Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD6EF3C0E1511F081A1714E762E951A.roa
File: 0BD6EF3C0E1511F081A1714E762E951A.roa (raw, json)
Hash identifier: E9Gbom7vyerJDvFcqGnAa4jpVCAt9/P3++IAoIID3s0=
Subject key identifier: 1A:15:27:24:80:25:BC:D8:EA:DD:BB:F0:42:A4:FC:E6:A0:1F:15:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017712
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD6EF3C0E1511F081A1714E762E951A.roa
Signing time: Mon 31 Mar 2025 09:46:40 +0000
ROA not before: Mon 31 Mar 2025 09:46:37 +0000
ROA not after: Fri 09 May 2025 09:46:37 +0000
asID: 396073
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96018 (0x17712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 31 09:46:37 2025 GMT
Not After : May 9 09:46:37 2025 GMT
Subject: CN=67ea6480-f801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:0f:e2:25:ad:d0:ef:d4:07:c7:db:61:e3:
fc:78:9a:f9:af:78:95:e8:dc:9c:1b:b4:aa:cf:27:
98:14:de:be:c4:ec:84:2f:02:7e:96:4c:38:a3:4b:
3a:77:da:72:7b:06:7b:55:76:bd:7b:50:17:9b:a8:
8a:c7:db:dc:55:f6:d9:ef:20:1b:1d:0e:58:42:9c:
dd:24:d3:00:9b:5b:62:63:3a:48:0d:c2:ec:d3:33:
f1:e8:83:73:c4:f1:61:2a:c8:6e:62:0b:fd:a2:e0:
08:91:ce:97:51:98:c3:2c:3c:60:12:3d:cf:d1:25:
00:f8:07:22:86:79:8e:d1:af:bf:3f:bc:03:00:88:
54:69:d2:d3:dc:3d:54:73:d4:06:41:4f:65:9a:75:
c5:c3:60:e3:5a:39:26:b8:c6:a0:20:34:e7:56:f3:
4e:77:20:ea:f3:91:a5:7e:94:f1:2e:51:f6:b1:8d:
9d:49:75:bb:6f:3e:5d:7b:3f:71:6e:43:01:46:eb:
ab:5b:8d:b1:21:76:be:e6:d4:12:75:14:07:b4:c8:
79:fd:25:e9:89:e2:56:08:ad:f1:b5:aa:4d:58:53:
d2:a9:d7:c3:ff:c5:f5:73:14:31:5f:d4:ec:5c:e1:
3e:5a:64:88:d9:a3:42:e7:8d:88:21:63:27:df:1e:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:15:27:24:80:25:BC:D8:EA:DD:BB:F0:42:A4:FC:E6:A0:1F:15:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BD6EF3C0E1511F081A1714E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1a:d6:66:85:69:92:25:22:a2:a5:90:7f:c1:cf:4a:f8:f1:
d4:d3:23:d8:03:4f:66:a9:5c:91:47:9c:84:4c:9f:cc:df:78:
68:30:36:4c:33:a9:d1:57:27:24:73:4d:71:91:9b:e8:0e:0e:
e5:90:cc:42:88:62:43:05:25:9c:35:49:71:a0:47:7d:9a:b6:
96:cf:58:1e:52:00:5a:09:83:99:9d:98:07:7b:6c:7b:6a:dd:
36:fb:95:6e:a5:60:53:d2:3f:aa:4e:b1:f4:e3:68:d7:4b:4f:
dc:76:c1:73:7c:f5:84:f2:65:5d:5c:16:39:72:b3:75:e3:bc:
88:a8:ab:24:08:dc:48:66:2d:78:68:54:e1:6b:be:91:7d:47:
bc:c4:6f:93:db:2f:fa:dc:f3:68:08:25:a4:91:e8:3a:32:15:
d0:94:6e:d1:cc:e9:20:b3:b4:93:fe:68:eb:29:74:39:30:c5:
6c:23:53:4f:47:19:d9:01:ac:76:8d:ca:0c:b3:95:b2:bf:98:
d3:4e:b2:8b:a7:be:8a:90:5b:c2:85:5d:b2:4f:aa:56:27:65:
0d:cf:70:c4:81:7f:de:24:13:0b:f2:54:f8:04:99:79:bb:6f:
27:58:c1:d3:b3:af:c9:85:2d:70:81:75:cc:27:bc:13:64:75:
23:63:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:03 2025 by rpki-client