Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3360E8C36811EFAAE1EAB5762E951A.roa
File: 8E3360E8C36811EFAAE1EAB5762E951A.roa (raw, json)
Hash identifier: 98vjkaZlPww0UQXnBR8Oy6teFllSn/K+6ZKn/4rHdlc=
Subject key identifier: 7F:2F:C3:F6:78:48:22:60:EF:95:46:6C:30:3F:97:0F:5C:76:F2:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3360E8C36811EFAAE1EAB5762E951A.roa
Signing time: Thu 26 Dec 2024 09:05:30 +0000
ROA not before: Thu 26 Dec 2024 09:05:26 +0000
ROA not after: Sun 12 Dec 2027 09:05:26 +0000
asID: 17561
IP address blocks: 154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75472 (0x126d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:05:26 2024 GMT
Not After : Dec 12 09:05:26 2027 GMT
Subject: CN=676d1c5a-0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e5:4d:e0:00:eb:48:eb:54:b8:81:e6:e7:ae:
eb:df:8e:af:af:15:d0:3b:10:10:59:67:07:c8:28:
7c:1d:ad:a9:4e:ba:72:b6:cf:bf:9e:cf:eb:7e:f4:
c2:9a:f1:08:06:6c:01:2b:79:73:d1:69:69:a3:0b:
db:f1:f7:74:24:f5:b9:72:f9:37:ff:c9:91:77:08:
44:b8:f3:4a:86:0c:78:ad:4b:3a:17:26:41:44:b8:
04:72:47:d9:e5:51:05:b7:e0:71:c6:47:cd:7f:bc:
6d:70:77:bf:4a:7a:11:4c:64:6b:6c:29:a2:f7:0c:
31:f3:b3:90:4a:3c:9a:e7:4d:d4:0f:bc:82:94:49:
6a:3e:f9:66:1d:a8:80:c7:ac:97:aa:da:5b:12:77:
fc:a3:32:ec:82:b9:21:dd:76:9c:75:13:15:49:25:
58:9a:58:c9:a0:a3:39:74:69:de:11:ed:db:25:9f:
a5:52:4a:24:e5:62:f6:17:8c:d5:75:58:94:e6:53:
db:ea:34:5c:cc:6f:6a:55:f5:47:8f:23:36:ed:f3:
b8:37:b7:d4:66:62:7d:67:bd:61:17:3b:a1:1c:76:
5e:96:38:32:83:85:87:be:d7:f7:f9:14:2d:06:cd:
b8:82:b2:64:e1:6d:6d:7f:5b:9a:eb:3b:aa:68:de:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:C3:F6:78:48:22:60:EF:95:46:6C:30:3F:97:0F:5C:76:F2:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3360E8C36811EFAAE1EAB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e5:b8:5c:9d:ed:62:d6:75:85:3f:33:56:e5:9d:6d:00:a2:
1b:f6:b7:49:40:81:df:9c:4c:98:e3:0a:88:f3:08:e4:d8:7e:
a0:86:c3:85:6b:34:ee:d3:48:19:b0:04:8e:e1:d6:fc:a9:7f:
8e:99:dd:4e:3f:41:e9:81:c2:30:37:a5:88:97:3b:02:d2:87:
be:9d:f2:87:a1:0e:88:40:93:8f:cd:03:56:73:8a:f4:ae:13:
ab:a5:22:dd:9a:fb:6a:85:59:43:4d:21:f5:28:49:e0:20:84:
1c:b6:c1:4d:2e:a7:a9:32:6f:37:18:fa:28:79:81:89:aa:1f:
3a:03:62:cd:b6:74:5f:bb:4a:b3:67:b4:c5:93:4b:33:48:46:
62:a2:b0:36:2c:7e:3c:94:1d:93:19:18:4b:bd:e0:80:c2:96:
b4:35:7c:bf:40:38:33:f4:b4:30:4f:9b:37:2a:58:bf:7d:8c:
7b:a9:4e:04:6b:da:08:b0:18:f3:4f:4a:b1:97:ca:fa:87:12:
a5:f5:c6:a3:4a:68:a2:c6:9b:9f:1c:a5:21:5a:b1:0b:75:eb:
f1:aa:0e:39:a4:df:5a:cc:ef:f9:5a:cb:79:70:4a:4d:13:f4:
14:54:88:89:eb:26:e6:f4:2b:61:8d:ab:0c:9e:16:6c:3b:8d:
a8:cd:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:24 2025 by rpki-client