Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3359488F81111EF9DB6986D762E951A.roa
File: A3359488F81111EF9DB6986D762E951A.roa (raw, json)
Hash identifier: 8/A6oEVI6KMLc3i6ZeDnO8eiIy4B17Elnhw0VcnCP5g=
Subject key identifier: 18:18:31:79:83:EC:89:8D:8B:EF:7D:56:F2:C1:CA:C4:CD:D7:4D:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3359488F81111EF9DB6986D762E951A.roa
Signing time: Mon 03 Mar 2025 09:26:51 +0000
ROA not before: Mon 03 Mar 2025 09:26:47 +0000
ROA not after: Wed 30 Apr 2025 09:26:47 +0000
asID: 63139
IP address blocks: 154.94.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94135 (0x16fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:26:47 2025 GMT
Not After : Apr 30 09:26:47 2025 GMT
Subject: CN=67c575db-265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:d4:1c:6c:96:fd:02:db:8f:48:73:83:0a:
da:b0:9d:bb:55:0a:35:de:8f:d5:3f:27:07:7f:bd:
9b:c1:2f:14:b8:24:84:40:2b:cb:25:b0:0c:06:e5:
7f:4c:fb:ed:69:9b:ae:84:1d:4c:47:32:65:2c:d4:
a3:b2:9d:fa:b7:a1:a2:21:76:4d:3f:8a:ac:ca:6d:
b3:67:82:b3:d8:be:35:45:49:d9:28:a8:76:b0:e8:
ee:c3:a3:62:2d:70:cc:aa:59:a9:89:16:ef:2c:81:
6e:5e:a6:04:77:1b:05:4d:35:53:91:48:4c:0c:30:
c0:f6:7c:54:5d:4d:70:5a:eb:fa:c5:a1:f6:1e:91:
a2:80:d6:df:37:16:28:ed:b0:1a:2e:a1:71:4c:17:
54:65:aa:86:37:2d:d6:1d:e5:ed:f5:70:3e:ee:61:
18:d9:7b:72:69:99:74:64:2d:5a:4f:0e:85:16:21:
66:93:b1:f9:9b:fe:d1:70:41:10:eb:c3:25:74:5f:
6c:f8:05:dd:96:6f:2b:05:2d:81:67:fe:0f:a3:9d:
74:c7:9c:f6:6a:37:a5:cb:1c:4d:35:6a:3f:67:b4:
ec:1c:1e:5c:ce:49:a3:81:d1:28:e4:94:bf:da:14:
6e:95:0b:a8:64:18:fd:28:69:e0:25:27:1d:4c:4e:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:31:79:83:EC:89:8D:8B:EF:7D:56:F2:C1:CA:C4:CD:D7:4D:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3359488F81111EF9DB6986D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.106.0/24
Signature Algorithm: sha256WithRSAEncryption
41:92:57:6c:7e:35:e1:3e:66:8e:28:f6:fb:0f:1a:4a:24:82:
38:17:62:fa:6b:a9:d5:e3:f6:23:dd:7b:de:ab:f0:64:58:97:
79:09:da:74:91:6b:08:96:9b:83:95:c4:ca:65:d7:e6:50:17:
48:8c:14:f8:6d:fc:65:6b:22:9e:dc:d3:2e:a5:cb:65:a6:5e:
b8:2c:7e:8c:e9:f6:fb:02:ee:7f:7b:fd:9d:f1:36:d5:bd:00:
f6:d6:a0:26:6f:9e:b8:f8:c2:fe:fe:71:fe:35:6b:fc:79:9b:
aa:8f:8a:04:d6:0e:b0:cf:c0:4d:0a:f5:38:d8:fd:cd:35:52:
ee:92:5c:cc:0c:dd:36:5b:8d:0d:0e:5d:94:21:9f:c3:4f:80:
77:79:38:f0:14:f1:97:4d:f7:be:65:8f:f6:97:78:0e:50:af:
52:94:8b:44:32:72:0e:c5:88:b8:e6:cc:16:52:b2:14:24:78:
45:ff:c8:40:78:a1:27:b5:62:71:53:c0:00:79:bc:33:9d:74:
74:c0:97:82:8e:44:4d:2f:1d:3b:a8:cb:db:4d:ff:28:51:86:
cd:1a:2a:52:07:ae:c5:da:c0:e7:97:b4:eb:67:ab:5c:e2:7c:
f4:f1:a6:76:42:22:4d:ee:ad:8f:d4:3f:32:a2:62:7b:03:a2:
48:74:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:19 2025 by rpki-client