Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95CFAF0CF5D11EF9C54B346762E951A.roa
File: E95CFAF0CF5D11EF9C54B346762E951A.roa (raw, json)
Hash identifier: aqZE/4IjsTV850C4bPCPyy0xbF04WW/+TxRwOzLDEMU=
Subject key identifier: AE:31:49:78:5A:BE:08:AB:7C:1C:76:29:16:88:B6:10:7D:6B:8E:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95CFAF0CF5D11EF9C54B346762E951A.roa
Signing time: Fri 10 Jan 2025 14:19:33 +0000
ROA not before: Fri 10 Jan 2025 14:19:29 +0000
ROA not after: Sun 12 Dec 2027 14:19:29 +0000
asID: 17561
IP address blocks: 154.81.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80373 (0x139f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:19:29 2025 GMT
Not After : Dec 12 14:19:29 2027 GMT
Subject: CN=67812c74-36d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:4a:25:1f:9b:35:a0:14:3b:75:61:53:2b:
32:19:b5:f0:dd:78:29:da:0d:10:da:2e:9f:6c:37:
e8:69:10:dd:d3:74:46:cb:ad:e2:a5:9c:da:1a:a0:
6a:b3:e4:7e:0c:c4:ca:33:23:96:59:3b:c4:70:4c:
1f:f7:81:00:0e:1d:ab:4a:20:68:2f:4f:c3:ee:84:
57:eb:85:f9:e2:a7:1e:9a:b6:f8:66:86:da:5b:a8:
6d:b0:93:c0:ab:21:b3:a1:4a:e8:2a:da:41:68:5a:
26:17:f0:ea:c7:ac:5b:a7:f6:a1:84:d6:9b:1f:f5:
11:f3:51:be:75:ce:53:93:29:ed:23:44:ee:70:78:
5b:e9:ad:fc:69:7e:24:bc:13:22:ac:f6:e2:6f:62:
b4:64:33:f0:98:7e:26:9c:2a:16:67:d6:e0:e0:a7:
04:e6:18:45:c6:0e:03:66:2a:5d:a8:a3:ff:03:79:
16:d9:c4:10:76:37:0d:05:08:e2:ca:7e:9b:8f:dc:
3a:48:82:60:bb:8a:5d:9c:c5:fe:9c:ec:ec:88:e3:
32:8c:21:40:40:a9:45:5d:1b:91:d4:ba:9a:2e:68:
f2:dd:08:99:d6:91:98:c7:50:27:46:e6:dc:7a:af:
78:d5:d7:1c:07:ac:02:4a:f5:6c:02:ca:c8:4f:3c:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:49:78:5A:BE:08:AB:7C:1C:76:29:16:88:B6:10:7D:6B:8E:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95CFAF0CF5D11EF9C54B346762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/24
Signature Algorithm: sha256WithRSAEncryption
00:76:94:e5:d8:1a:99:de:be:1a:b4:27:26:56:d1:a7:58:f8:
2c:22:dc:71:82:63:c4:77:66:73:92:59:30:40:e2:55:6c:41:
af:6c:72:0c:78:68:f3:d3:8a:de:e3:0b:59:37:65:21:0e:73:
7b:c0:55:f3:b8:c3:ce:37:3f:12:e4:5e:12:8a:d0:c5:fb:fa:
c2:f7:50:2e:a1:15:3c:35:80:c1:80:db:7d:70:b4:aa:44:fa:
b0:37:44:22:33:c0:6f:d2:21:ae:5a:59:13:e3:89:58:85:4f:
7c:dd:23:91:ce:8c:d3:6d:b9:a3:c1:1c:0e:52:68:4a:fd:f3:
b5:b1:2b:dd:59:16:31:47:80:7c:d0:c9:60:55:3f:91:7f:2d:
e8:64:2e:f4:5d:5c:b3:23:65:37:6a:18:cf:12:21:4c:3b:7b:
e7:ac:0f:7c:9e:ca:b0:00:eb:10:3b:87:78:0c:af:d5:9a:ef:
9e:84:8b:55:5d:43:c8:f7:b9:a3:04:0f:82:42:a7:6c:d9:1a:
71:fb:aa:14:fa:b5:ec:0f:15:ff:06:b6:df:39:00:f6:d3:80:
66:9b:f1:67:c6:72:ff:f7:70:6d:62:22:39:3a:52:21:6b:6a:
a0:d7:cb:0c:bb:8f:b5:e9:a3:12:fc:c6:36:0b:bb:33:f3:e9:
42:d9:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:44 2025 by rpki-client