Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043322EAF4AD11EF95A4BFB9762E951A.roa
File: 043322EAF4AD11EF95A4BFB9762E951A.roa (raw, json)
Hash identifier: sJvv014L8wzAr+sfB+4y1n/cqTUSNJ1jNiHS2/VbUNA=
Subject key identifier: 62:2A:B6:4E:DA:EA:BA:ED:39:5B:C9:0A:47:C3:3F:A2:56:0A:F6:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043322EAF4AD11EF95A4BFB9762E951A.roa
Signing time: Thu 27 Feb 2025 01:49:01 +0000
ROA not before: Thu 27 Feb 2025 01:48:57 +0000
ROA not after: Thu 19 Feb 2026 01:48:57 +0000
asID: 984
IP address blocks: 154.200.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91682 (0x16622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 01:48:57 2025 GMT
Not After : Feb 19 01:48:57 2026 GMT
Subject: CN=67bfc48d-e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:79:02:6d:b0:d9:8b:74:34:19:b8:79:9d:
83:48:cf:23:8b:1c:8b:9b:12:82:9a:ee:4c:25:26:
3f:ad:6a:4d:47:f7:60:11:7a:f1:5a:5d:c9:7e:42:
21:6f:c5:e2:4d:51:a9:70:61:ed:e4:0a:c8:dc:97:
5f:34:58:1d:6a:c3:ea:2e:10:1e:97:88:7b:d4:be:
82:68:d7:e8:78:03:6e:ff:c3:7c:2e:c0:86:98:d3:
c7:23:71:a1:07:16:00:9a:d5:23:2c:ec:9c:8d:ff:
00:87:47:e3:a6:c2:d5:40:10:9a:d1:4a:aa:c6:60:
36:8f:80:83:c4:49:19:4a:1d:da:1d:64:5c:ae:3c:
c4:aa:85:c3:19:f0:b9:9f:d8:06:81:3f:10:d9:12:
62:7b:50:f3:8f:a8:37:cf:31:9a:2b:e6:a0:64:5a:
74:a7:b2:86:07:6f:e8:11:cf:14:d4:b6:0b:58:ff:
4e:bd:ce:f2:71:e8:ad:3a:0a:80:ba:9b:e5:eb:c7:
08:95:47:66:0c:2a:06:69:41:be:79:d9:37:2b:8b:
09:7d:78:6a:a4:2a:d2:ca:4b:94:3d:f3:c7:f0:e9:
78:86:08:aa:e7:41:36:64:cd:a8:6f:e9:d0:bd:16:
65:bb:07:e4:47:75:1a:b2:89:e0:3b:8f:43:13:bf:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:B6:4E:DA:EA:BA:ED:39:5B:C9:0A:47:C3:3F:A2:56:0A:F6:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043322EAF4AD11EF95A4BFB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.72.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:25:6a:66:ab:14:d1:36:83:f3:26:4f:d8:a6:cc:5a:60:dd:
a5:48:f3:e4:bd:c8:34:ca:18:fe:25:7e:3b:7f:c4:18:ea:a5:
b1:25:4a:f7:cf:97:f4:aa:40:27:f0:23:e0:8f:14:6a:b3:a2:
4f:30:b0:ef:1e:09:da:03:d4:48:e1:24:13:ad:36:bc:64:6e:
01:cc:3f:7a:43:e4:b0:f7:0c:29:f7:b7:e0:21:7a:c5:e6:ee:
d8:cc:67:db:d5:07:a6:80:03:f9:36:6c:a1:74:c3:21:b1:25:
69:22:50:e8:7b:1b:38:52:14:c1:7e:ad:1c:d0:2b:2c:6c:31:
5f:32:cf:73:d1:1d:81:2c:ac:34:a2:67:0a:99:1b:c6:8b:b7:
09:f1:d9:83:e4:5d:df:1f:85:12:cd:a3:95:37:d3:a5:86:d2:
0f:0e:33:0c:cb:ca:0a:ca:7b:07:59:1f:a6:b9:17:9d:df:9a:
8f:56:90:ea:5f:65:7c:22:78:7e:24:c7:24:eb:8a:3c:b4:e9:
9c:41:06:51:31:cd:a5:4f:63:04:94:dc:9c:ff:bc:37:ae:ec:
5f:92:b9:f6:64:73:9e:95:7c:8a:ba:90:74:ce:5d:d8:90:77:
1f:30:20:74:7e:d2:8d:32:20:d6:e7:75:70:2e:69:cc:fc:85:
f7:cd:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:57 2025 by rpki-client