Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93ADA72DFEC11EF911180B0762E951A.roa
File: C93ADA72DFEC11EF911180B0762E951A.roa (raw, json)
Hash identifier: e+tsydsN7CijDhOB80dLy61uGzGc7cwoPJjKkMNq6H8=
Subject key identifier: 74:CC:E3:1A:E7:62:10:02:53:87:8A:95:8A:B3:94:CA:E0:E1:0E:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93ADA72DFEC11EF911180B0762E951A.roa
Signing time: Fri 31 Jan 2025 16:02:35 +0000
ROA not before: Fri 31 Jan 2025 16:02:32 +0000
ROA not after: Sat 03 Jan 2026 16:02:32 +0000
asID: 40065
IP address blocks: 154.198.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85507 (0x14e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 16:02:32 2025 GMT
Not After : Jan 3 16:02:32 2026 GMT
Subject: CN=679cf41b-f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:6f:38:b1:4a:95:58:c1:76:a1:2a:2e:79:
45:03:81:88:56:e4:00:4d:4e:65:45:c3:5a:f2:4b:
a0:48:fc:99:bf:b8:d8:a7:c4:7d:0b:c5:4d:e2:e9:
14:b5:f4:ba:55:e1:dc:0b:7b:98:af:2f:e6:83:b7:
48:df:63:03:74:b1:33:5f:eb:d4:db:10:7b:ae:05:
d6:32:f2:9d:3e:76:55:85:b6:d2:3a:5f:13:6d:2a:
88:4c:67:f4:47:72:4d:2a:dc:84:a9:e5:36:ac:2f:
79:9b:d3:a2:84:86:e9:35:e0:e7:c4:96:af:4c:92:
01:11:61:37:35:68:b3:f2:2a:fb:81:0a:50:9f:03:
46:8b:64:72:ce:e6:ab:f4:7c:55:69:70:c4:b7:ad:
3b:bc:3d:ac:1f:3f:3a:3f:ae:1f:96:ff:93:c9:3c:
d2:41:55:bb:7f:3d:ae:5f:71:84:06:33:f1:f1:62:
8f:c0:ee:d1:33:c8:93:41:15:17:af:2f:be:69:9e:
8d:1f:c2:ad:1b:96:68:1e:ff:c6:9c:2f:67:30:08:
86:47:30:2f:26:b2:2c:5b:e6:dc:23:fc:a7:ff:7d:
73:7f:ca:84:7f:52:29:ca:e7:1b:a6:af:c4:63:cd:
1c:5a:0e:7a:e8:2e:bf:4e:b3:de:35:5a:e0:a3:a7:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:E3:1A:E7:62:10:02:53:87:8A:95:8A:B3:94:CA:E0:E1:0E:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93ADA72DFEC11EF911180B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:61:73:d9:5a:dc:7f:f8:35:83:62:46:62:17:1a:57:6b:f7:
54:2d:2c:82:6e:44:67:31:92:e4:62:75:23:76:82:ab:03:99:
25:55:ad:76:ca:24:6b:53:c0:17:bc:a6:28:04:83:37:23:5c:
2f:48:9d:4e:2a:a0:09:73:bc:90:03:65:a7:85:b1:2c:b3:aa:
bf:82:4d:f5:2d:4e:6c:e4:8c:b4:fa:ae:85:60:fc:c9:0f:5c:
97:81:3b:15:1c:71:92:af:72:ec:af:bd:14:e8:3b:de:45:e0:
1e:27:cb:2f:ea:57:23:01:93:e4:f1:82:85:ec:66:26:58:19:
72:8b:6b:67:77:97:a4:95:ab:c7:93:9a:26:12:5f:1f:3f:b8:
eb:71:3a:72:e5:ce:ba:cc:6c:2e:39:6e:43:a2:3b:e8:33:f3:
52:77:09:12:8e:8b:4a:17:0a:aa:a7:71:94:ff:3a:f3:35:40:
a8:d6:c1:4a:77:86:52:0e:2c:34:cb:7e:bf:57:e1:c4:92:eb:
16:b7:7d:46:aa:c5:ca:79:ed:05:40:e2:05:10:33:05:de:52:
e1:fa:10:78:98:ba:52:e4:9a:09:20:80:0a:f5:e4:1b:a4:b9:
1c:e7:0e:e9:ac:e3:41:6c:a2:25:3f:16:5d:aa:06:66:22:f4:
61:83:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:39 2025 by rpki-client