Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049AC840F3E111EFBB6083A8762E951A.roa
File: 049AC840F3E111EFBB6083A8762E951A.roa (raw, json)
Hash identifier: Q6HL5El9VvlTUuKGfR1Veyva2tPsEZ2iKevTkcUVxnI=
Subject key identifier: 6B:37:B4:8F:B1:30:54:F3:63:78:A8:31:74:80:28:4B:CF:40:D0:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01605C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049AC840F3E111EFBB6083A8762E951A.roa
Signing time: Wed 26 Feb 2025 01:28:44 +0000
ROA not before: Wed 26 Feb 2025 01:28:40 +0000
ROA not after: Thu 19 Feb 2026 01:28:40 +0000
asID: 984
IP address blocks: 154.92.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90204 (0x1605c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:28:40 2025 GMT
Not After : Feb 19 01:28:40 2026 GMT
Subject: CN=67be6e4c-e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:85:ea:ca:c5:5b:03:ff:65:ae:25:87:ed:
8e:b0:23:bb:4b:32:dd:3b:33:78:7c:c1:4c:0b:c2:
7d:87:9f:e0:18:9a:40:2c:c6:cd:52:12:90:98:02:
22:7f:cb:19:75:b4:2f:da:a9:86:85:45:bc:90:2a:
3c:16:c6:c7:c7:48:73:87:80:e7:7f:15:c7:22:64:
83:c6:c1:7c:6d:cb:0d:84:86:9f:d8:ff:a4:d8:6f:
d2:58:b0:16:53:d7:d6:91:ad:d4:73:fa:51:ce:5c:
b1:60:43:a6:c6:c7:49:26:ea:06:5a:1c:c1:d5:3c:
99:e7:de:0f:d6:f5:5c:9a:46:34:1a:fd:18:ec:6d:
38:c7:7b:f9:04:52:9d:1b:b3:cd:98:7a:35:ce:62:
3f:a1:d9:ad:98:e2:d7:a6:7d:4e:d2:e7:76:5c:aa:
94:aa:89:86:76:53:56:79:2f:4d:de:a3:cc:ac:72:
42:9a:df:c7:ac:46:7c:39:d2:6b:6f:f4:7c:85:69:
27:99:78:10:04:e1:94:e3:71:60:5d:c2:c3:51:d0:
3a:f8:6e:f8:7d:44:3d:f8:66:45:96:ed:ea:6d:ae:
fe:68:a1:61:ce:eb:9b:af:8e:66:6b:f7:b6:26:bd:
be:73:57:0b:28:c0:65:d9:58:6c:12:15:53:24:9e:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:37:B4:8F:B1:30:54:F3:63:78:A8:31:74:80:28:4B:CF:40:D0:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049AC840F3E111EFBB6083A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:91:54:70:04:de:e4:a0:ed:7d:fc:8f:e5:e2:b9:66:6c:40:
f5:06:c0:71:21:10:a1:e1:89:91:a8:06:84:cd:64:f0:e2:37:
84:97:4d:32:4f:44:1a:c5:57:1c:13:cf:c1:0a:dd:21:3e:c4:
39:e6:01:58:c0:90:7a:05:38:4a:f2:97:05:bc:85:e0:03:a3:
9f:41:95:99:aa:3f:81:0d:21:91:a5:8e:4a:cd:fc:fd:09:d1:
97:da:05:0d:7b:50:14:fe:7e:55:ce:e1:81:13:6e:13:45:58:
92:a4:11:70:32:be:60:06:8d:7c:19:6e:e3:a2:1a:97:ad:ed:
98:62:66:43:28:26:31:08:a7:e5:48:8a:39:3a:28:ad:bb:e6:
0f:f7:15:48:58:94:2a:ca:7b:f3:28:08:a0:b0:b8:d7:b6:b8:
01:ed:5a:51:99:08:28:92:f3:09:93:3e:61:00:e3:1c:d1:04:
97:72:cc:38:84:28:fd:74:59:78:51:d2:44:92:04:e0:78:f3:
2d:7d:1c:a1:3d:82:8b:d5:b2:77:12:06:2a:5c:4c:19:3e:06:
8e:b0:d5:f4:b7:d4:2e:03:2c:be:4f:7d:61:79:7b:c3:e9:e8:
1a:29:2f:e4:3a:ff:b3:1b:9c:cf:01:39:0d:94:f6:8a:9c:f8:
32:47:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:36 2025 by rpki-client