Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEDA656F2DB11EF9FC684BD762E951A.roa
File: AAEDA656F2DB11EF9FC684BD762E951A.roa (raw, json)
Hash identifier: ZjbOEt3nt2bZIRuE783mSgyDXcVytlM60NpnKYVo1Xo=
Subject key identifier: 8F:4B:87:2D:A9:C0:61:06:24:54:68:67:22:9C:A7:8B:DD:E6:57:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEDA656F2DB11EF9FC684BD762E951A.roa
Signing time: Mon 24 Feb 2025 18:17:55 +0000
ROA not before: Mon 24 Feb 2025 18:17:52 +0000
ROA not after: Sat 05 Apr 2025 18:17:52 +0000
asID: 42831
IP address blocks: 154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 18:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89244 (0x15c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:17:52 2025 GMT
Not After : Apr 5 18:17:52 2025 GMT
Subject: CN=67bcb7d3-729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:09:49:03:de:5d:a0:3c:06:cf:85:b4:e5:
51:88:14:74:f1:3d:9c:af:8b:4c:80:fb:7f:79:89:
dc:58:5a:af:d7:34:08:58:7a:03:24:dd:c7:f4:1d:
77:a4:aa:5c:49:f6:b0:4b:53:36:6c:e3:1e:50:29:
58:f4:ee:5e:8c:1f:3d:b1:dc:39:dd:8b:f4:92:07:
25:2d:52:0c:31:4c:d7:64:96:6f:9f:55:73:9d:e4:
db:a7:98:3b:4e:87:47:88:d1:0c:bb:64:a3:f2:81:
db:36:b6:06:03:dc:4c:3a:e1:14:fa:b5:83:51:3c:
c2:6e:ed:2b:d4:1f:64:d8:de:02:41:61:07:d2:73:
ac:e6:57:cd:cf:e3:6a:67:d3:f3:a2:07:f1:51:d3:
02:65:59:e8:e8:ea:71:1e:8a:f5:54:ae:a4:74:cb:
3a:e7:93:fd:e3:f8:dd:df:c9:94:44:67:4a:94:a5:
cf:8c:d2:ec:3f:75:a4:fc:66:ae:ff:23:6f:74:50:
e1:12:2a:f4:1a:21:e4:3c:54:ff:3d:2f:be:45:85:
dc:58:c1:96:89:30:ec:28:ba:0d:3e:bf:e2:26:b8:
7a:43:e6:c1:b1:3d:cb:49:27:b1:ad:5c:fa:f7:33:
09:eb:79:61:46:7b:c3:49:b6:de:8d:fe:5f:56:32:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:87:2D:A9:C0:61:06:24:54:68:67:22:9C:A7:8B:DD:E6:57:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAEDA656F2DB11EF9FC684BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:73:ca:17:e3:9b:49:f2:b4:6e:4d:f7:a7:98:09:53:61:f7:
77:72:6c:51:46:be:94:12:10:3f:96:15:0a:6c:ae:b1:be:d7:
1d:fc:e0:40:fc:d4:47:d2:7d:45:1d:66:42:e1:45:2b:7f:80:
c4:30:10:1d:09:3d:e6:06:55:3e:c6:9f:7b:49:fe:3b:00:06:
4d:e0:1c:3f:3f:32:dc:a8:b0:af:4a:52:2c:42:3d:fb:98:99:
f4:fb:a0:56:69:81:b3:93:09:77:4a:3e:8b:b3:97:a5:c5:c6:
61:d0:7f:9c:fe:f0:c6:44:3f:48:d7:70:17:2c:68:9a:e3:57:
e8:18:20:85:2d:ad:42:20:96:3c:a2:a9:2f:31:ca:8f:fd:1d:
68:74:f1:35:3e:72:cd:51:2c:3c:16:06:f4:f2:8a:6d:4c:09:
2c:84:f1:0b:11:cf:17:f0:80:25:08:2e:51:09:ac:a1:34:83:
1f:de:f8:1c:c9:d7:bd:32:80:b7:8e:41:bf:a7:25:d5:7b:82:
86:58:0a:25:32:7a:b5:13:c5:01:ae:ab:ca:df:23:82:ad:7a:
7c:ce:d0:60:30:11:ee:ed:80:4f:94:48:77:c1:89:f6:86:25:
ce:d9:18:d3:a9:26:90:aa:ea:71:11:a4:3d:d6:68:1a:02:e0:
f9:14:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:42 2025 by rpki-client