Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1662AF81311EF9BDCAD7B762E951A.roa
File: C5B1662AF81311EF9BDCAD7B762E951A.roa (raw, json)
Hash identifier: tbxMU17Oq0ht04V+cNCfjVgavilJ6ja7oPf6Mv0NlGc=
Subject key identifier: 84:DB:F3:86:7B:DE:C5:44:C7:FC:09:1A:45:88:A0:87:0A:47:24:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1662AF81311EF9BDCAD7B762E951A.roa
Signing time: Mon 03 Mar 2025 09:42:08 +0000
ROA not before: Mon 03 Mar 2025 09:42:04 +0000
ROA not after: Wed 30 Apr 2025 09:42:04 +0000
asID: 63139
IP address blocks: 154.94.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94154 (0x16fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:42:04 2025 GMT
Not After : Apr 30 09:42:04 2025 GMT
Subject: CN=67c57970-6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:36:df:cc:ed:c6:84:91:ee:70:20:96:81:
8f:2f:b6:7e:5d:b5:a6:ea:02:03:18:8e:b4:d3:27:
2f:05:65:df:a3:43:e8:e6:82:ee:4b:7a:c3:d1:19:
f3:6c:87:b0:9e:13:3c:4f:39:46:86:f1:42:a1:ed:
1a:61:f4:9c:d3:dd:52:ae:2a:33:fa:bf:6d:e2:cc:
9c:47:21:d1:9f:90:26:d7:85:e8:dd:45:44:0d:b2:
d0:af:22:35:ff:c6:03:69:32:c2:54:ae:e6:6b:2d:
9a:bc:8a:d4:24:15:e7:5c:3a:c3:09:35:8f:fd:24:
5b:36:9b:e9:92:ce:a9:58:e3:21:73:de:41:02:88:
31:d8:ae:8c:d3:ea:4e:c8:c3:71:20:90:c3:9e:10:
e8:ec:35:63:c2:7d:f8:96:42:d1:95:66:99:9d:da:
33:ef:6b:e1:e9:9d:bf:86:02:a0:13:a5:4f:05:1a:
9a:64:ca:d3:03:05:38:24:d0:dd:e0:b2:ae:43:31:
34:aa:9f:5b:41:91:80:ef:86:b8:3d:5f:04:51:9c:
53:b4:20:27:d4:4f:64:f5:2b:93:87:b3:93:21:0d:
80:cd:a6:78:3a:b5:d6:4a:25:33:1c:a3:03:60:fb:
9d:57:51:09:04:50:f9:54:ee:19:7d:2f:88:c5:7a:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:F3:86:7B:DE:C5:44:C7:FC:09:1A:45:88:A0:87:0A:47:24:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1662AF81311EF9BDCAD7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.112.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:f8:db:60:7f:d0:f5:db:e5:68:7f:e1:29:e0:88:73:84:
09:21:d8:55:39:35:dd:ad:38:b0:4a:5f:c9:bc:42:7b:5f:b1:
17:1b:f6:80:34:93:83:ed:cb:f7:ed:90:d5:34:79:ac:4d:09:
21:bf:72:b1:47:e9:9b:4c:50:c4:3a:53:12:f0:0b:9c:1e:8d:
d6:57:df:c6:b7:f1:d0:35:16:ba:43:37:dd:54:97:a7:ac:a1:
18:ee:1b:cd:29:b9:bf:20:b0:b3:77:fa:b8:27:92:35:78:c8:
1a:37:e7:b3:df:65:e2:43:5d:29:bd:a9:93:8d:23:e2:b2:d9:
d3:05:f8:33:5a:4a:52:a1:7f:3c:94:d9:56:a3:7e:50:fa:39:
f4:61:65:3b:80:7c:30:a9:a8:5e:04:3a:c7:dd:c6:5d:3a:64:
35:28:3b:50:ec:52:9f:63:d7:1a:51:27:98:ac:3c:81:1a:89:
1d:ed:51:dc:12:4a:8a:27:46:e3:34:82:69:16:35:67:9a:67:
1f:2b:c0:79:96:19:fc:d8:be:53:b6:5f:bf:56:91:6f:80:de:
ee:1a:5a:04:c0:48:cb:d7:9e:2b:54:eb:b0:2e:92:2e:2a:9e:
a3:18:0c:09:69:2e:75:63:24:dc:a8:7b:d4:76:ae:fa:af:35:
2d:60:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:47 2025 by rpki-client