Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E700CF5E11EFBC83A74B762E951A.roa
File: E865E700CF5E11EFBC83A74B762E951A.roa (raw, json)
Hash identifier: n/Yu7XrZ8i1ivW+szq69Ar0OxSpF+oLT+bwgrE866zY=
Subject key identifier: A6:4C:10:78:8F:9C:9D:93:C9:ED:B2:0E:B7:FE:26:2F:5E:B7:27:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E700CF5E11EFBC83A74B762E951A.roa
Signing time: Fri 10 Jan 2025 14:26:40 +0000
ROA not before: Fri 10 Jan 2025 14:26:37 +0000
ROA not after: Fri 12 Dec 2025 14:26:37 +0000
asID: 984
IP address blocks: 154.81.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80381 (0x139fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:26:37 2025 GMT
Not After : Dec 12 14:26:37 2025 GMT
Subject: CN=67812e20-050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:bc:9a:b4:4a:c0:a6:9e:67:6b:31:ec:49:
de:ae:f8:b1:7c:ed:78:ec:a3:4b:38:18:31:66:c8:
2a:e3:d6:14:a5:d7:ad:44:a8:ec:51:ee:58:db:88:
09:3a:81:2c:5c:89:9d:5b:b1:a4:83:c2:6d:3a:59:
c3:58:da:78:5e:8b:61:6b:45:04:21:12:52:fc:95:
42:d4:5d:0d:a2:9f:d2:80:d5:36:bd:01:c1:6b:5b:
0b:fc:b9:e8:0d:1d:37:8d:82:d2:e7:69:e6:b1:61:
49:18:6d:26:38:e4:a0:fb:c5:8a:de:0b:75:07:af:
cf:2b:60:2c:6c:69:44:da:69:ae:17:91:c6:e4:13:
06:5d:0b:75:8c:ba:7b:5b:79:ef:cc:ee:f0:f6:87:
4f:99:72:a9:23:d3:55:0b:c7:37:dc:aa:63:b1:34:
62:48:29:be:9d:d8:9a:83:61:60:f3:21:fb:00:a4:
9b:7a:d2:22:03:a5:05:ed:17:5c:ba:99:55:cc:c8:
25:0e:e2:0b:83:7c:c0:59:0a:36:6a:c4:cb:c5:89:
7b:9e:ca:fc:87:33:b4:8f:fd:50:7a:1b:08:ea:76:
0f:5b:06:d5:58:cc:2b:ce:f8:3b:26:5c:f2:2d:27:
94:e7:38:05:5b:a9:31:95:15:f0:26:9e:f6:77:2a:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:10:78:8F:9C:9D:93:C9:ED:B2:0E:B7:FE:26:2F:5E:B7:27:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E700CF5E11EFBC83A74B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.130.0/24
Signature Algorithm: sha256WithRSAEncryption
19:40:60:32:9e:4f:0d:0c:5a:0f:b5:d1:d0:a1:3d:98:f1:83:
cf:75:85:7b:31:a9:78:83:91:09:ad:fc:1a:53:ec:b8:93:12:
b6:42:87:2f:cc:25:3c:b5:78:ee:66:1f:cc:16:73:d4:19:f3:
1d:26:49:53:fe:43:93:c7:e5:e6:cd:33:ea:81:52:7b:c4:21:
37:5f:c8:cc:c0:4a:fb:8d:83:b6:7b:a0:88:df:9a:23:3e:3f:
3a:5e:a3:c0:e5:79:67:ca:3a:9b:05:0c:9e:1f:04:06:67:2e:
9d:4e:2a:a4:43:36:9c:93:42:7e:73:f2:8c:4b:5f:ac:68:6c:
50:b3:c2:39:b4:02:48:1d:09:f7:1e:2c:c9:e7:68:d0:51:d8:
9a:ca:c1:7e:9f:1d:80:e6:d5:be:95:f8:ef:19:6d:b2:ea:07:
64:d6:e6:c4:21:7f:1c:c9:73:4d:7e:ff:5d:04:01:be:94:8d:
f9:de:d5:38:98:b1:b2:c4:b2:5b:7c:61:20:cf:46:4c:41:0b:
38:b9:1f:38:6b:d2:16:eb:d6:9c:bd:b6:58:4d:7c:d5:6a:08:
8e:7b:5b:ff:61:34:d8:79:19:6e:ee:74:f2:aa:c1:6f:0d:6d:
16:75:96:65:ed:3c:c9:f4:5b:3c:30:79:ab:c4:a3:81:fa:7b:
cb:50:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:35 2025 by rpki-client