Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E822C6C8A211EFB7DD2B61762E951A.roa
File: E0E822C6C8A211EFB7DD2B61762E951A.roa (raw, json)
Hash identifier: iblD00SWne/P8lYJ2P5RR73WizNAZfOZB3YLCElBtBM=
Subject key identifier: E6:1E:47:2E:7C:1A:22:26:2C:AC:48:40:23:29:5C:60:4C:3B:D8:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01312E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E822C6C8A211EFB7DD2B61762E951A.roa
Signing time: Thu 02 Jan 2025 00:45:36 +0000
ROA not before: Thu 02 Jan 2025 00:00:32 +0000
ROA not after: Fri 12 Dec 2025 00:00:32 +0000
asID: 984
IP address blocks: 154.218.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78126 (0x1312e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:32 2025 GMT
Not After : Dec 12 00:00:32 2025 GMT
Subject: CN=6775e1af-513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:66:07:49:c7:b4:37:ff:db:4a:71:fe:05:
56:59:1c:19:78:3e:ce:50:9a:be:8d:d2:7d:73:fa:
69:8b:27:e3:57:5f:cb:2d:48:f3:dc:cf:b6:88:79:
1e:39:ba:13:6e:1c:59:ca:b8:18:30:af:42:a1:b7:
e4:c8:44:42:bb:02:dd:26:06:c9:94:34:44:75:94:
21:c1:5f:b6:39:af:0a:5c:c4:16:9b:0b:ac:de:f5:
9f:f8:07:be:4e:2a:c1:82:f9:a9:98:04:8b:91:f1:
db:ea:c8:6d:ec:9f:21:d1:9d:09:56:d7:c3:b0:87:
77:ad:4f:5c:e8:56:e9:cd:da:30:f0:3d:8e:be:d3:
c9:c0:ed:86:05:c3:f9:01:33:b1:d1:59:b5:8d:08:
ca:75:72:1d:be:15:7b:d5:19:13:b7:f8:ea:e2:41:
cb:ad:68:f7:ab:a8:72:5c:4c:5f:94:54:b5:b4:24:
f7:e5:79:db:8e:c6:ea:9e:cf:74:4b:7c:78:6f:4e:
b9:b2:98:45:85:d0:18:1b:78:62:b2:8c:ac:b3:5e:
cd:3e:79:b3:4c:3c:83:95:3c:f0:2e:5d:ed:d2:f6:
2b:26:3b:a7:e8:5c:63:8d:59:64:38:1b:03:ca:52:
07:61:bf:7f:f2:50:d3:58:f5:a0:f2:82:16:df:0d:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1E:47:2E:7C:1A:22:26:2C:AC:48:40:23:29:5C:60:4C:3B:D8:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E822C6C8A211EFB7DD2B61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.51.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b5:1d:4d:e6:4c:71:28:cd:f7:ce:78:ee:ba:70:5e:15:50:
cf:3f:09:57:e1:cc:53:60:03:19:04:c6:fa:fd:27:88:a9:c0:
a7:d9:22:3b:1e:ad:ef:5d:73:f8:7a:58:a7:43:a8:28:55:e1:
dd:39:73:f5:84:df:8d:72:da:9d:3b:bc:81:7e:0c:92:21:d1:
19:65:e9:9e:09:35:4c:89:1d:d2:d6:c3:fb:39:d6:80:7b:a3:
57:67:fa:fc:57:ca:40:7c:46:b0:26:28:b8:9b:02:2f:6f:4a:
19:70:8e:07:68:96:bf:5b:4b:94:fb:1e:b7:45:a6:df:ce:0d:
03:c3:a9:b4:20:59:91:29:f7:c8:2f:6d:72:ba:51:08:e4:9b:
b4:ad:68:bb:54:6b:0d:f3:82:29:e0:7b:66:f6:5c:cb:13:03:
14:fb:14:71:43:db:32:85:2c:39:03:28:e2:28:32:e4:de:c8:
e6:e9:67:ad:03:bd:74:c5:af:d6:6f:0e:e1:20:5f:01:f3:7e:
b7:88:9d:5e:ec:3c:1d:68:57:86:1d:a6:55:72:75:03:37:97:
48:9c:d0:58:84:c7:81:85:86:50:66:50:d5:f7:13:fb:71:0a:
97:94:13:8b:6e:e9:e5:db:16:c7:40:1f:bb:e6:50:4d:62:68:
80:ef:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:01 2025 by rpki-client