Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE275E4144811F0975E2173762E951A.roa
File: ECE275E4144811F0975E2173762E951A.roa (raw, json)
Hash identifier: XcnhAft4TfXPeQ5Vp+DN/Zgpknh2gHZmIN3wWdk6sSs=
Subject key identifier: 2C:51:57:07:37:F1:1A:8C:53:55:AC:38:2C:F6:81:B7:D2:41:B1:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01784E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE275E4144811F0975E2173762E951A.roa
Signing time: Tue 08 Apr 2025 07:13:09 +0000
ROA not before: Tue 08 Apr 2025 07:13:05 +0000
ROA not after: Wed 14 May 2025 07:13:05 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96334 (0x1784e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 07:13:05 2025 GMT
Not After : May 14 07:13:05 2025 GMT
Subject: CN=67f4cc85-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:30:a6:df:e5:62:3c:ed:2c:dd:62:be:9c:
4a:cd:7b:1b:6e:37:92:fb:5d:fc:fe:55:c2:5a:93:
42:51:b4:a3:56:66:a9:0a:ea:1f:c9:4a:db:f6:86:
92:eb:74:99:3f:5a:1c:e9:fb:38:1c:dc:57:5f:06:
12:11:80:19:53:fe:db:8b:8b:36:7f:6b:b5:cf:21:
f2:59:62:dd:08:76:e2:85:b3:8b:7a:14:ef:06:84:
0d:c9:a5:e0:2f:56:f5:36:f5:ca:93:60:59:e3:10:
4b:bc:f0:4c:ad:83:a0:4a:a0:eb:f3:34:1b:3d:3b:
a2:f6:02:c5:ae:b6:58:89:d8:2f:f2:11:08:18:c9:
73:3a:a1:02:95:9b:69:79:36:3a:b7:e9:6d:30:19:
1e:ac:36:23:1a:30:16:fb:a2:21:b2:1b:f9:10:3c:
53:07:dc:13:50:85:27:b7:1f:cb:62:7c:91:e7:aa:
f7:47:52:08:74:99:13:10:b4:be:1f:17:2d:44:49:
34:4b:67:d6:db:c8:71:07:08:86:0b:5d:b6:0f:d9:
32:91:3d:d7:e7:3c:84:3c:0e:03:22:5b:c1:a3:93:
e4:09:9a:e9:2b:f7:29:c1:6f:cb:14:cf:7f:80:d8:
78:4f:77:07:aa:92:b4:02:cd:59:a1:f9:62:fd:77:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:57:07:37:F1:1A:8C:53:55:AC:38:2C:F6:81:B7:D2:41:B1:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE275E4144811F0975E2173762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0a:94:f9:ce:a8:1f:11:30:66:07:6c:39:e8:d4:87:08:85:
0f:84:35:a0:d2:30:e9:6a:7f:8c:6d:5d:56:80:c3:7f:f4:1d:
00:6e:23:c7:4e:91:09:02:1e:ec:cd:2a:8b:18:dc:58:d0:b8:
63:71:db:2b:46:c9:da:68:06:ca:aa:39:e4:08:b2:21:5f:0e:
f8:5c:a3:c6:d0:25:dc:e8:35:9d:9b:78:ea:53:78:f0:c6:69:
f7:b4:d4:26:26:a0:08:b2:7a:d8:3e:46:04:c2:f9:46:3f:f7:
dd:10:71:a2:f3:4d:ba:25:12:23:17:f9:a1:b7:1b:ae:24:e1:
70:a3:91:42:f8:e5:b9:5f:dd:c5:fd:7a:cb:97:4b:3d:4d:b0:
32:af:2d:b3:f6:51:17:31:ce:f9:02:4d:4c:9c:e7:93:a5:f4:
40:64:19:b7:cf:69:2c:9b:bb:80:14:21:09:4e:4a:28:7c:16:
e7:61:32:1f:c8:e8:19:7d:07:f3:ac:a4:78:08:ee:9a:7c:52:
b4:22:d8:d8:41:5a:85:fc:25:52:27:8f:4f:c7:a9:1d:68:d8:
2a:38:ab:7a:e1:a1:d6:92:de:cc:d2:27:6c:28:8f:3a:d4:89:
b4:18:cb:03:ea:59:b2:94:99:80:02:75:d9:b2:ec:16:ff:f4:
e3:68:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:05 2025 by rpki-client