Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A7BE78F43211EF9E398263762E951A.roa
File: 09A7BE78F43211EF9E398263762E951A.roa (raw, json)
Hash identifier: +Z4SBCuhQ82huqTvTfsQbCRIcYBu2ZxnIEHmoTgJbCE=
Subject key identifier: 6C:9C:50:6B:8C:86:1C:5B:15:EF:FC:F7:42:06:2A:CB:DD:B3:74:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016277
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A7BE78F43211EF9E398263762E951A.roa
Signing time: Wed 26 Feb 2025 11:08:42 +0000
ROA not before: Wed 26 Feb 2025 11:08:38 +0000
ROA not after: Thu 19 Feb 2026 11:08:38 +0000
asID: 984
IP address blocks: 154.208.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90743 (0x16277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:08:38 2025 GMT
Not After : Feb 19 11:08:38 2026 GMT
Subject: CN=67bef63a-7757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:9f:8c:f4:84:6e:74:89:a1:20:04:11:13:
3f:6b:98:fb:7d:8d:bd:22:ce:42:f0:73:a4:d2:41:
0f:6e:3b:32:7d:18:0b:19:91:89:29:6c:c6:cc:70:
8c:3e:dd:00:d0:fa:9f:10:dd:44:ef:56:4e:e7:0a:
cb:f6:bb:e8:72:6f:98:db:b4:76:59:31:44:37:6f:
21:1d:71:4e:db:7a:3a:26:24:2f:c8:1d:26:ff:c7:
79:75:2b:05:17:b6:56:af:07:16:b2:4d:3e:c9:f4:
91:a6:e0:c2:df:4f:54:e8:f3:be:6b:c8:03:12:43:
69:97:38:7c:04:e0:61:cc:1c:34:02:98:b9:d8:38:
86:35:5e:32:c7:55:08:f1:20:da:5f:c1:2e:51:ac:
d8:61:4f:0f:5d:31:6e:f0:2d:ec:bc:3c:23:1c:9d:
2e:99:1c:82:ba:12:51:24:be:32:b6:cf:54:d5:04:
20:9f:be:1d:4d:32:0b:90:86:31:6a:ea:45:fd:ae:
38:ac:86:42:06:8d:6f:15:d4:8a:81:82:e7:8c:f1:
bb:5d:5a:24:30:e4:33:53:de:07:8a:ff:81:8e:45:
62:b6:eb:e9:8b:10:85:86:cc:69:d0:fd:c4:59:5a:
7f:fb:7e:f5:20:73:53:cb:2f:be:6a:5e:ae:e8:97:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:50:6B:8C:86:1C:5B:15:EF:FC:F7:42:06:2A:CB:DD:B3:74:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09A7BE78F43211EF9E398263762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:51:18:9a:49:06:d8:ec:cd:92:ed:3e:a1:20:f1:46:eb:d4:
5b:c5:b1:dd:a3:fa:1f:66:b4:9e:4c:de:13:12:c5:31:4f:9c:
53:ba:14:38:55:6e:74:77:c3:8a:ce:ee:e2:d3:a3:02:8e:ac:
e4:03:6c:57:a2:43:a3:92:0e:ae:13:03:d4:d4:5d:68:71:3a:
5a:56:66:08:64:81:9f:b1:74:6b:ad:64:a2:e1:8e:81:cc:ee:
a1:6b:37:a8:5b:ce:6d:8d:e5:74:42:e7:1b:50:76:e2:fa:ab:
5d:a5:db:a5:3f:6a:db:a1:ca:ef:73:47:58:3e:5b:d9:83:37:
33:ab:8b:55:5c:2c:5a:4e:ee:47:d7:72:fd:e7:05:d5:9d:e1:
be:81:a8:75:52:d6:1f:14:ff:d1:81:89:fb:eb:0a:5f:e8:79:
dc:db:51:26:9b:62:3d:5e:a5:cf:3c:0c:13:98:28:cb:06:f1:
88:76:22:b4:ee:e1:c1:86:d5:7e:c9:44:79:75:e7:77:5e:a6:
29:29:51:dc:3e:35:26:ae:fd:ba:95:82:ad:87:4d:d5:22:c6:
33:70:e8:a4:fe:ed:6c:52:86:f3:3c:23:73:99:16:c9:f8:80:
a1:9e:a2:73:d7:82:b1:d6:97:d8:93:5e:74:44:5a:7d:a9:fe:
7c:4b:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:29 2025 by rpki-client