Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AAA4E4F2CB11EF938CE651762E951A.roa
File: E4AAA4E4F2CB11EF938CE651762E951A.roa (raw, json)
Hash identifier: S4+l2Gzr6Gh9mHEwbTNmHn6V2i619a0vqac5MaF8F8I=
Subject key identifier: DF:3C:43:66:B6:B7:66:38:9D:52:73:B5:A6:DE:B9:CC:A7:78:4A:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AAA4E4F2CB11EF938CE651762E951A.roa
Signing time: Mon 24 Feb 2025 16:25:00 +0000
ROA not before: Mon 24 Feb 2025 16:24:56 +0000
ROA not after: Fri 03 Oct 2025 16:24:56 +0000
asID: 18013
IP address blocks: 154.210.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89189 (0x15c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:24:56 2025 GMT
Not After : Oct 3 16:24:56 2025 GMT
Subject: CN=67bc9d5c-90a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:6a:bc:28:73:a8:1f:b2:73:ae:a8:93:bd:
b9:11:a5:30:98:b0:31:48:52:d9:83:43:7b:85:63:
85:17:b4:4e:7e:f4:2f:7d:d8:8e:e1:47:84:e6:32:
b0:97:71:64:b9:2e:3b:03:4f:fd:38:7d:dc:a4:9b:
14:02:b5:02:65:9d:3a:10:fa:a4:3b:d6:e7:89:d5:
6d:fa:2a:d1:f1:94:ea:f8:ac:1b:c4:30:9e:ba:02:
4a:bf:a9:4c:38:e0:38:09:6b:35:0c:32:92:38:80:
81:aa:06:3d:c1:46:d2:37:b0:9a:db:0a:52:f1:64:
60:9d:b0:96:33:01:89:72:ce:3a:1c:f6:a6:30:d1:
20:01:8d:13:d4:fb:6c:c2:cc:d2:20:c9:c1:9e:c9:
5e:49:d9:cc:e4:a7:79:4e:73:2b:af:fd:d5:e6:07:
13:e3:a1:29:8c:5f:86:0a:34:ea:9f:9f:ea:84:7d:
6b:3b:ab:ec:f3:79:80:43:2d:9e:aa:27:d4:43:ff:
2f:ed:90:5b:e4:2e:16:d3:ea:a7:41:4f:03:29:86:
a4:46:01:83:2d:9e:71:f7:31:36:e6:9e:5d:87:44:
03:ab:e3:32:74:ea:6a:f3:a8:f0:a1:12:cd:8e:34:
91:9f:6e:73:04:71:ca:32:54:cd:17:55:54:7b:ea:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:43:66:B6:B7:66:38:9D:52:73:B5:A6:DE:B9:CC:A7:78:4A:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AAA4E4F2CB11EF938CE651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:32:5f:32:40:6a:98:3c:d0:f3:af:c8:81:5b:0a:7d:44:a6:
4a:d8:86:81:7c:d6:2c:b3:ef:b3:3a:7b:75:5f:0f:e4:a5:5e:
21:1c:fb:f0:fc:7c:b4:b3:8f:4f:4c:ac:bb:c6:8e:04:e4:d4:
50:f3:fe:e8:b2:d7:11:6e:1b:0b:a4:ed:8a:05:43:8c:4e:18:
91:98:0d:27:fd:88:89:4f:17:31:15:ea:53:02:c4:d7:e4:80:
20:83:79:e9:79:26:7b:31:93:06:36:a2:ad:34:2f:bf:38:ac:
8f:6e:70:7d:47:8e:49:6c:06:e8:62:94:0c:a2:e3:85:3c:59:
55:a7:7e:ee:91:fd:6c:55:60:a6:42:a6:71:0e:dd:77:72:01:
de:90:23:9c:7a:a0:50:54:ce:6d:4c:29:97:c7:40:84:0f:0b:
d4:8f:dd:d5:3c:62:9e:50:cc:bf:fa:84:7c:da:c1:cd:e2:e8:
f2:79:0d:46:08:fb:a4:bc:89:52:9d:de:30:6c:7b:ba:3a:ac:
12:84:70:fd:39:e7:f3:7b:37:ea:19:df:96:d8:53:fc:46:4b:
15:b5:fa:52:f2:98:b4:88:96:5d:44:c8:11:1c:99:91:25:2e:
e4:1b:6b:13:e5:54:ea:6a:b6:c7:f5:a2:c1:ef:94:11:07:ff:
e0:3b:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:33 2025 by rpki-client