Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A514A40D2C11F0B012F14E762E951A.roa
File: A3A514A40D2C11F0B012F14E762E951A.roa (raw, json)
Hash identifier: F9b8O4Pg2KmX9wBKmwNbL2JxAjx1K2Hq3+ILKPJD4hA=
Subject key identifier: 21:5C:38:21:43:1F:F8:AE:F1:BC:82:C5:FE:CD:9B:29:30:3D:7F:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A514A40D2C11F0B012F14E762E951A.roa
Signing time: Sun 30 Mar 2025 06:03:02 +0000
ROA not before: Sun 30 Mar 2025 06:02:58 +0000
ROA not after: Mon 05 May 2025 06:02:58 +0000
asID: 61112
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95997 (0x176fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 06:02:58 2025 GMT
Not After : May 5 06:02:58 2025 GMT
Subject: CN=67e8de96-425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:76:1f:0d:d2:4a:4a:00:41:50:d8:23:52:fe:
85:a4:5a:5e:25:08:81:9f:80:d2:4e:2c:6c:47:39:
bf:f2:e4:e3:1a:14:5e:8d:04:c3:b2:3b:5a:d3:62:
da:18:1a:9e:38:08:43:29:dd:3c:81:f3:44:e6:e4:
ee:68:51:b4:3f:83:9e:2a:6d:71:a1:f3:28:34:6b:
3d:f1:1f:dc:f4:4c:f9:92:6c:56:bf:cb:5c:d7:aa:
7e:ac:76:9d:cb:12:c4:64:17:d0:4d:4f:e4:bb:aa:
da:36:8c:c0:f8:7f:f8:cc:54:31:67:fe:d5:00:6c:
78:1c:66:8e:ce:ff:cf:32:39:66:8d:10:f1:04:06:
12:87:a7:7a:47:a7:5a:54:3b:09:d3:84:52:69:7b:
88:bf:80:38:12:c8:f3:50:b3:15:93:08:1d:1d:a7:
ac:31:40:7e:44:84:27:94:fb:1b:24:be:13:f4:ee:
de:a9:b8:63:4e:a5:e7:1a:40:34:ea:82:6a:47:58:
43:70:b9:9e:82:74:10:c9:82:f3:a3:4c:57:29:7d:
d4:27:4e:ca:67:b9:25:5c:16:f3:42:94:2a:c3:e7:
dd:51:ef:23:50:3f:2d:06:91:22:42:fd:c4:57:94:
74:88:d7:82:03:db:95:1b:c1:51:ae:09:e1:20:d0:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:38:21:43:1F:F8:AE:F1:BC:82:C5:FE:CD:9B:29:30:3D:7F:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3A514A40D2C11F0B012F14E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
39:6e:59:3d:b9:35:37:91:45:54:fa:2f:23:15:ba:ba:8d:c8:
da:13:d3:a2:5d:24:20:03:a3:ef:8a:af:03:23:5d:82:17:a6:
89:31:27:38:f5:ef:b7:ab:8a:d4:40:a7:3f:b6:d5:cd:e5:ff:
d3:a6:55:38:86:d9:0e:1e:07:1f:6d:2d:be:8a:9a:12:55:41:
1e:6a:df:57:50:8e:98:4c:76:b9:6e:88:11:ff:d3:aa:fc:9a:
4b:17:aa:f2:73:08:33:1c:b3:8c:0b:fd:0a:f9:34:39:ac:2e:
c7:72:41:75:83:10:6e:b9:cf:a5:cd:9c:52:61:2d:47:2d:8c:
5c:63:fd:af:99:1f:b6:fe:83:4e:69:c3:38:f6:0b:6c:ec:c2:
bd:d1:97:94:01:db:ad:3a:07:3f:84:b5:f5:30:55:82:4b:60:
01:44:b1:e7:0a:32:35:47:e8:8f:d7:d0:72:f3:7c:07:6c:ab:
ce:f1:21:93:6b:86:e9:92:b4:be:fb:66:c5:e4:48:23:35:ba:
b0:ad:9c:63:1b:6c:7b:a2:2d:6b:f1:2a:66:ee:18:b3:bd:14:
45:a2:2e:8b:b9:24:63:1c:c4:51:f5:f2:2d:53:f1:49:1b:da:
f6:d9:c0:fa:ff:ca:8b:27:4a:d8:45:e6:d3:c2:b4:d6:b2:5d:
31:c4:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:54 2025 by rpki-client