Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4DFA2ECF68C11EF8CFBAB9D762E951A.roa
File: E4DFA2ECF68C11EF8CFBAB9D762E951A.roa (raw, json)
Hash identifier: Y3YaXNaEO+sc/8Zo1JBf2evd9Sb1tVLJwVMx3HUn4LE=
Subject key identifier: 43:65:F0:29:4F:32:5B:44:E2:1D:01:40:08:40:22:DB:A4:68:79:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4DFA2ECF68C11EF8CFBAB9D762E951A.roa
Signing time: Sat 01 Mar 2025 11:04:07 +0000
ROA not before: Sat 01 Mar 2025 11:04:03 +0000
ROA not after: Sat 05 Apr 2025 11:04:03 +0000
asID: 203020
IP address blocks: 154.204.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 11:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93681 (0x16df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 11:04:03 2025 GMT
Not After : Apr 5 11:04:03 2025 GMT
Subject: CN=67c2e9a7-da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:50:e0:36:4e:d0:33:42:03:1c:25:a3:f7:
6d:cd:09:07:4e:73:3a:42:5d:a4:b7:df:96:68:c3:
4a:6d:b5:31:28:4b:9d:ff:69:e5:27:1f:d4:b0:9c:
dc:56:da:22:b5:b1:31:35:dc:7a:c2:f2:2d:f4:7f:
32:fe:d2:07:da:21:55:21:6a:c4:81:6f:eb:d4:db:
3c:b1:b1:bf:31:95:2c:bb:9f:16:b6:34:96:ff:8e:
93:6b:fa:b9:28:0d:17:f4:5b:df:5c:f3:a3:f1:9b:
97:cf:21:49:12:3f:bd:13:6b:a7:9f:88:8e:91:87:
3f:45:77:48:ed:89:36:b8:ab:2e:e7:64:c2:87:37:
4d:fd:e6:fa:b5:73:da:07:ba:cc:59:04:eb:c0:b2:
97:85:83:dc:ba:06:e9:cf:11:94:38:8d:00:26:50:
9a:97:a3:a3:53:bd:f6:d1:18:15:02:15:57:2f:56:
c9:29:7c:a2:bd:a8:d8:3a:4c:46:eb:0d:f3:14:77:
6c:2d:e3:5c:32:e4:97:f7:5a:f8:14:0c:45:15:7c:
83:d1:8f:37:b8:4b:fe:23:62:3c:c0:03:41:e7:6d:
76:69:90:5a:2f:55:ba:dd:4c:38:f4:70:6f:6d:c4:
6d:80:f6:08:94:95:c6:62:33:38:07:3c:3a:74:87:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:F0:29:4F:32:5B:44:E2:1D:01:40:08:40:22:DB:A4:68:79:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4DFA2ECF68C11EF8CFBAB9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a1:5a:1a:42:1e:5e:50:be:59:b6:77:67:5b:1a:23:c5:fb:
de:1e:81:99:77:32:af:3c:69:72:bf:c4:7a:83:47:ed:f4:c1:
26:d2:4d:2c:30:40:a4:17:e8:37:8e:19:5f:95:47:f9:7c:8f:
57:ed:f5:24:5e:5c:b8:57:81:cd:92:68:fc:4a:13:ad:c8:86:
3b:2d:ff:e5:5a:63:48:92:dd:43:fc:cd:8e:fc:64:d2:a4:a7:
e0:40:b5:74:23:21:2f:b9:94:f2:af:50:43:48:e3:1e:96:48:
09:d5:48:42:5f:c7:94:9f:4b:0c:05:9d:80:a2:94:68:81:13:
e7:53:c4:19:1f:44:85:2f:8b:c6:2a:b8:22:6c:5f:21:d0:b8:
99:e0:13:b2:e8:b6:b5:48:f9:cd:6b:b4:11:67:8b:a9:94:7e:
8e:15:6b:dd:a1:43:42:6f:34:46:ee:6a:c8:e5:1f:8a:7f:ac:
59:0d:ec:c6:19:32:de:97:47:96:12:00:b0:8c:ac:45:12:70:
a0:ca:67:cd:58:f4:d8:66:9f:1f:56:ec:f2:b2:37:ca:3d:cf:
05:7e:53:06:c7:b3:77:5b:1a:d5:b1:ee:25:e3:fa:e7:45:e7:
c4:3a:7c:76:30:f2:05:d7:49:96:5e:aa:7e:21:d0:9f:ea:c8:
47:82:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:33 2025 by rpki-client