Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6DBF7CF59B11EF99B875AB762E951A.roa
File: DD6DBF7CF59B11EF99B875AB762E951A.roa (raw, json)
Hash identifier: oUIUzom/5heNPkfhQWOWtBd42dyKsD6BuWfpLd5KsjI=
Subject key identifier: CC:57:D8:10:5B:E2:80:19:A5:77:69:BA:46:C8:29:26:C1:53:39:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6DBF7CF59B11EF99B875AB762E951A.roa
Signing time: Fri 28 Feb 2025 06:18:46 +0000
ROA not before: Fri 28 Feb 2025 06:18:41 +0000
ROA not after: Mon 12 May 2025 06:18:41 +0000
asID: 151804
IP address blocks: 154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92607 (0x169bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:18:41 2025 GMT
Not After : May 12 06:18:41 2025 GMT
Subject: CN=67c15545-8196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:e7:78:e7:c9:4e:ee:9d:77:dd:08:83:21:
96:4a:91:8a:5f:2c:1f:8d:ba:0d:0a:98:af:8b:bd:
3d:2c:c6:3a:45:3c:01:30:a7:cb:18:5c:93:8c:1f:
fc:c1:71:a8:f0:9e:10:e3:86:18:53:81:19:0c:34:
9f:e8:c9:48:a4:b6:83:c4:30:dc:9d:a9:12:67:44:
a4:01:bf:5e:e5:bb:d6:53:05:89:42:ef:92:1b:07:
e7:b2:23:5f:f7:e5:29:d1:a8:57:20:f4:cf:43:db:
a3:44:1d:b5:18:80:cf:16:ed:63:79:63:d1:9a:4a:
cb:aa:8b:c8:ad:7f:fd:6f:05:09:2e:a9:cf:36:84:
b7:ef:79:ec:c5:bf:14:52:3b:aa:ca:bb:48:d3:43:
19:33:9d:d1:04:94:ce:0c:6d:6a:b6:5a:b4:09:25:
5b:ab:bf:46:84:75:23:c2:5c:19:eb:dd:6b:94:8e:
9c:7a:7e:b6:9f:49:54:1b:0c:9f:34:39:c6:d0:aa:
d0:dc:2d:f4:c5:1d:47:2c:ba:c4:c6:4c:ca:f3:e2:
b2:5a:f7:33:ac:57:cb:3c:43:d0:7f:aa:ef:86:99:
17:93:42:8c:63:f3:f7:66:c9:fe:71:45:97:82:7d:
3a:f8:51:1a:63:dd:74:ed:b5:c6:76:b3:51:8f:3e:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:D8:10:5B:E2:80:19:A5:77:69:BA:46:C8:29:26:C1:53:39:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD6DBF7CF59B11EF99B875AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
10:51:72:e4:2a:e1:77:34:d9:1b:b3:b1:ac:df:67:6f:75:8f:
02:bc:d2:3b:b8:0e:34:c7:52:cc:c5:73:4d:15:2b:34:17:b5:
0f:5a:7a:f0:35:e6:a0:44:00:12:ed:aa:63:1d:19:77:c0:82:
d0:89:c5:54:37:be:c5:7d:80:84:9a:10:d9:0f:8a:36:13:27:
0f:62:05:6b:0f:f0:cc:50:de:05:20:a9:22:35:a8:c5:34:a3:
02:dc:ca:8e:7c:a8:d0:84:3b:a5:65:c8:b8:b1:49:da:0d:6e:
d6:99:dc:14:80:56:3d:0f:c9:96:a0:df:70:2d:ce:14:1f:8e:
96:8b:d7:e0:f3:47:79:73:53:f5:d1:1c:88:a2:9f:8b:3c:43:
79:48:2d:4c:14:89:5c:15:cd:49:ea:24:ff:e9:6b:29:20:0f:
56:37:a6:e4:95:07:93:e7:b0:75:36:50:c2:48:eb:1e:a2:9a:
35:49:b8:2f:b4:d9:ea:ec:f4:dc:81:4f:31:9b:69:f0:30:d6:
5b:2f:0a:f5:68:06:dd:05:a5:60:96:48:af:67:59:3e:61:76:
ea:88:cd:55:08:64:c5:8b:95:14:80:90:38:33:6d:44:15:28:
ea:42:7e:5f:18:82:97:9f:52:c6:d1:cf:31:43:db:23:31:7c:
2d:b4:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:19:30 2025 by rpki-client