Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E3295AC51D11EF81F5D58B762E951A.roa
File: B0E3295AC51D11EF81F5D58B762E951A.roa (raw, json)
Hash identifier: OTt6c63/PCTm+yIU6t7f5fMcbE5v6hNcVHL2CIsRYck=
Subject key identifier: 88:57:C5:B0:94:E6:87:46:AD:E9:7B:77:FC:E2:D7:CC:65:B5:A6:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E3295AC51D11EF81F5D58B762E951A.roa
Signing time: Sat 28 Dec 2024 13:14:38 +0000
ROA not before: Sat 28 Dec 2024 13:14:35 +0000
ROA not after: Sun 12 Dec 2027 13:14:35 +0000
asID: 17561
IP address blocks: 154.203.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76601 (0x12b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:14:35 2024 GMT
Not After : Dec 12 13:14:35 2027 GMT
Subject: CN=676ff9be-9b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:c8:37:ff:a3:c9:fc:b9:62:ae:eb:f1:3f:
58:a9:62:c0:e0:f8:51:92:3c:5c:e3:1d:c8:52:ef:
01:2e:92:75:62:68:77:0e:c2:9c:e9:c0:e2:a8:0a:
55:b5:5d:a2:65:f6:ec:f7:80:9f:e1:9b:96:0d:79:
56:11:36:0a:ac:b5:c3:bb:1c:1f:56:df:98:ac:30:
4a:9a:f4:87:19:50:53:c1:8c:63:4b:db:a3:68:09:
91:cc:f0:74:57:37:2d:29:73:1b:ef:04:db:34:de:
cc:c8:7e:88:62:3e:00:9d:a9:e8:2d:20:12:c4:53:
b0:89:7e:04:6c:a0:4c:f3:af:2b:d3:6c:6d:7e:40:
5b:39:c7:37:48:62:98:cc:ce:75:5f:f9:b4:ef:a0:
d6:e6:48:a5:3b:a3:4d:d6:7e:96:06:e9:20:80:61:
c7:fa:5a:43:cd:ea:bf:91:5a:ef:b1:c4:e1:9a:78:
71:ee:2f:15:af:fd:3d:18:21:7e:f8:64:13:88:ed:
45:57:f6:92:46:7f:c7:33:9d:d8:56:db:e5:b0:15:
31:a4:bd:55:b2:78:ce:5b:40:73:f7:a0:79:1d:ff:
58:0d:60:93:ee:9d:09:4c:4d:3b:50:a7:fa:2b:22:
58:11:2a:00:46:19:76:6a:f0:55:5b:a7:28:10:9f:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:C5:B0:94:E6:87:46:AD:E9:7B:77:FC:E2:D7:CC:65:B5:A6:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E3295AC51D11EF81F5D58B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b4:48:cf:1c:47:15:81:30:64:20:a7:41:c1:4d:c2:60:1c:
31:63:f3:d8:99:d6:d0:69:c0:a9:d7:71:ba:be:28:6d:95:98:
69:8f:99:8d:d3:f0:84:71:a8:a1:6a:b7:fb:ae:ef:01:c9:85:
96:8f:67:ab:c4:d5:53:05:d5:0e:a4:fa:1e:2f:d1:64:52:85:
39:16:33:36:1a:62:e6:e0:16:ec:10:d9:11:91:60:6d:78:da:
1f:db:f4:20:e4:30:96:f1:e5:5f:bf:64:c4:fb:b3:e4:f3:40:
44:69:92:de:26:cc:09:bf:b3:cf:f2:61:c3:0b:7f:21:f1:b8:
08:e3:25:ad:4a:f6:13:b7:eb:bd:cf:a8:b4:d7:51:8e:39:85:
9a:79:92:1d:ee:f7:b3:8d:5b:26:e0:03:00:ac:49:3c:c1:e7:
13:4f:24:e9:f5:ab:e2:5b:16:bb:80:4c:09:29:50:34:c3:23:
92:0a:5b:1a:54:42:f9:9b:76:f1:5e:6b:ea:bf:44:7a:bf:29:
74:fc:0c:30:fd:91:0b:6e:6b:b9:8b:77:08:ed:40:3c:0c:05:
05:62:43:ae:02:ce:2f:53:69:bc:cf:55:d0:1c:fe:76:88:18:
13:6e:01:33:e8:59:6f:dd:34:c7:6c:8b:25:fd:81:3d:9a:6d:
47:2a:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:39 2025 by rpki-client