Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB9316A2C91311EFBAC7C9B8762E951A.roa
File: DB9316A2C91311EFBAC7C9B8762E951A.roa (raw, json)
Hash identifier: /7RSlVsDFXk1QpdwkCRv+25SYOuH0DT3VDsA730m2Iw=
Subject key identifier: E6:0D:55:AA:B2:F1:0C:BC:B9:92:D0:42:2E:0C:D7:FA:2F:33:31:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB9316A2C91311EFBAC7C9B8762E951A.roa
Signing time: Thu 02 Jan 2025 14:14:20 +0000
ROA not before: Thu 02 Jan 2025 14:14:16 +0000
ROA not after: Mon 13 Dec 2027 14:14:16 +0000
asID: 17561
IP address blocks: 154.221.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78527 (0x132bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:14:16 2025 GMT
Not After : Dec 13 14:14:16 2027 GMT
Subject: CN=67769f3c-134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:df:dc:9a:09:eb:8c:47:f0:67:3e:28:7a:
87:8c:9b:a8:ea:7a:08:a5:83:52:60:f8:07:84:2f:
1b:99:2a:75:86:69:4a:79:ef:39:e1:0c:5a:50:3a:
5d:5d:1c:3f:0d:c8:4c:8a:fb:6a:a8:aa:ee:d0:a6:
96:d1:8a:82:9e:4a:65:3a:18:a6:bb:0f:d6:77:0c:
01:57:2e:2d:e2:44:67:9f:50:60:d1:56:61:e9:77:
0d:a3:91:f2:f0:09:2d:2c:18:9f:a9:6a:b0:94:8d:
d5:91:63:91:76:dc:54:b3:1b:94:96:af:54:c2:12:
22:56:75:ee:8b:b6:7d:37:e3:dc:21:38:dc:ba:ea:
17:f5:15:7e:33:6b:40:c8:1d:68:ab:65:cd:16:64:
e9:89:7e:40:85:a1:d2:a0:97:b0:5b:9c:f2:3e:7d:
5c:56:96:7c:b7:01:0a:f7:8a:ff:e3:8e:9d:f4:a9:
1a:b8:1a:7e:30:c8:6b:dd:c8:c6:c8:c1:d2:e5:7a:
91:ee:14:89:d0:29:3c:bc:53:d2:a1:2a:15:ae:b4:
de:1d:49:d8:0f:3e:07:dc:3b:b0:64:4f:50:bc:15:
eb:f3:4e:7a:01:5f:17:01:b4:fc:45:bb:69:b5:2f:
ca:5d:ba:d4:a2:e4:4d:9d:5c:70:46:3e:31:e8:a3:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0D:55:AA:B2:F1:0C:BC:B9:92:D0:42:2E:0C:D7:FA:2F:33:31:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB9316A2C91311EFBAC7C9B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:51:39:25:14:1f:f1:dd:9c:eb:4e:50:6f:0c:df:a2:37:95:
96:6a:f6:f0:cd:09:48:c0:a5:c9:6e:f2:1f:4d:86:c5:ce:b0:
f0:3c:16:3f:fc:fb:e9:f4:b4:08:92:c5:3d:32:12:df:4a:f0:
38:29:fa:74:02:2b:9c:70:d6:ef:62:cf:31:3b:35:5e:25:fd:
64:04:66:16:b3:43:b4:a7:bf:79:75:8f:93:87:c8:78:79:8d:
db:f5:d4:9a:e5:e4:53:d2:ec:45:a7:e4:7f:0a:5e:30:66:5d:
4c:3d:41:dc:c6:99:2f:7d:96:0b:02:eb:12:a7:5b:61:c7:9f:
32:6c:74:17:82:25:f8:f8:ec:a3:cc:64:f2:c1:29:d8:38:40:
1a:02:ad:68:2f:10:c4:46:f5:09:17:b7:89:ed:d3:b6:2b:10:
00:47:91:81:0a:c5:4b:43:ef:11:20:16:a6:92:0b:73:35:a6:
5b:7b:f7:c3:46:5b:c2:84:31:62:75:71:ee:12:7c:d9:37:a4:
d7:c5:bc:ef:74:28:35:67:f2:9a:e3:f3:77:7b:bc:33:62:73:
07:12:be:c8:27:c3:42:57:53:bb:76:fe:09:24:21:84:04:af:
e8:60:48:4d:bb:b3:82:16:fb:a3:a0:1e:aa:3d:30:a9:6e:45:
9b:fb:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:16 2025 by rpki-client