Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31AB4DAEEA311EF96907341762E951A.roa
File: C31AB4DAEEA311EF96907341762E951A.roa (raw, json)
Hash identifier: h/2/+ONjrtHPHbva9PUTte2jYKOeSVAfM7WEGG/VaEQ=
Subject key identifier: 03:73:61:50:B4:AC:C9:26:9F:0C:3A:41:D6:AE:8C:85:3E:C0:0C:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015844
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31AB4DAEEA311EF96907341762E951A.roa
Signing time: Wed 19 Feb 2025 09:27:39 +0000
ROA not before: Wed 19 Feb 2025 09:27:35 +0000
ROA not after: Tue 11 Nov 2025 09:27:35 +0000
asID: 13335
IP address blocks: 154.194.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88132 (0x15844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 19 09:27:35 2025 GMT
Not After : Nov 11 09:27:35 2025 GMT
Subject: CN=67b5a40b-5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:34:4d:55:c0:01:ca:c7:b1:ad:3e:9c:d1:
80:da:29:95:c3:ea:2b:f1:4d:52:b7:29:b6:aa:1f:
db:c6:16:00:17:e6:32:9f:6b:fa:2d:fa:fa:9e:4d:
73:59:21:18:4e:cc:42:ab:b2:91:63:10:55:95:7d:
32:46:c7:e2:2e:55:4a:f2:07:0e:fa:db:ef:35:24:
87:22:76:6e:fa:64:be:ec:48:7d:59:38:1e:b4:06:
9d:6c:8d:65:00:aa:4f:76:02:ea:57:ff:27:69:29:
fb:79:ad:16:14:7f:a7:0b:f5:9f:8c:25:8a:3e:54:
af:54:6e:a4:fa:36:47:36:14:9e:13:10:2b:a1:05:
1e:76:cb:41:e7:71:6c:88:b3:79:4b:5c:25:70:ef:
fb:ea:2f:8d:f3:83:52:58:60:42:c8:3d:54:34:bd:
82:68:8f:f5:03:b0:8f:83:a3:a7:79:5f:8a:50:0a:
25:83:dd:5f:a5:e6:99:7a:7f:2d:cd:c1:b1:b3:7d:
88:78:7a:f9:e8:2b:4f:37:6d:85:8a:c0:ea:e3:f6:
e6:29:14:71:ba:83:91:d7:04:c9:74:18:4c:3b:37:
7a:11:12:df:b0:e1:58:3f:12:c8:ea:04:75:1f:71:
c3:82:81:b9:f3:2d:8d:bb:d5:51:43:b8:a2:5e:26:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:61:50:B4:AC:C9:26:9F:0C:3A:41:D6:AE:8C:85:3E:C0:0C:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31AB4DAEEA311EF96907341762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f4:0b:c3:8e:97:1a:38:58:4a:03:e1:68:c9:e2:e0:87:47:
57:7c:21:7c:af:d5:49:d0:06:03:aa:97:b5:92:2d:d0:4a:79:
a8:65:48:11:1f:fe:55:09:7f:6e:50:c0:54:74:fc:f4:62:77:
27:a5:26:5a:70:32:44:74:1a:8d:22:28:98:cd:1b:f5:be:df:
19:b7:bf:10:ac:b3:06:08:a6:c0:bc:3f:0d:ec:e0:bb:a9:c5:
02:fd:fd:78:b1:2a:73:e4:5c:3c:5b:f6:5c:35:d6:42:86:4e:
6d:8b:08:34:74:68:89:b2:41:c7:31:ba:39:a0:32:c7:88:a4:
44:0d:0e:90:4a:e6:4b:c0:ee:07:b0:13:b8:37:ca:b7:f4:f1:
82:45:84:a4:dd:7a:a6:52:fc:1f:1c:fe:02:71:0d:50:f1:c3:
f5:18:13:bd:fd:33:98:0e:3b:7f:f8:04:9b:f5:a3:84:f3:0d:
02:45:27:bc:59:ec:33:6a:85:39:b9:09:12:c4:b7:8a:b1:a3:
d3:2e:a1:0c:a6:45:0d:f7:d0:c2:71:23:06:de:58:ff:a2:c1:
74:6c:cc:9f:73:d1:3f:c6:5e:32:82:73:67:20:9d:48:6a:b0:
83:31:59:20:ce:09:e5:ca:0c:ce:3c:c7:dc:b8:06:62:f3:7d:
5e:a6:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:37 2025 by rpki-client