Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC6A4D0F53E11EFB59A09A6762E951A.roa
File: CBC6A4D0F53E11EFB59A09A6762E951A.roa (raw, json)
Hash identifier: pkBEzNmzUy4DuuBJU2SSiKUD5QlSDxsp8Mq/m9WVXuc=
Subject key identifier: 44:8D:EA:17:5A:1E:AF:D5:01:7E:47:22:99:A5:DC:99:49:44:D2:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01698E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC6A4D0F53E11EFB59A09A6762E951A.roa
Signing time: Thu 27 Feb 2025 19:12:33 +0000
ROA not before: Thu 27 Feb 2025 19:12:29 +0000
ROA not after: Fri 11 Apr 2025 19:12:29 +0000
asID: 63139
IP address blocks: 154.203.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92558 (0x1698e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:12:29 2025 GMT
Not After : Apr 11 19:12:29 2025 GMT
Subject: CN=67c0b921-2dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:96:96:ad:51:31:21:1d:aa:a1:5e:0e:a3:
f5:09:93:06:86:14:aa:1f:26:8f:02:b1:99:87:36:
d3:b9:18:f9:4f:4b:82:29:48:bb:b6:0c:f9:8f:5f:
91:da:86:b9:5a:4b:35:c3:c9:19:21:3f:c4:c5:39:
c5:46:76:22:3f:f8:09:0d:07:a8:61:4e:c7:3e:c5:
87:25:c9:3d:d5:a2:3e:27:4f:35:6d:ef:ba:ab:3e:
75:b0:59:30:99:90:42:d2:8a:44:e9:1b:ba:6b:f3:
78:2e:1a:3b:03:c4:02:99:87:aa:79:56:b3:f3:eb:
21:66:62:8c:6d:5a:5f:8c:44:9e:89:29:df:77:da:
5a:96:12:95:b3:18:db:21:cd:50:6d:0f:d1:82:e1:
48:19:b0:92:34:e0:e8:24:75:40:89:98:e3:23:2f:
05:1f:e9:94:c6:fb:75:01:18:87:01:b2:e0:b4:6f:
76:94:48:96:c5:d1:65:a6:a9:67:f3:cf:8e:b2:cc:
92:86:83:8e:44:02:ad:25:9c:c2:7b:f8:b7:7a:5d:
e4:bc:0f:0d:56:bc:8a:45:96:e0:d3:e2:7f:64:03:
29:2b:8c:e8:a3:23:ed:43:dc:97:2c:db:50:44:3e:
9f:fc:ed:9e:f1:a6:ac:ed:cb:92:17:91:a4:6e:82:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:EA:17:5A:1E:AF:D5:01:7E:47:22:99:A5:DC:99:49:44:D2:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBC6A4D0F53E11EFB59A09A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.188.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0d:a0:dd:b7:67:23:34:ac:5d:ef:ee:f9:50:66:21:c2:03:
58:39:44:ee:71:53:01:da:90:85:4d:43:e6:f8:2c:d5:1d:df:
c4:ad:e1:67:b5:bd:bf:15:9c:cb:26:d9:d7:a2:5b:8c:0e:7f:
9a:5f:82:f8:17:7d:25:a4:20:f4:7e:cb:c1:90:70:a3:b2:77:
4f:55:ee:6b:3d:e8:13:4e:a1:4e:d9:8f:8c:df:88:86:9d:bb:
5a:d0:09:9d:96:3f:0b:73:ee:06:b8:11:31:46:5c:11:73:4f:
48:dd:fe:cc:a1:17:7b:26:3d:77:8d:43:3b:b5:33:2c:6b:c4:
68:76:c9:83:a1:d4:69:58:25:07:f8:d0:2f:6e:3b:63:c6:5d:
43:a3:16:c8:74:28:18:1d:86:1c:dc:1e:7d:23:dd:dd:5c:2d:
a2:f0:77:f2:09:a6:cf:5f:0f:7e:2d:1c:90:81:3b:34:3d:1b:
7f:33:20:f4:ae:de:1a:fe:63:f8:50:cb:35:8d:e2:12:27:9c:
2a:18:0c:54:62:54:0a:5f:f5:71:01:92:88:07:09:2f:be:a8:
9d:ae:95:df:27:a7:f4:28:7b:df:86:66:04:c7:df:f8:c4:fd:
a2:8f:3f:61:b4:c0:54:f2:7a:8c:59:32:f8:f1:f0:a4:e6:d1:
48:fc:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:19 2025 by rpki-client