Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F45EAF2BEDD11EF829DAC6C762E951A.roa
File: 9F45EAF2BEDD11EF829DAC6C762E951A.roa (raw, json)
Hash identifier: ESHTfB24ad4WI0E61+sdoXdFeVaWo2xssvdXl6ujDvs=
Subject key identifier: 50:B2:CB:C1:CA:F0:EA:AC:62:74:63:12:D6:38:51:34:DF:34:2A:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F45EAF2BEDD11EF829DAC6C762E951A.roa
Signing time: Fri 20 Dec 2024 14:20:54 +0000
ROA not before: Fri 20 Dec 2024 14:20:50 +0000
ROA not after: Wed 25 Jun 2025 14:20:50 +0000
asID: 8786
IP address blocks: 154.84.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73022 (0x11d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:20:50 2024 GMT
Not After : Jun 25 14:20:50 2025 GMT
Subject: CN=67657d46-bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:ae:95:6f:43:04:2c:1f:fe:8f:8e:22:a5:
b4:8d:e7:3b:63:8c:3b:ad:46:47:cf:7e:f8:11:8f:
27:02:26:68:61:19:bd:96:e3:e2:b2:81:eb:8c:ac:
5a:71:8e:d1:bf:0d:ef:f9:08:cc:8c:a1:ea:ac:62:
8e:de:e9:4d:3e:f7:3f:92:94:1d:ae:71:37:84:00:
36:f5:9b:90:6e:8e:09:d3:fd:f2:e1:93:de:5f:e3:
ff:8c:97:d6:6c:65:60:72:76:25:a4:3a:ce:4b:ef:
ac:49:2f:38:ca:f9:c1:9a:26:e1:06:48:53:25:38:
b3:f7:37:73:e3:99:98:64:cd:e4:b7:58:67:38:99:
66:04:76:72:49:d3:a3:ef:a1:bf:3c:30:b7:97:4f:
74:9f:78:c9:57:9c:01:a8:da:0c:40:c9:00:1c:74:
0d:1f:66:33:1f:02:6c:db:c1:4f:82:fa:7d:06:0e:
4d:18:01:28:2b:89:e8:54:3d:e0:52:3a:18:15:9a:
0e:f7:30:e2:71:6b:7a:0e:9f:2b:cd:89:00:0a:8b:
da:d5:0c:47:aa:48:e1:c7:51:ad:f8:06:5b:df:d0:
06:d7:20:0b:7d:cd:7c:71:53:36:1a:03:55:f2:1f:
83:96:7e:4c:b8:d8:0a:fe:89:6a:f9:50:0c:ef:c4:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:CB:C1:CA:F0:EA:AC:62:74:63:12:D6:38:51:34:DF:34:2A:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F45EAF2BEDD11EF829DAC6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.40.0/21
Signature Algorithm: sha256WithRSAEncryption
68:0b:07:a4:57:c5:41:c3:46:34:de:25:18:f2:7e:ba:6e:5d:
15:64:0c:8c:6a:8b:63:7c:38:4c:63:e4:06:c0:93:98:90:db:
14:61:e7:f8:c5:85:3b:f2:c5:f0:e3:80:06:0a:c9:4a:5b:91:
aa:1a:d6:59:5e:91:9a:66:21:81:d0:29:64:61:a5:63:ea:18:
bd:b6:fc:1e:8e:34:3f:7a:c7:0f:30:83:48:05:e3:e0:07:ab:
1d:4c:4f:36:c7:94:d1:5f:a7:c2:29:af:4d:3e:6f:62:50:24:
05:90:b1:81:d4:cf:a8:46:62:10:a2:15:d6:a7:21:f8:3b:f9:
89:b6:e9:88:ca:a4:16:7c:21:b3:2d:6e:ef:f7:8d:e6:65:9f:
95:cb:53:f8:9d:c0:f6:69:52:67:06:92:65:04:5b:9b:16:cc:
89:51:ce:a5:31:85:7a:20:d4:34:a5:40:41:9b:be:05:5e:1c:
bd:46:5c:02:80:77:a3:6e:56:05:10:61:a6:2f:a6:6e:0b:95:
3b:51:c5:e6:ca:cc:25:8e:b0:c2:ce:66:26:75:38:18:cf:4d:
35:77:2a:8d:90:a6:ef:7e:a5:9b:cc:80:55:a6:78:b2:3e:bd:
58:a0:08:ad:e0:b5:3b:fc:b6:72:78:02:2e:e3:f4:dd:19:6d:
e8:5e:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:11 2025 by rpki-client