Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CA40D0F61D11EFA197C59B762E951A.roa
File: C4CA40D0F61D11EFA197C59B762E951A.roa (raw, json)
Hash identifier: JHT9TA5x4X/Kfr5GpULBJhZKnHEFT8AROTHHw0wivng=
Subject key identifier: 25:F0:F1:79:C1:6F:8B:86:A3:01:A0:9F:31:C9:A6:0C:44:F0:50:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CA40D0F61D11EFA197C59B762E951A.roa
Signing time: Fri 28 Feb 2025 21:48:39 +0000
ROA not before: Fri 28 Feb 2025 21:48:35 +0000
ROA not after: Sat 19 Apr 2025 21:48:35 +0000
asID: 138915
IP address blocks: 154.90.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93275 (0x16c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:48:35 2025 GMT
Not After : Apr 19 21:48:35 2025 GMT
Subject: CN=67c22f37-5554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:08:ac:8e:f2:5a:ac:29:74:8b:dd:90:11:
b2:7f:2a:4d:1e:c4:10:c9:3c:75:a5:1b:5f:87:7a:
ac:87:11:57:a1:d3:d3:57:6b:74:c9:23:b0:d6:f5:
61:35:36:96:f7:a4:10:54:1d:a1:e6:f2:72:cf:b4:
41:4e:81:8b:ec:89:f8:ce:c8:01:32:94:10:62:6e:
6c:77:ed:c3:a8:62:48:16:b2:7a:ac:6e:ac:2d:6c:
8e:f3:51:6c:6f:c4:6c:1d:5b:6c:c8:f9:38:17:ea:
6f:a5:ae:eb:7a:f8:8b:2b:1b:af:44:ed:7f:1b:2b:
45:f4:6f:f1:6d:da:6c:3d:38:08:a4:c2:a4:3c:14:
26:8c:ce:6d:35:ec:67:9f:cd:4d:f9:38:ed:bc:6c:
eb:86:f7:14:f3:d9:f9:7a:99:0d:52:97:7b:75:28:
62:05:68:64:1a:f1:e2:dc:01:1d:b9:87:b2:f1:6d:
3d:55:ad:06:81:02:2e:fb:9e:e7:eb:75:ce:92:41:
dc:2d:be:bf:43:3c:54:8b:5d:aa:fd:6c:ba:ba:ed:
52:f9:53:37:22:e0:e6:c8:1e:10:e9:e8:56:f9:d1:
38:0c:7d:f7:71:e6:a9:8d:35:11:df:0d:65:53:d5:
b8:cb:53:d8:6f:6d:2d:3a:a8:54:f4:14:f9:4e:da:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:F1:79:C1:6F:8B:86:A3:01:A0:9F:31:C9:A6:0C:44:F0:50:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4CA40D0F61D11EFA197C59B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.36.0/23
Signature Algorithm: sha256WithRSAEncryption
99:b4:bc:d5:d9:55:84:e6:f8:a0:f1:97:02:e2:b2:e6:93:4a:
46:99:a3:6d:cc:66:b2:90:71:46:b6:20:a6:c4:a1:95:63:84:
ed:5c:2a:22:a2:ae:f2:2a:ee:b9:ba:fd:a8:ac:09:2a:4f:e3:
d0:60:f5:70:c4:d8:43:79:80:51:97:e2:66:94:7b:cf:60:d7:
27:ea:6a:f4:ff:d5:31:36:8f:13:c3:09:7a:9a:48:fa:fe:d7:
20:bf:ba:5b:38:db:dc:c3:c2:35:af:0e:41:39:d1:d0:5e:81:
e3:5b:85:db:bb:02:b3:be:5c:d0:5a:ef:0d:07:00:f9:c5:f0:
a0:44:80:5e:ac:28:b1:3e:ae:bd:97:d6:8d:eb:b8:49:1c:72:
e6:28:25:79:f2:f3:bc:ba:ef:80:61:6b:68:4c:56:9d:02:a4:
a3:e4:3b:6a:a7:40:66:a1:9a:24:3d:f5:f7:5b:6f:89:3b:f5:
a3:6a:39:fd:a3:13:93:27:2d:06:67:28:49:be:79:08:4a:b1:
fd:aa:25:c2:2c:ef:04:a9:29:7b:45:13:bb:8c:b8:73:5f:ba:
58:f2:7c:d5:ce:e0:46:59:f6:d2:c4:53:98:71:f9:49:94:51:
7e:dd:e5:d8:d8:96:49:31:91:01:3f:c7:0e:e5:3c:e4:67:29:
5f:b3:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:56 2025 by rpki-client