Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CA7026F81A11EF9DDC44AA762E951A.roa
File: C7CA7026F81A11EF9DDC44AA762E951A.roa (raw, json)
Hash identifier: LYQ98g12qZjwC5zcMcRPHipsLVLZJ0mv0tVGG3sEBz0=
Subject key identifier: 84:C2:6C:1E:6D:38:5C:B9:45:E5:35:11:F2:E9:B5:6F:F7:1E:BC:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01701F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CA7026F81A11EF9DDC44AA762E951A.roa
Signing time: Mon 03 Mar 2025 10:32:18 +0000
ROA not before: Mon 03 Mar 2025 10:32:14 +0000
ROA not after: Wed 30 Apr 2025 10:32:14 +0000
asID: 138915
IP address blocks: 154.93.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94239 (0x1701f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:32:14 2025 GMT
Not After : Apr 30 10:32:14 2025 GMT
Subject: CN=67c58532-889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:a8:43:82:0e:3b:f4:fd:3d:9e:c5:44:8a:
7e:d8:0d:0e:8a:3b:7b:5b:39:c7:8c:a8:ff:62:63:
d1:d6:d4:76:77:b2:6b:7b:97:04:fb:ac:c8:fe:7c:
f4:8c:3b:d3:21:0a:6e:71:95:bc:07:b6:c2:61:fa:
db:8d:38:69:26:81:03:cd:e2:c1:05:28:39:6a:d5:
cb:60:a7:7b:e6:3f:19:b7:48:72:28:8f:ab:49:40:
f7:ec:cb:8d:11:4e:f2:90:1a:f2:d0:a7:c7:ea:22:
92:60:92:02:a3:51:33:1d:1c:f0:b4:49:21:6b:cd:
13:09:9c:80:73:07:d7:77:c2:a7:ea:5f:f0:f5:0d:
e3:16:59:56:3b:2b:86:6f:05:39:6d:f2:a1:9d:35:
7f:00:04:2d:fa:d2:90:70:a1:14:a2:94:9e:f6:e6:
31:40:9a:f4:df:20:81:45:4d:40:86:00:f8:c1:1c:
63:c3:4e:69:ef:d3:67:38:36:be:8d:15:85:e9:70:
53:90:48:43:ef:f6:ac:9f:46:d3:6b:03:1e:97:c6:
6b:19:a5:d8:d3:ea:ca:c3:0e:d3:95:86:ca:ca:02:
18:80:84:19:13:38:1f:d6:db:ed:56:3e:39:04:5a:
dd:13:9b:2d:0f:d5:40:28:b7:eb:04:5f:d2:74:db:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:6C:1E:6D:38:5C:B9:45:E5:35:11:F2:E9:B5:6F:F7:1E:BC:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CA7026F81A11EF9DDC44AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bd:fa:71:d1:fd:de:8b:ce:a0:10:41:f7:80:ce:83:20:5b:
43:4f:6d:98:bb:eb:ce:bf:8e:7e:eb:a9:78:68:2b:b7:5a:eb:
dd:72:56:84:ca:e2:e5:bc:0b:e7:94:ed:fb:70:ce:28:52:64:
b2:92:2d:b0:c2:44:78:cd:79:42:28:60:f0:af:b4:7c:10:cf:
59:6b:c1:37:65:d0:d9:c2:cc:26:30:07:f5:48:51:66:ea:f0:
52:29:36:c5:63:0e:ef:9f:f2:de:5b:fb:8f:95:cb:08:f4:b0:
b2:64:36:49:90:9e:86:f8:b0:01:7c:e5:22:61:33:80:3f:32:
0f:e6:22:2f:aa:62:d5:3b:92:99:41:82:70:16:c8:55:38:c8:
8a:41:f0:5a:cc:f4:36:23:b7:04:fc:2d:c2:53:8d:0f:5b:dd:
a4:fc:f7:e2:44:d7:fa:f8:4d:e8:e4:03:fc:6b:0c:2e:b5:e0:
53:48:98:f8:12:de:5f:92:60:d4:a8:72:4a:d3:7b:80:d4:df:
de:46:10:a4:22:15:37:18:63:91:33:8e:0a:ce:d3:b6:60:bf:
c3:07:3e:b3:d6:c7:9d:a7:24:69:48:b0:fc:55:b9:c5:30:b2:
fa:b6:b6:6e:fc:a7:bc:dd:f2:3d:82:0c:49:db:ef:c3:d0:16:
77:3a:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:12 2025 by rpki-client