Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B923634AF99911EF930C9B53762E951A.roa
File: B923634AF99911EF930C9B53762E951A.roa (raw, json)
Hash identifier: DP0efrq8kg/9IZ8cq290otbQMpa2zeeSVS2mSvvBtz8=
Subject key identifier: 07:E5:1E:BB:2F:EE:E8:56:60:0C:0E:FE:1F:27:26:C5:CA:40:4C:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01724F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B923634AF99911EF930C9B53762E951A.roa
Signing time: Wed 05 Mar 2025 08:13:30 +0000
ROA not before: Wed 05 Mar 2025 08:13:26 +0000
ROA not after: Fri 11 Apr 2025 08:13:26 +0000
asID: 57043
IP address blocks: 154.199.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94799 (0x1724f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 5 08:13:26 2025 GMT
Not After : Apr 11 08:13:26 2025 GMT
Subject: CN=67c807aa-296a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:0c:78:05:67:79:ca:9b:17:23:cb:e7:97:
01:e9:c5:c0:5f:48:86:da:ea:81:a4:30:c1:b7:07:
75:45:df:7d:d8:54:3e:4e:7f:52:36:f1:a2:1e:e5:
0d:59:89:2e:66:84:89:f4:a4:e4:64:55:b6:b6:0b:
28:bb:08:b7:6f:0f:fc:88:87:f3:4c:bb:00:d2:ee:
ce:de:59:f9:9c:04:aa:aa:3d:1c:70:e4:70:a1:aa:
34:00:37:7a:54:24:81:b5:1c:05:1a:32:da:41:e6:
70:70:4e:42:ac:9a:70:37:10:07:26:ad:e1:b0:55:
8e:68:98:03:d4:4a:b0:7a:e2:cc:37:c9:13:12:d8:
17:01:86:1f:c2:d1:7a:44:2f:b8:af:e6:98:c6:fd:
6d:84:cb:0b:77:18:07:b6:4d:60:27:cc:6e:73:c7:
e1:2b:a0:63:90:a8:dd:02:f8:5f:fa:e8:44:94:95:
01:1b:af:a2:9f:b1:ec:df:9a:e0:0f:5b:0e:0d:cf:
6d:ed:1f:a4:26:e2:e0:19:23:69:a9:9f:11:96:99:
e2:51:5c:9d:77:a3:d7:21:f9:cb:54:81:09:81:7e:
66:f8:f2:0c:97:1f:d8:fb:ff:3f:6c:63:3a:93:c0:
0d:5b:40:4e:f8:78:9d:0e:c5:60:62:22:f1:e0:c2:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:1E:BB:2F:EE:E8:56:60:0C:0E:FE:1F:27:26:C5:CA:40:4C:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B923634AF99911EF930C9B53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.70.0/23
Signature Algorithm: sha256WithRSAEncryption
96:d0:75:89:85:fe:09:64:0e:da:0d:29:a1:0a:21:34:7b:90:
e9:8b:e6:51:74:c5:d3:7a:67:6a:7d:05:96:77:81:62:28:a8:
aa:50:df:43:cb:58:fb:23:66:40:7b:03:b7:d3:08:87:1c:32:
23:b8:65:01:6a:a4:ea:e6:5b:38:de:e1:a9:56:f1:73:fa:6c:
7b:cc:39:c2:a4:07:33:61:bb:10:dc:c5:cc:f0:9a:f5:04:8b:
61:37:56:98:1e:06:2f:2f:e8:42:79:e2:29:5d:b1:bc:fa:f4:
c0:7c:10:89:08:8c:7a:6c:c9:d3:fd:39:25:68:56:cb:2e:68:
23:e7:24:f0:78:f3:8a:e2:a4:86:5a:b0:b1:4d:c3:87:f1:ba:
50:ec:24:d2:ee:84:bd:43:26:5f:90:eb:94:ee:fc:c4:aa:d4:
a9:2c:1b:f5:97:ac:8e:aa:77:f6:42:3d:11:a6:b3:de:13:4c:
64:69:63:23:09:53:82:2f:d3:99:04:61:37:98:be:86:56:92:
fe:22:60:b8:01:ab:b2:01:81:31:a5:8f:47:5b:81:f1:c7:48:
5e:7b:bb:4c:0d:5e:b9:33:64:3a:2a:65:ea:a8:b3:91:c8:c4:
5d:7f:69:66:e4:36:88:79:ea:79:53:08:d8:5f:26:35:a0:ac:
f2:b7:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:06 2025 by rpki-client