Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60C1C5EFE4411EF81C48451762E951A.roa
File: D60C1C5EFE4411EF81C48451762E951A.roa (raw, json)
Hash identifier: RlIYhwuQztz2rxIESN5Y1e4hgtofr2O3ahit3C5y43M=
Subject key identifier: 19:95:F2:F3:C5:2A:70:19:4B:0B:AE:2A:79:CF:B0:C2:6B:61:FC:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017348
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60C1C5EFE4411EF81C48451762E951A.roa
Signing time: Tue 11 Mar 2025 06:48:27 +0000
ROA not before: Tue 11 Mar 2025 06:48:23 +0000
ROA not after: Thu 17 Apr 2025 06:48:23 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95048 (0x17348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 06:48:23 2025 GMT
Not After : Apr 17 06:48:23 2025 GMT
Subject: CN=67cfdcbb-2081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:c3:bc:59:1b:2d:5e:02:74:91:a4:af:b1:
62:ad:54:d3:53:74:2c:e4:b0:1f:3a:8e:f7:4b:14:
39:70:d5:ff:a3:b8:b2:a9:fa:da:7b:03:13:67:d9:
20:d3:86:5c:f4:3e:15:19:0c:01:c4:69:7a:c8:13:
04:7c:cf:80:03:7e:b5:71:fa:e9:fa:2d:ab:fb:c7:
fb:dd:7b:2f:b6:ef:93:46:4c:53:7b:1d:b2:65:53:
44:64:e6:65:d0:65:80:f9:31:9e:e6:4d:8c:a7:29:
19:1a:c5:c8:63:26:69:bb:89:42:66:56:83:e0:ba:
06:70:32:2a:41:1d:85:c8:ae:2c:6f:db:1e:6b:80:
3d:f4:19:ce:69:d4:9b:40:8f:fc:b5:18:8c:6f:f9:
20:0d:5d:eb:4e:68:e0:0a:19:81:7f:09:93:ac:af:
da:06:dc:fc:28:40:43:28:0b:82:c2:76:78:cb:cd:
0b:cf:61:c3:fc:bd:e7:05:ba:b4:b2:2f:0b:5d:5b:
3d:68:4c:67:26:38:7c:72:d3:43:fb:1f:e1:3f:5b:
a6:55:e8:ba:d6:61:60:b7:32:88:5a:2e:4c:f9:00:
2e:f7:38:e4:ed:90:8b:35:fd:ad:b1:16:a7:de:04:
b9:7d:c1:87:1f:c3:80:f1:50:2d:76:61:1e:52:11:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:F2:F3:C5:2A:70:19:4B:0B:AE:2A:79:CF:B0:C2:6B:61:FC:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D60C1C5EFE4411EF81C48451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7a:73:c9:c0:98:81:c8:25:43:3e:71:5c:d0:ab:da:17:9d:
0d:60:92:df:34:9c:1f:eb:6a:9d:1a:55:4b:ec:b0:36:62:e9:
5a:57:0a:84:e5:01:d5:ea:0b:01:f2:ec:70:b0:7e:4c:f4:89:
14:56:a6:81:f5:15:d8:a3:ba:bb:97:ad:16:95:e0:ba:b7:0e:
d1:fa:e4:ff:40:b2:04:2e:cf:15:9b:dd:69:d7:4d:92:b5:50:
28:e0:92:be:04:69:7a:c5:f8:84:e8:bb:bb:7f:d7:01:47:23:
79:f2:8b:c2:b3:5b:64:d9:2d:bc:ed:90:04:9e:d8:c0:4b:bc:
1b:b6:e3:56:3e:2d:c3:fb:fa:68:98:2f:95:82:68:cf:46:57:
04:cc:53:ce:7c:f6:e5:cd:40:45:8a:68:90:95:b9:58:dd:75:
e6:20:83:67:6c:0b:6f:a9:6d:4a:13:42:b0:4b:b0:ee:6f:a4:
df:54:c2:c5:38:ac:ca:cc:9b:18:a2:08:b4:52:8a:f2:8a:1e:
73:00:96:8f:1d:01:a5:7a:71:94:60:fa:98:d0:82:59:6a:de:
9d:7c:b5:af:0a:24:42:35:42:58:46:54:b4:49:2b:22:ae:51:
cd:36:4f:c0:d3:da:ec:c5:02:0f:16:9a:23:cb:ef:b1:9d:b9:
ee:7b:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:13 2025 by rpki-client