Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FC200EF81D11EFBF6656BD762E951A.roa
File: D2FC200EF81D11EFBF6656BD762E951A.roa (raw, json)
Hash identifier: ghGdBKlFVTWItCXt2VPS/LJ/rYDxXl0IqQQFlAO9vTg=
Subject key identifier: 87:0A:67:A8:63:3D:98:33:35:A0:8D:99:5E:1C:83:62:E7:22:B7:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FC200EF81D11EFBF6656BD762E951A.roa
Signing time: Mon 03 Mar 2025 10:54:05 +0000
ROA not before: Mon 03 Mar 2025 10:54:01 +0000
ROA not after: Wed 30 Apr 2025 10:54:01 +0000
asID: 63139
IP address blocks: 154.93.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94275 (0x17043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:54:01 2025 GMT
Not After : Apr 30 10:54:01 2025 GMT
Subject: CN=67c58a4d-8762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:e9:d0:4a:4d:51:1b:53:bf:c2:e7:90:11:
92:2c:15:ac:a1:78:39:62:d3:ad:00:25:21:d2:2b:
39:c0:08:d1:8a:bf:9c:0b:7f:55:1b:02:bf:eb:7d:
63:db:5b:d8:cd:4f:9c:5b:8f:b7:7f:6b:da:99:90:
b7:83:35:c6:7d:18:e6:98:f5:cb:f2:f3:dd:fb:63:
47:72:45:e9:fd:0c:54:ad:8b:aa:e9:28:96:d4:91:
db:55:fc:53:6f:59:77:ea:e0:19:bd:dd:38:a3:db:
e2:88:5e:ec:79:0a:58:33:c9:ef:db:9b:79:01:fd:
56:b8:48:b8:4b:33:da:3e:39:d5:0e:5e:35:bb:4c:
a6:f5:f0:67:a0:23:dc:26:d5:82:5d:70:3d:cd:6c:
85:0e:a4:22:c5:a6:83:64:9b:b4:09:af:16:7e:33:
b2:4c:ad:d8:3a:71:31:54:4f:7e:29:f2:45:b8:17:
99:aa:d8:ee:73:41:19:4d:d2:27:35:42:1b:98:8c:
20:c5:4c:e7:58:00:38:ad:2a:2c:10:5e:40:3b:da:
dd:a1:77:74:70:a2:4e:33:be:7a:b3:f8:ad:8b:57:
13:a6:2f:ca:26:32:95:05:b2:0a:c9:cd:0d:5d:45:
0d:7f:78:b7:97:d2:27:d1:ce:9e:6c:41:ad:e6:57:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0A:67:A8:63:3D:98:33:35:A0:8D:99:5E:1C:83:62:E7:22:B7:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2FC200EF81D11EFBF6656BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8c:e2:f8:50:22:4e:24:40:81:f5:38:28:23:91:0b:b5:64:
8e:00:0d:ad:e5:dd:d3:6f:19:45:c7:66:de:b7:40:ff:f3:2e:
82:83:5b:ed:4d:99:85:24:5a:97:15:6d:72:74:17:4d:81:db:
95:ed:ac:ea:ce:4b:2c:5d:85:c3:76:23:ce:f7:68:64:26:8a:
0d:4d:40:a5:7a:97:09:6c:10:6b:ce:55:22:04:03:7a:ea:9a:
d2:ac:9a:a6:66:a5:99:b3:a8:4f:96:5d:63:4c:5d:f2:8e:92:
ed:e2:65:23:3f:de:11:97:d4:eb:9c:51:e4:2c:71:1f:8f:de:
96:f9:31:e6:51:d1:ca:b1:8e:c9:fc:5c:e5:56:1a:32:1c:21:
d2:e3:ce:58:b0:d3:d5:b1:ca:ef:6b:bf:c1:bf:f9:49:80:e0:
f9:b5:f8:ef:17:25:88:10:2d:41:86:72:b2:5b:54:91:73:86:
f6:5f:97:78:80:43:af:a7:42:f7:d1:93:cb:75:e7:32:f4:87:
14:9e:a6:15:06:6a:8a:30:21:87:dd:72:c3:58:81:81:a0:c2:
94:fc:3d:b5:24:08:4d:4b:17:17:c4:b9:7e:6b:4f:39:44:3d:
d2:2a:b6:fb:43:a1:36:12:df:d8:34:9a:fe:5a:87:ce:0b:59:
5b:af:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:19 2025 by rpki-client