Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A11C4C12F1CE11EF96D7E0BE762E951A.roa
File: A11C4C12F1CE11EF96D7E0BE762E951A.roa (raw, json)
Hash identifier: gR/auQ8CESNLWOWVQVz+Nr+hJyXSw7HZm9OghX0u0j0=
Subject key identifier: 59:E6:ED:43:8C:44:7A:3C:0E:8A:18:77:DD:73:6F:79:00:E3:4C:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015B29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A11C4C12F1CE11EF96D7E0BE762E951A.roa
Signing time: Sun 23 Feb 2025 10:12:04 +0000
ROA not before: Sun 23 Feb 2025 10:12:00 +0000
ROA not after: Tue 17 Feb 2026 10:12:00 +0000
asID: 262191
IP address blocks: 154.197.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88873 (0x15b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 23 10:12:00 2025 GMT
Not After : Feb 17 10:12:00 2026 GMT
Subject: CN=67baf474-9ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:ac:98:dc:aa:06:f4:2a:d9:bb:d0:38:bb:
f4:a0:65:8d:74:51:37:ab:83:48:ad:e4:4a:e8:50:
05:22:c4:d0:3f:75:5e:17:c9:0f:4b:3c:2b:c3:3f:
4e:b6:e0:c7:b0:e7:fd:39:f1:e0:92:30:6e:25:69:
1d:b3:9c:5c:cb:aa:c3:06:65:67:7c:89:7f:9d:9a:
31:25:2d:27:ba:9c:7d:84:2d:87:b9:c4:35:52:0a:
5d:1f:8d:48:eb:6c:0f:52:9b:09:3f:db:53:8a:92:
e3:5e:5b:15:f2:59:6b:4a:00:ac:2d:44:7b:1e:87:
a5:5c:82:91:5b:72:7f:65:c3:07:f6:47:2d:34:c8:
45:f2:51:d5:57:2f:3d:e5:a4:de:c8:e1:f2:a6:7f:
bd:76:45:35:7d:17:00:f9:9b:60:e5:13:94:80:cc:
b0:18:aa:53:a5:e7:5f:97:cf:17:20:b7:3a:dc:76:
62:84:8b:d7:b8:a7:c2:4b:64:90:71:c4:03:dc:22:
98:c4:64:34:30:aa:f0:ea:60:ca:94:10:dd:b2:a8:
75:ef:3b:3b:e2:6c:4f:06:ee:61:04:24:25:10:46:
22:13:35:59:10:e7:e0:b1:65:f5:53:ac:a4:09:45:
cf:df:fb:1f:57:23:18:2c:20:f7:41:8d:f0:82:cd:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E6:ED:43:8C:44:7A:3C:0E:8A:18:77:DD:73:6F:79:00:E3:4C:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A11C4C12F1CE11EF96D7E0BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.34.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:bd:0b:e3:e7:2c:b6:13:ac:a8:9c:6f:c0:57:ba:f4:ef:ca:
82:79:b8:49:2f:6d:3f:64:5e:7a:ef:fd:3a:4c:b0:b1:cd:05:
fa:4f:8c:e7:9c:92:92:fc:43:49:27:64:71:b9:a1:d8:d9:1a:
bf:7d:da:73:b5:5c:54:dd:7a:1d:6e:65:72:df:a4:ec:32:35:
62:04:a9:46:28:9e:a9:f8:08:98:69:a6:ec:70:b1:6c:a9:2b:
4b:47:5e:a7:fa:f4:45:cf:35:e1:4f:25:d8:ae:ac:86:67:55:
e9:1d:2f:ac:6b:34:12:a6:7f:1a:78:6e:40:06:ce:ad:3d:70:
39:f9:e2:e1:07:b9:97:8f:65:41:1e:18:1d:97:2f:bf:83:6f:
da:c2:8d:2a:a6:e4:b5:f0:60:1b:53:2e:2d:30:f6:bb:2f:ff:
cc:a5:66:56:d8:ed:87:84:db:c9:e2:71:e1:7d:70:ea:a3:c9:
f8:d9:71:08:45:8a:14:54:fe:da:b0:79:16:fc:2e:4b:fc:29:
af:3a:13:dd:15:ca:bb:5a:c8:16:fd:7e:13:5b:18:b2:4e:52:
ac:e7:79:8a:7a:bf:8a:f0:e3:d4:3e:86:56:e4:dc:c5:9e:23:
a9:60:e4:a2:b3:3d:45:0e:4f:ca:ae:33:95:0c:ec:ca:cb:31:
2b:33:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:21 2025 by rpki-client