Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07AC8FFCF3E411EFA5225FBE762E951A.roa
File: 07AC8FFCF3E411EFA5225FBE762E951A.roa (raw, json)
Hash identifier: 8UZ8oN1a1aS8YtwZfOXd8g1oPxXg7QdpLxvR9WkQyFY=
Subject key identifier: DE:3A:77:FA:CD:F0:21:3A:3D:08:C3:2C:FC:BC:07:D0:14:85:BF:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01606C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07AC8FFCF3E411EFA5225FBE762E951A.roa
Signing time: Wed 26 Feb 2025 01:50:18 +0000
ROA not before: Wed 26 Feb 2025 01:50:14 +0000
ROA not after: Thu 19 Feb 2026 01:50:14 +0000
asID: 984
IP address blocks: 154.92.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90220 (0x1606c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:50:14 2025 GMT
Not After : Feb 19 01:50:14 2026 GMT
Subject: CN=67be735a-7f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:a3:7c:51:53:f3:8d:4b:d1:8b:20:7f:ea:
05:8a:ce:78:f3:03:52:d1:aa:b5:88:63:73:4a:77:
99:5f:85:f6:a9:aa:56:99:21:18:57:8b:6a:f6:f3:
10:10:f2:37:30:e5:92:5a:99:e1:28:eb:2f:00:2c:
fe:e1:5e:7a:f7:86:15:7e:29:46:40:d0:3d:99:91:
18:c4:55:f9:67:b5:4a:7c:2b:cc:ea:f0:e3:c6:17:
ce:2e:dd:bd:3d:02:dc:3f:f3:3e:68:9f:74:6b:82:
d9:06:70:cb:ae:b7:28:23:9e:41:c9:f6:14:3d:c4:
49:40:1d:5a:81:39:1a:75:65:a2:94:ce:29:14:32:
39:45:02:b1:3e:91:d2:92:3a:ea:bd:a8:e2:d4:b4:
2f:5b:85:11:d8:76:eb:e7:2e:c4:4a:ae:ef:67:07:
05:d4:46:16:be:ce:fd:36:fe:b4:ed:cf:82:05:52:
3f:e3:31:7e:f1:8b:ba:ec:fc:a5:ae:b7:a9:58:14:
91:51:f8:cc:cb:b6:c1:1e:fa:19:c8:02:c7:94:e3:
e7:f4:e0:19:c4:3a:82:a1:24:20:a5:57:72:8d:04:
7a:2e:0b:29:77:82:0a:13:1d:ff:53:4f:f9:26:39:
9e:04:a0:cc:e4:1f:6f:a9:dc:34:e0:9b:71:c8:3a:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:77:FA:CD:F0:21:3A:3D:08:C3:2C:FC:BC:07:D0:14:85:BF:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07AC8FFCF3E411EFA5225FBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.243.0/24
Signature Algorithm: sha256WithRSAEncryption
92:50:0c:ff:fc:ee:a9:6a:37:68:51:34:ff:d5:6d:85:9a:a3:
2e:ab:d4:9e:a7:ac:95:b4:f0:45:f4:c6:1e:5f:22:22:bf:c2:
06:35:0a:cb:e4:df:66:05:27:b9:f5:27:77:3e:de:79:2c:74:
0e:2d:0c:fc:7f:bd:40:6a:86:12:ee:c1:0f:c1:4f:a1:b6:09:
a0:31:8d:07:af:c2:d2:1b:24:5a:2e:e6:29:ea:c1:4a:a0:00:
7a:d8:ab:fb:f5:d8:2e:52:7b:d4:6d:2f:21:9e:55:d9:cc:a2:
99:17:83:a5:b2:b9:10:d5:06:bf:6b:49:42:fb:26:bd:c8:a3:
b4:cb:6a:59:73:90:88:eb:5b:43:57:42:db:bd:d7:92:3f:0c:
a8:eb:fa:c6:91:ed:b6:72:5c:43:1b:f7:44:28:f6:5d:f7:46:
2d:82:3d:77:26:f6:2f:37:28:03:f4:f2:f6:a2:fe:b8:d5:22:
85:49:27:1d:53:a0:04:0a:7d:00:70:b0:70:65:e8:25:0e:6a:
5c:e1:dd:66:58:6c:e3:f5:e8:0b:29:7d:53:05:35:b8:c2:05:
0e:38:5b:66:83:e0:41:d3:35:a8:84:5a:29:cf:7c:d7:9a:94:
6c:ce:25:6d:12:75:4c:36:ae:76:3e:47:67:38:90:63:b3:2b:
90:6e:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:20 2025 by rpki-client