:0b:7a:
9e:8e:66:5b:50:83:86:37:3f:7a:b7:1c:30:1f:52:
5f:76:23:52:8b:2a:7c:3d:79:6f:9f:5f:fc:c5:0f:
c1:33:f2:d0:5e:66:46:cd:36:4e:b1:2b:73:d5:88:
18:22:89:2d:16:22:7f:a5:95:3f:33:f8:dd:08:31:
aa:a2:6d:e3:c6:d3:ca:d3:a7:b8:17:0f:1c:1a:1c:
ca:4a:9f:1a:c1:9e:5a:6b:fe:13:95:f8:cf:04:d0:
24:64:2f:3f:b2:ee:6f:93:5f:e2:95:c1:9b:cd:98:
14:b6:34:be:84:b4:0d:d0:20:08:36:2b:cd:4d:94:
b5:10:63:1d:ca:86:fd:0f:f0:69:b6:2e:82:f8:43:
ff:56:b0:d3:73:6a:ba:a8:5f:eb:a9:3e:21:dd:ae:
69:f5:74:25:1b:6e:44:95:1c:34:08:a8:5d:ff:3d:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D5:F8:98:2C:97:4A:96:AD:3F:E6:AB:BA:8C:FD:D5:F9:1B:DB:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AFFB37A04BF11F08BD36B45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
20:9d:36:81:8d:c1:e0:4b:14:78:7b:f2:45:06:d2:b4:78:6f:
d0:94:e9:08:ba:3d:3f:9f:a8:bb:ce:5c:32:c7:4e:da:df:4e:
70:7b:68:d7:2c:87:1d:88:84:a8:5f:d3:f9:d5:64:56:1b:cc:
24:9d:3e:36:e6:f0:52:48:5a:87:66:97:4d:3f:fd:37:2e:39:
06:f2:84:f4:5d:26:77:92:06:c0:fa:44:97:f0:5b:d5:7b:f6:
12:05:ea:5a:b5:e9:8e:4b:26:77:8f:fd:be:75:2f:3c:54:61:
ae:12:d0:ae:f8:c6:c9:ab:a8:52:5e:61:f2:65:a7:66:79:0e:
3c:2b:a2:39:8e:3f:6d:d0:80:fa:03:3c:6f:21:a0:d8:4b:40:
f2:87:72:91:76:cf:aa:64:f3:2d:0e:ea:37:e0:69:17:e9:61:
55:fe:2e:22:c1:70:c4:14:99:ad:6d:65:7a:ae:39:bc:8d:5d:
ec:87:2a:cf:77:ec:94:2e:bc:32:30:9f:0e:33:fb:01:8a:4f:
42:cf:0d:91:9f:7d:45:6b:d1:6e:a5:08:d7:71:86:19:6d:4d:
c7:ac:56:93:8d:28:87:ad:eb:43:36:42:58:3b:44:08:a2:20:
44:33:ee:23:8e:ce:22:01:76:17:a7:08:62:b3:d9:78:f5:fb:
b6:b7:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client