Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79AFA4AF61E11EFAC4416A4762E951A.roa
File: E79AFA4AF61E11EFAC4416A4762E951A.roa (raw, json)
Hash identifier: FhQN0m3oaQNAjIhKC0bL6PQtM/4nJOp4Lui9bQo4NCM=
Subject key identifier: 33:9C:E9:37:39:64:E7:86:16:11:6B:83:F1:5B:D8:5D:1E:96:50:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79AFA4AF61E11EFAC4416A4762E951A.roa
Signing time: Fri 28 Feb 2025 21:56:47 +0000
ROA not before: Fri 28 Feb 2025 21:56:42 +0000
ROA not after: Sat 19 Apr 2025 21:56:42 +0000
asID: 138915
IP address blocks: 154.90.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93287 (0x16c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:56:42 2025 GMT
Not After : Apr 19 21:56:42 2025 GMT
Subject: CN=67c2311f-27e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:ab:6b:ff:a9:1c:4e:65:8a:ea:94:ba:c0:
6f:86:fa:b1:3a:37:55:eb:81:9c:dc:b3:41:8f:51:
a6:ea:9f:28:fd:c2:66:c6:3d:e7:24:e0:77:9f:01:
1d:5d:fe:60:3d:15:b0:45:e2:db:8e:cb:21:88:35:
e7:50:9d:be:81:47:f8:45:18:36:a7:9b:b0:48:29:
0c:84:1b:22:8a:6b:79:b8:25:2b:3d:a3:64:36:dd:
22:07:c3:22:21:0e:24:88:91:b0:1c:bc:fe:c2:d8:
02:3b:31:2b:06:d3:6f:22:3f:c7:48:33:82:7a:5d:
af:91:34:1d:22:a1:47:7a:a3:bb:b4:5d:1b:b2:49:
9e:01:8e:0d:02:77:2a:39:03:c0:57:75:f1:d4:8f:
48:ed:f0:45:87:38:ac:d0:3c:0c:68:fc:65:4f:3e:
d6:3e:0b:ec:4f:2e:47:ed:29:70:86:de:f5:29:36:
69:aa:9c:03:e5:98:62:12:19:73:cb:dd:61:75:da:
66:16:c3:c5:d3:1d:53:85:35:e1:12:c0:c2:0d:6f:
a1:c6:d4:05:51:27:97:0f:7a:a9:c4:e4:b5:c1:4a:
2a:97:4d:d9:b0:bf:8b:81:25:c2:a4:24:e5:f3:ed:
66:eb:34:54:f5:7c:0e:05:e3:fe:d3:6e:1d:52:47:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:E9:37:39:64:E7:86:16:11:6B:83:F1:5B:D8:5D:1E:96:50:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79AFA4AF61E11EFAC4416A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:e8:57:25:3e:31:eb:1d:03:76:3d:28:c0:c1:b8:38:c5:f1:
a2:d6:47:71:02:58:22:be:b7:83:7e:b6:21:b6:ef:81:03:49:
c3:a5:ec:cd:de:d9:a7:c0:d8:f0:7b:58:45:e5:12:38:09:54:
55:5c:28:b2:c8:17:b8:7b:90:82:d9:8e:7a:c3:1a:e6:96:13:
16:5b:2f:b1:d3:22:39:86:1a:15:86:dc:02:ff:c9:b1:ab:81:
6b:1c:1c:1a:da:07:69:26:49:bf:0e:b1:64:f7:90:7b:50:b4:
3c:0a:4e:3d:c5:3e:25:09:44:7e:bf:5f:ae:da:41:b8:a1:a9:
00:7f:74:60:87:ed:6d:e8:06:ec:c2:7d:8a:01:32:29:bb:f3:
67:8d:cd:a4:58:a6:d4:61:f0:33:45:c6:48:23:44:52:3d:d6:
80:83:e6:80:36:65:bb:07:b0:a8:dc:82:0f:80:42:03:0d:06:
97:d7:61:3c:7b:43:39:3b:07:16:96:88:23:da:9d:2d:74:be:
fb:45:d8:6c:15:43:00:1f:9d:d6:c7:11:f6:d2:1b:f9:2d:b2:
2a:fa:03:be:88:59:be:6d:89:cc:09:f5:09:a4:42:75:d0:3d:
26:5f:ff:93:e4:a6:e7:55:17:37:3e:4b:b1:9b:a7:1d:8e:fe:
3e:7c:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:32 2025 by rpki-client