Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F5AE26CDC011EFBB06C97E762E951A.roa
File: D3F5AE26CDC011EFBB06C97E762E951A.roa (raw, json)
Hash identifier: S3Gnb9eRmxtpdMb8x3cWhFPv2Az4jtH7a4ZuuGSInhc=
Subject key identifier: 36:B6:F6:B4:DA:62:AF:B7:F3:3F:03:DE:B3:5A:01:6A:4B:84:DB:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013710
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F5AE26CDC011EFBB06C97E762E951A.roa
Signing time: Wed 08 Jan 2025 13:02:35 +0000
ROA not before: Wed 08 Jan 2025 13:02:31 +0000
ROA not after: Tue 16 Dec 2025 13:02:31 +0000
asID: 984
IP address blocks: 154.200.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79632 (0x13710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:02:31 2025 GMT
Not After : Dec 16 13:02:31 2025 GMT
Subject: CN=677e776a-2665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:41:95:13:20:62:e6:80:69:1c:d3:08:dd:
40:7b:7c:ae:1e:e6:05:00:7d:8d:5b:f4:5c:3f:c8:
81:8b:0b:52:2d:13:54:86:0d:73:46:1b:07:dc:b3:
83:a5:2d:aa:95:50:e3:3f:05:33:6b:82:1f:c3:07:
37:1b:b9:f6:a3:54:2b:75:18:bf:fe:a4:b8:81:67:
c1:f6:ad:3a:9e:32:15:34:9d:36:d7:b1:0f:4a:f6:
43:6a:82:1c:90:b1:c0:53:7c:96:11:3e:6e:06:c0:
bb:94:4f:d3:e9:ba:09:34:eb:54:b0:d6:c5:13:b5:
b0:bd:70:37:08:36:2d:85:07:fe:3f:8a:b8:5f:dc:
e5:37:ea:ca:fe:23:52:7f:f9:76:0f:09:5d:fa:ee:
85:4e:d1:ad:40:66:51:f2:41:a8:51:3c:b9:32:98:
6e:f6:e2:67:68:6d:be:7a:5f:4d:3c:3e:c2:0d:2d:
6b:9a:f9:27:cf:e6:b8:bc:e1:bc:ca:32:75:5a:aa:
23:85:e9:e9:77:07:e0:64:59:0d:03:52:cd:ac:33:
2d:8d:b5:c0:bb:db:43:d9:3a:de:86:ac:53:f3:76:
56:49:b4:84:5f:82:95:b7:8b:c1:33:65:6e:67:ca:
63:b0:85:df:48:1c:8b:4a:52:e5:c7:6a:20:ec:ce:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:F6:B4:DA:62:AF:B7:F3:3F:03:DE:B3:5A:01:6A:4B:84:DB:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F5AE26CDC011EFBB06C97E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.231.0/24
Signature Algorithm: sha256WithRSAEncryption
48:db:75:86:43:5f:de:7c:fa:e9:a8:27:9f:ba:df:98:73:d2:
8f:78:fe:04:75:bb:ac:18:20:80:d9:2d:42:ee:d9:bf:51:00:
b1:db:55:54:dd:45:f1:84:00:68:75:7d:dd:8b:a3:3b:e0:db:
22:ce:6d:48:0e:6d:05:f8:63:5b:9e:54:50:fd:d2:9f:0a:ed:
4e:b7:f1:2a:22:cc:b0:10:1d:2c:e6:21:fe:3a:f5:85:8c:b6:
c1:23:e4:04:61:0e:47:7e:19:60:92:ff:56:bb:7a:73:3a:97:
e8:b2:a5:01:2f:83:e9:b4:db:6b:da:be:24:21:58:c3:6b:67:
50:ab:80:a7:07:28:b5:22:5c:2f:f8:40:dd:b1:57:ab:a7:c4:
32:cb:c1:b4:e0:08:b7:ef:d7:b0:eb:4b:32:b3:f0:8d:26:99:
94:c6:14:b3:6e:18:81:80:1c:09:cf:e7:17:cb:55:bb:82:89:
20:d8:bd:d5:53:d6:c6:54:87:97:cd:f1:00:af:d9:2c:8c:29:
0a:99:18:fc:c6:a4:f3:be:23:67:5b:51:ca:85:ab:8e:e9:c5:
be:40:75:95:0d:df:48:bb:ab:e4:65:1f:01:f9:03:3c:54:40:
96:8d:44:d4:65:ab:c1:99:67:71:1d:77:b5:7c:38:c0:b6:bb:
fc:2c:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client