Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4589F3CF46711EFA89FAD5C762E951A.roa
File: C4589F3CF46711EFA89FAD5C762E951A.roa (raw, json)
Hash identifier: AfMZJLY1WUccxL4VViPtIqRmGQhu9PYn0EuHwdLeTz0=
Subject key identifier: E0:9B:6F:EA:23:92:6C:AB:3E:91:1F:9A:4C:F2:D2:C0:3C:8F:04:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01654E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4589F3CF46711EFA89FAD5C762E951A.roa
Signing time: Wed 26 Feb 2025 17:33:19 +0000
ROA not before: Wed 26 Feb 2025 17:33:15 +0000
ROA not after: Sat 19 Feb 2028 17:33:15 +0000
asID: 17561
IP address blocks: 154.197.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91470 (0x1654e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:33:15 2025 GMT
Not After : Feb 19 17:33:15 2028 GMT
Subject: CN=67bf505e-fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:5b:27:cb:5f:d8:89:4c:88:c2:a1:c0:46:
93:47:0a:73:88:46:7f:e0:f4:ff:3a:21:9e:c5:b4:
79:41:07:76:f7:82:eb:db:e6:77:3e:05:5b:fb:0e:
b3:31:a6:f1:36:23:68:83:7c:98:18:b8:5d:d4:97:
52:ec:b5:2b:f8:80:1f:59:d4:74:d3:36:51:22:37:
c1:14:67:17:4f:50:da:3a:6c:d4:b6:5a:90:7b:ec:
47:e0:ef:7f:6e:07:fa:4f:0d:eb:95:e2:fa:6a:07:
49:c7:a7:c8:1a:7b:60:52:62:99:14:40:04:78:ee:
93:92:30:02:68:29:90:26:96:ff:3c:11:7d:d3:2e:
60:63:bf:f1:68:2d:4d:e2:4a:ba:15:bc:ff:da:84:
3a:76:ee:40:c6:5b:0b:ce:64:0b:41:87:ba:b5:6a:
8c:d2:94:4f:40:08:dc:99:24:dc:5e:bd:f9:f9:cd:
e5:8c:3e:de:1a:b0:98:77:25:ac:58:2b:29:d0:43:
45:14:2d:33:8e:ed:9b:47:a3:2e:9e:17:72:cc:19:
52:b7:52:d6:3f:0d:3c:ca:15:85:cf:a8:61:b1:c9:
69:a1:74:75:6f:ef:cd:70:98:78:b5:2b:26:d4:7b:
6f:b9:be:7e:62:52:82:32:1f:9f:1c:2e:4a:2a:e8:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:6F:EA:23:92:6C:AB:3E:91:1F:9A:4C:F2:D2:C0:3C:8F:04:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4589F3CF46711EFA89FAD5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.117.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d6:3d:6a:5e:50:2a:fd:a9:b9:47:b9:9d:98:88:0f:de:41:
f8:ce:da:9d:c1:e3:07:7f:ea:13:ea:e2:a5:04:07:96:a8:84:
05:db:df:e9:b3:5f:81:ac:8f:df:a1:c2:14:18:9d:46:45:40:
7a:a3:4b:cc:cf:66:25:37:6c:d3:d9:b6:27:d4:d2:83:5a:a9:
f0:e1:94:6c:35:39:da:f2:ce:5b:9d:33:13:a8:1f:cc:b2:f6:
27:30:b3:e6:98:8c:ec:da:96:55:2a:89:45:93:12:eb:aa:8f:
7e:9a:fd:43:e7:f2:36:70:c0:55:b9:c3:05:64:77:1b:3c:38:
be:f9:fa:1c:98:a7:5f:2e:33:ad:c6:0b:09:16:34:4b:f2:2c:
69:12:77:51:6f:7d:58:cd:a7:ff:5e:08:08:e4:d6:40:52:79:
9a:ae:db:89:57:c1:29:53:b4:f2:18:12:0d:12:2e:1d:17:1d:
25:56:95:92:13:1a:f9:0f:ef:b1:11:33:9e:67:b3:12:e0:0f:
d8:2c:7c:d4:df:70:10:b5:4e:4f:36:f6:20:fa:d0:7e:17:59:
c5:3e:31:5d:d3:d5:57:62:8e:b7:09:4e:4a:0a:1b:c4:57:cf:
e8:ca:e2:2e:7a:24:96:cb:1d:b1:b2:30:30:c0:99:83:b0:56:
46:51:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:51 2025 by rpki-client