Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF11ADF8C8A011EF98FD5054762E951A.roa
File: CF11ADF8C8A011EF98FD5054762E951A.roa (raw, json)
Hash identifier: VEf5Ovayv0UEhTk7BPSbhuWx2HFkXRVB8EWycSkwy9U=
Subject key identifier: 9B:13:14:6F:8A:EB:06:54:61:7B:58:65:CD:B6:F7:43:08:3F:85:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01311C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF11ADF8C8A011EF98FD5054762E951A.roa
Signing time: Thu 02 Jan 2025 00:30:47 +0000
ROA not before: Thu 02 Jan 2025 00:00:43 +0000
ROA not after: Fri 12 Dec 2025 00:00:43 +0000
asID: 984
IP address blocks: 154.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78108 (0x1311c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:43 2025 GMT
Not After : Dec 12 00:00:43 2025 GMT
Subject: CN=6775de37-61a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:d0:b2:b6:d4:23:f9:e5:aa:18:80:62:13:
6d:95:92:86:b3:e0:42:b5:ab:13:67:58:02:5a:3b:
49:62:52:2b:00:64:f7:6d:29:7e:05:17:5e:db:6b:
19:91:20:3c:e0:cb:83:55:2f:a2:d8:ba:da:82:73:
e0:fe:ac:9c:be:44:ea:90:60:b1:b5:dc:a3:bb:f5:
a5:1c:85:71:ad:e5:a5:20:9a:83:b6:f8:4b:28:96:
40:2a:4b:d1:0d:1c:ef:4e:9f:96:6f:42:d0:0e:80:
d5:21:90:7c:21:42:57:7f:ad:35:1b:67:49:b9:13:
8d:c9:8b:2c:3e:66:e7:85:86:f3:02:40:e6:b8:6b:
2d:8c:9e:bf:07:49:be:20:5a:b7:a0:e0:f8:c4:ee:
76:ef:a5:03:d5:56:1e:e8:e9:7f:14:3e:d3:ae:44:
c2:10:66:bb:f7:24:8c:e1:a2:9a:b2:e5:b4:32:13:
03:f1:68:0f:4f:9a:99:55:a7:ee:14:d6:80:3a:a4:
9a:6a:ed:a5:24:4e:81:70:55:a2:53:e3:81:f0:c1:
3e:8d:1b:29:75:cb:ee:a5:ac:0e:b4:44:20:72:91:
e0:3a:e7:da:80:68:3c:8b:9b:c1:b6:1b:64:39:88:
cd:24:6e:a1:b7:3a:80:6f:73:34:32:37:6a:cb:57:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:14:6F:8A:EB:06:54:61:7B:58:65:CD:B6:F7:43:08:3F:85:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF11ADF8C8A011EF98FD5054762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:63:f7:72:dd:42:8f:85:12:01:99:63:b7:e7:b7:d6:83:a8:
56:49:dc:90:e8:21:fe:b5:61:44:2a:d9:50:4e:c7:ae:d6:2e:
ae:30:77:4e:76:bc:0c:de:b6:fa:e5:e0:bd:14:82:12:f8:6e:
9e:a4:10:3a:15:68:f6:a2:45:29:22:a8:b4:f6:57:e6:f1:bb:
ee:ae:07:4c:b9:1c:2f:bf:94:64:22:e4:42:7a:06:70:82:30:
8b:81:d6:bf:8f:21:f7:cc:0d:90:03:5d:e5:69:35:29:c7:34:
fa:69:7b:98:c3:bb:3f:73:ea:51:2c:a6:4d:9c:9c:57:65:b5:
ac:21:9b:8c:99:b6:48:df:08:b9:3a:8e:fc:da:1f:0f:02:83:
4d:09:90:13:5f:3a:8c:98:2e:70:1e:73:91:47:59:8f:1c:78:
c8:ab:4a:3f:ce:66:de:f3:da:f4:15:52:04:d1:69:1e:d0:12:
40:a8:b3:ce:20:e1:81:6e:91:24:3e:14:79:8a:a0:89:14:3d:
3d:69:0f:fe:60:30:80:97:90:12:41:46:b0:94:93:7d:67:0e:
9b:4f:09:47:3f:53:3d:1d:60:e4:c3:49:e7:05:33:8b:3b:2f:
71:69:f8:42:31:b6:e9:5c:13:42:e7:8f:e7:83:11:53:19:6b:
b0:fa:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:45 2025 by rpki-client