Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE9F54600A2411F081C24FB1762E951A.roa
File: AE9F54600A2411F081C24FB1762E951A.roa (raw, json)
Hash identifier: 7nQCxBxLKN0hEWKy5eXu5Gr4qOqmsotCx12FKRVLe08=
Subject key identifier: 01:87:DA:D1:98:67:40:74:83:B2:69:91:15:A3:5C:84:06:82:D8:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01766D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE9F54600A2411F081C24FB1762E951A.roa
Signing time: Wed 26 Mar 2025 09:28:31 +0000
ROA not before: Wed 26 Mar 2025 09:28:27 +0000
ROA not after: Sat 03 May 2025 09:28:27 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95853 (0x1766d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 09:28:27 2025 GMT
Not After : May 3 09:28:27 2025 GMT
Subject: CN=67e3c8bf-291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:9c:6c:6b:31:b8:c8:33:4b:fc:3e:4a:05:
63:5b:b7:51:73:98:b5:47:68:6f:6a:75:19:c9:49:
7c:78:b7:bb:5f:a5:cd:42:31:69:d2:74:65:73:6d:
b3:f7:2b:7a:a7:9a:86:11:c6:3b:4f:54:1a:8a:fb:
bd:dd:55:a3:a0:90:f4:cf:9e:c8:bb:f5:a4:60:62:
46:a8:df:3d:22:a1:67:fe:94:59:e1:ec:01:11:61:
95:01:17:05:46:b0:0d:2f:17:03:dd:90:da:47:af:
b5:e9:d8:38:1b:21:27:a1:b6:2f:bb:99:2f:2f:5a:
f4:51:3e:f1:54:f0:a4:a8:1b:e9:23:f1:65:1d:6c:
9b:14:57:a3:de:4d:42:2e:13:92:80:2c:14:b9:2a:
8e:a2:d2:75:d6:fa:d3:96:d7:fe:3b:67:45:f8:1b:
9a:54:55:9c:8f:29:87:76:6e:ac:84:b0:7f:a4:cb:
1f:13:4d:1f:34:a8:82:87:b7:2e:c3:ac:71:2c:00:
1c:a3:b3:f0:11:55:35:d9:70:6d:39:da:c5:27:6f:
c3:48:3d:00:9d:0d:be:01:a7:91:e6:13:b3:7e:e7:
a5:b6:48:15:cc:cc:2f:f8:2a:cc:be:e6:37:0b:de:
ab:55:9d:31:36:c0:2f:a7:ed:ba:30:2b:0e:d1:88:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:DA:D1:98:67:40:74:83:B2:69:91:15:A3:5C:84:06:82:D8:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE9F54600A2411F081C24FB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:32:d2:d1:22:46:a3:c0:37:a3:30:88:95:9d:20:aa:86:c9:
6b:6d:a3:19:f6:9a:c2:88:d6:4a:12:86:fb:d6:22:72:52:ea:
36:fd:b5:29:f6:72:cf:f8:25:53:94:6e:83:a4:cc:3d:24:da:
4e:10:8d:c2:81:c4:95:f2:5e:a4:df:a1:3c:a9:c8:3a:b0:35:
89:ab:35:12:8a:cf:34:91:11:75:e6:45:20:26:f8:ce:09:18:
6c:f3:54:81:f4:0d:30:3a:9d:0e:04:2a:ac:d8:90:be:67:01:
a5:87:1f:fc:1b:3c:d6:d3:b3:a4:46:08:09:cc:66:d2:ee:b6:
44:b2:99:2e:b6:17:c2:18:ca:62:ad:ca:4e:99:93:38:4a:ff:
c6:b2:fd:02:f7:fc:b8:11:08:11:08:db:75:82:22:ea:c2:e0:
ba:2a:57:fb:c3:d7:c8:89:7c:64:a1:7b:43:63:da:3d:52:3f:
47:35:2c:b3:db:0b:d3:86:de:d1:8b:f2:f9:41:74:f7:72:a6:
71:f0:4f:23:1d:69:4f:c2:4a:f1:b6:8c:95:c7:3f:c4:7b:79:
e2:da:8f:8f:ea:6c:be:3b:87:e1:6b:9f:90:21:fc:70:d1:08:
9e:ca:8a:16:8f:49:cc:86:56:ac:29:28:98:6d:c0:7a:81:3a:
06:d3:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:01 2025 by rpki-client