Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E537512CDD611EFA9485E87762E951A.roa
File: 9E537512CDD611EFA9485E87762E951A.roa (raw, json)
Hash identifier: n2+LfsCuZsUtV2Vr5B24j56By4+kGzAfv69WGGthCpM=
Subject key identifier: DA:B3:E1:89:DD:7A:55:CA:95:83:67:30:63:6C:DF:0B:A6:F0:FE:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01376F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E537512CDD611EFA9485E87762E951A.roa
Signing time: Wed 08 Jan 2025 15:38:34 +0000
ROA not before: Wed 08 Jan 2025 15:38:30 +0000
ROA not after: Sat 03 Jan 2026 15:38:30 +0000
asID: 984
IP address blocks: 154.88.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79727 (0x1376f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:38:30 2025 GMT
Not After : Jan 3 15:38:30 2026 GMT
Subject: CN=677e9bf9-539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:e2:06:d0:72:a8:a3:8a:2b:47:88:f1:20:
30:b8:75:43:8f:2a:ba:60:f3:28:f7:91:73:f5:52:
9f:ec:43:43:fa:64:73:f0:24:43:26:1f:c4:f5:74:
db:19:7e:fa:76:43:a0:c7:13:a0:1e:34:b9:8c:eb:
cd:21:ed:20:fb:5d:be:99:e9:52:b5:78:60:83:69:
0d:b7:65:a7:c8:61:7b:68:47:9d:ca:b8:49:a9:80:
3b:3b:08:e2:09:dd:ae:9b:95:9c:e6:8c:bc:4e:c9:
13:b8:76:42:42:b4:93:2f:c4:75:4a:2f:fd:5f:37:
7b:9e:0f:bf:fe:ea:7d:4b:96:b0:7c:97:6e:49:a5:
f9:d9:99:76:96:e5:52:16:74:50:4b:33:e3:72:02:
bc:98:02:16:28:03:1d:81:77:d7:28:87:a2:2f:d7:
b4:4f:29:9b:92:71:7a:3e:87:9a:15:53:eb:c4:60:
7d:1e:d2:01:68:de:57:9d:cf:7c:e9:97:04:ca:fe:
3b:ef:a3:c4:52:f9:43:07:0a:08:9a:ca:81:84:17:
df:92:42:ad:67:ad:2c:0b:14:0f:63:c0:6b:52:12:
ab:76:2e:fd:c8:59:c1:11:99:5d:99:3b:f8:d6:eb:
d8:0c:2b:7d:94:af:44:94:18:37:7e:97:ee:4c:c6:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:E1:89:DD:7A:55:CA:95:83:67:30:63:6C:DF:0B:A6:F0:FE:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E537512CDD611EFA9485E87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:90:a9:4c:0c:13:2e:ea:41:bc:43:a7:3a:54:30:d0:6e:19:
21:f3:6b:42:d6:60:5a:75:9e:73:30:23:1f:38:5f:96:33:df:
c5:92:fd:ad:38:83:82:2c:cd:b0:7c:60:b8:35:a9:47:d9:41:
18:9f:e2:1c:76:41:d2:70:1d:dd:fa:35:4e:cd:d8:f5:21:42:
84:98:99:52:a9:4a:ad:12:0d:92:49:bb:6f:42:e2:f3:2a:fe:
62:a8:87:6a:04:94:c2:98:e6:6a:32:31:cb:72:b0:68:ab:5f:
4d:62:cf:45:e7:42:53:bf:74:b5:72:18:c3:1a:8b:4f:77:80:
4f:5f:e7:95:2c:09:99:ae:93:13:9e:20:b5:26:74:57:1a:fd:
3a:a6:a9:5a:88:7f:d0:f8:4a:23:c2:fe:e1:74:b6:fe:29:47:
77:3f:24:88:5f:47:8a:89:bb:d1:82:3e:38:a7:a7:0e:bb:2b:
b6:8c:1a:ea:9a:52:db:d3:5d:6d:10:5a:62:e8:6e:96:58:66:
01:d3:9c:08:7d:ab:d5:23:7f:01:9f:7a:bd:b7:c5:e0:fa:6e:
27:8f:06:14:af:5a:17:a5:8e:06:d5:c4:4e:10:a5:50:0d:66:
54:64:3f:7b:40:af:69:67:c9:09:da:43:df:0f:57:8a:02:23:
9c:6a:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:59 2025 by rpki-client