Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA3CC96C8BB11EF82FD0496762E951A.roa
File: ECA3CC96C8BB11EF82FD0496762E951A.roa (raw, json)
Hash identifier: ba8yZod+xPVts06wNNGE7CC+dTgI1Sqh431mAcY1lVw=
Subject key identifier: DA:93:0D:5C:98:E8:73:6F:D7:34:66:5E:23:E4:2D:E5:AF:5C:73:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA3CC96C8BB11EF82FD0496762E951A.roa
Signing time: Thu 02 Jan 2025 03:44:53 +0000
ROA not before: Thu 02 Jan 2025 03:44:49 +0000
ROA not after: Mon 13 Dec 2027 03:44:49 +0000
asID: 17561
IP address blocks: 154.221.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78294 (0x131d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:44:49 2025 GMT
Not After : Dec 13 03:44:49 2027 GMT
Subject: CN=67760bb5-e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:f3:68:0e:f0:2c:81:3e:7c:93:66:31:a0:
d3:52:6b:96:06:1a:39:c2:1c:a7:f3:c2:80:2f:52:
41:7b:9a:fa:59:03:5f:da:e9:54:49:87:f3:3e:1a:
49:5e:35:72:94:de:40:e3:f2:bc:a7:94:08:6a:18:
db:b0:ca:54:9a:2f:3b:77:04:7c:8d:ae:61:b6:ac:
61:0f:df:fd:4c:2f:51:4d:33:3d:4f:6f:ea:47:f8:
2b:5a:8b:53:af:21:ee:e3:a7:a1:a5:83:80:19:d9:
b8:84:cd:81:a8:e7:fb:4a:2f:54:8d:62:47:e3:4e:
e6:8a:cd:ad:9f:b1:6c:20:34:d3:75:98:d9:a7:39:
5a:d5:cb:34:f4:ea:d4:f6:b9:12:75:18:03:3b:d5:
56:4f:2e:78:80:10:80:1b:c6:f2:89:a2:ec:e7:7a:
a7:a3:11:3c:9a:be:c8:d9:11:23:05:1b:bd:86:6f:
ee:16:31:ff:7e:4c:82:39:0e:2c:4d:81:a8:94:aa:
f4:25:14:08:25:71:01:e6:0e:b0:d9:70:50:8a:ec:
fb:0c:ad:0c:da:d0:cd:22:39:9c:d4:d5:cf:6f:74:
26:05:8f:8d:56:c1:78:26:88:e8:b4:fd:b1:ec:6f:
61:d3:a5:b4:5d:93:d4:f7:cd:23:2c:38:fe:53:6a:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:0D:5C:98:E8:73:6F:D7:34:66:5E:23:E4:2D:E5:AF:5C:73:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA3CC96C8BB11EF82FD0496762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:34:6f:26:1d:4d:0e:31:5a:4b:8b:1a:78:9c:d1:06:94:12:
31:9f:04:b6:04:e9:9f:47:d2:8a:c5:67:b1:ce:82:7d:f8:6a:
df:a4:f7:c6:94:5e:27:31:51:96:e3:33:cc:c2:58:51:57:2d:
a3:32:f3:dc:a3:72:8b:60:86:1d:a5:e2:27:55:9c:d8:7b:f5:
ad:b4:3f:3c:ae:01:63:b9:47:51:9d:e8:b5:d9:3f:29:70:cd:
5b:6e:0e:78:4e:0b:34:8f:bd:e5:08:cb:c5:46:35:d1:31:7e:
a2:b8:82:62:0d:cf:8c:80:2c:e7:ca:c6:ba:12:1c:b8:dc:66:
42:79:d8:1d:fa:7b:79:89:0d:d3:4a:6e:1e:66:63:05:1f:a7:
b1:fb:93:cf:86:31:93:ec:f7:c0:43:af:9f:b9:d2:99:95:b3:
89:61:42:53:58:0e:06:71:9c:d4:d4:ee:03:22:3e:84:49:f2:
d9:0f:49:af:43:55:2d:55:bb:d9:de:dd:6d:a3:3b:65:67:63:
b8:31:b3:ad:77:c7:79:a3:c2:dd:d3:05:d0:3f:0a:28:9b:fc:
f7:39:fc:c2:d6:b7:7e:48:78:b7:09:f2:09:a5:e8:bb:a0:aa:
39:36:ec:27:73:17:9f:11:c4:6b:4d:f2:c1:22:e6:61:7c:30:
e7:1a:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:47 2025 by rpki-client