Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA56241AF6B711EFA3CD87BE762E951A.roa
File: DA56241AF6B711EFA3CD87BE762E951A.roa (raw, json)
Hash identifier: Y0OEeOOZ9qZKpJDzcvfDNXxlUOfr1xbq0mklcpH6CDM=
Subject key identifier: CB:FC:6B:9A:E6:07:6B:DE:8F:AF:42:6F:B1:1F:A3:E2:A4:E2:E7:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016ED7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA56241AF6B711EFA3CD87BE762E951A.roa
Signing time: Sat 01 Mar 2025 16:11:38 +0000
ROA not before: Sat 01 Mar 2025 16:11:33 +0000
ROA not after: Sat 05 Apr 2025 16:11:33 +0000
asID: 203020
IP address blocks: 154.207.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 16:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93911 (0x16ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 16:11:33 2025 GMT
Not After : Apr 5 16:11:33 2025 GMT
Subject: CN=67c331b9-e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:56:5f:89:17:7b:8a:b9:3e:5c:65:2b:76:
e2:d3:06:1a:88:51:9d:57:13:4f:b7:47:27:b0:1a:
e3:c5:f2:1f:6f:9c:85:91:8f:04:85:50:9b:ab:7b:
14:df:26:39:a3:34:8e:24:63:bf:43:36:f5:12:01:
ff:cf:b6:68:a6:d0:4d:29:90:e8:c0:8a:34:b7:90:
58:b2:75:c1:a1:52:cc:9b:51:f1:22:91:a7:65:52:
64:9d:8c:18:c6:f6:9f:ec:b2:f7:5f:c7:50:4b:1b:
16:92:06:7b:c1:87:4a:e2:59:82:b4:d3:84:a3:5a:
97:da:f2:6f:18:be:e9:5c:a0:6b:2a:dc:11:24:91:
a3:22:04:f3:2c:c2:15:de:bc:bd:b2:2e:cd:c5:77:
a6:e5:d6:f5:0f:a3:4b:ec:76:82:d6:0e:6d:3b:db:
66:7e:66:0e:3a:49:27:42:38:bd:99:45:5b:d7:7c:
cf:e4:e4:99:c3:05:0a:4b:0d:27:36:5f:eb:37:7e:
36:a5:ca:9d:00:54:4c:c8:39:c0:db:1b:06:9f:2d:
e9:cd:31:a7:04:97:ff:65:f1:c2:29:f3:6a:93:4f:
40:1e:2f:68:23:50:67:51:2a:26:2a:06:49:91:3f:
8d:42:a0:5d:b8:f1:62:c5:ae:1c:21:12:de:4e:5f:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:6B:9A:E6:07:6B:DE:8F:AF:42:6F:B1:1F:A3:E2:A4:E2:E7:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA56241AF6B711EFA3CD87BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.240.0/21
Signature Algorithm: sha256WithRSAEncryption
43:d1:c4:ea:5a:07:f2:c6:b1:1b:0d:3b:36:6e:ee:7b:85:2c:
b4:60:b5:dc:4d:0d:14:64:dd:f8:d1:33:c4:f3:f1:6b:7f:ff:
e5:26:07:00:63:25:6c:b1:39:e6:78:28:15:57:3b:b3:c7:69:
9a:11:b5:47:84:7b:03:a0:56:53:ab:a8:72:8b:88:ee:68:29:
37:95:6e:1c:48:cf:e1:92:84:55:9c:02:bb:c3:64:d5:1b:74:
8d:35:d2:e6:61:e9:64:94:c3:fc:a8:6b:45:cf:bd:1e:72:4f:
1a:6b:ff:ab:ca:f4:7f:f5:af:af:04:c1:76:41:78:e3:d6:52:
f1:d3:04:49:f9:59:7f:d5:0b:ae:8e:97:a1:75:ed:97:10:93:
e6:18:fc:a3:be:0b:ec:81:99:aa:eb:66:ef:c4:51:f4:43:31:
ec:ca:cc:96:64:a4:a3:5a:7b:47:8a:86:93:96:55:3b:a5:16:
08:16:a0:19:68:f7:62:b3:c8:b7:d8:87:78:0e:6a:d8:94:c8:
9e:ea:fd:b3:c1:c1:3d:56:a4:b6:4c:dc:a5:d4:f5:11:19:98:
fd:a7:fe:b4:21:6d:25:83:4a:7e:a9:d2:4d:63:06:c6:ba:2d:
0d:79:9e:b5:fd:5f:19:9a:e3:7e:e3:f7:71:ef:d4:1c:f6:9e:
b7:dd:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:21 2025 by rpki-client