Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162F6998E2D511EFA5B4814C762E951A.roa
File: 162F6998E2D511EFA5B4814C762E951A.roa (raw, json)
Hash identifier: wdRW5vWxR7I1DCRFfxUQyKWGJVEnD8B/zF8vTgNmMbg=
Subject key identifier: 46:88:BD:C5:CD:A4:EA:09:95:D2:8D:E7:D9:E7:CE:B8:02:A8:12:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162F6998E2D511EFA5B4814C762E951A.roa
Signing time: Tue 04 Feb 2025 08:50:30 +0000
ROA not before: Tue 04 Feb 2025 08:50:26 +0000
ROA not after: Wed 30 Apr 2025 08:50:26 +0000
asID: 18229
IP address blocks: 154.210.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86200 (0x150b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:50:26 2025 GMT
Not After : Apr 30 08:50:26 2025 GMT
Subject: CN=67a1d4d6-03c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:27:e8:95:36:d1:63:ed:7f:9f:b0:b9:db:
61:7e:ba:39:08:ac:8d:eb:ce:13:e4:21:97:87:7a:
83:c9:60:9f:32:7e:6c:59:d6:30:a8:a1:38:d1:ad:
39:32:02:d6:b4:3e:e3:bd:b6:f0:7b:35:98:d9:bd:
74:c3:88:4d:b7:5e:a0:dc:1f:cd:a1:24:5d:e0:db:
88:d4:0a:6d:1f:53:03:9e:1b:2c:b7:2a:57:9e:8c:
04:21:39:c0:fd:43:92:26:48:63:b1:5d:34:c4:cb:
bf:e7:7a:53:06:b1:2c:b7:e0:f6:17:ae:10:29:05:
cd:85:a1:a4:ee:64:d0:1c:01:3c:c2:ec:ee:a8:78:
08:6c:6f:e5:42:18:57:e5:ba:76:4f:7b:3e:e4:53:
d2:62:74:8b:f8:a6:d2:bf:94:cf:51:c1:ba:c4:60:
3a:fa:71:b2:eb:51:5a:2f:55:42:5f:c3:a9:d5:49:
38:bd:d8:b5:1e:5f:73:c5:51:ca:f8:31:56:fe:ab:
94:75:4b:c2:b0:95:39:03:d6:b5:a0:b9:12:04:65:
32:83:5b:64:f0:22:17:b7:b9:3b:4b:ce:2e:a2:53:
61:92:50:2b:39:b0:a8:a9:a3:a1:d9:7a:e8:06:19:
e8:68:3d:b0:fe:b1:cd:bc:f3:4a:1d:b1:6e:c8:80:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:BD:C5:CD:A4:EA:09:95:D2:8D:E7:D9:E7:CE:B8:02:A8:12:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162F6998E2D511EFA5B4814C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.208.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:20:05:db:d0:35:c7:7e:45:5e:04:5c:b4:98:0c:40:2c:
74:47:a6:f8:2d:6c:b5:87:f9:b8:46:fa:d8:af:74:f2:fa:ae:
1a:50:73:64:6b:d2:3f:85:91:7e:5d:3f:bb:32:75:2c:12:73:
79:cc:b8:8b:12:1d:69:42:33:3e:44:60:87:46:df:7f:38:17:
8e:a9:f5:e7:2e:5d:e0:1e:7d:22:54:a4:e1:cd:49:50:b0:83:
df:94:5d:3b:1a:d4:31:11:76:29:a8:e4:f9:a6:d9:d4:3c:f5:
0b:52:c4:47:57:ac:8b:a8:0e:b5:23:29:fa:51:4b:c5:b3:a6:
2e:96:de:1b:7a:c5:ba:71:bf:63:e3:d8:3e:25:10:f4:f4:54:
c1:23:a9:43:6b:bd:90:94:cd:99:ba:8f:aa:2f:19:8e:65:b8:
f6:8d:53:dd:8e:21:c8:67:72:0c:44:29:e6:5d:98:90:95:9b:
64:17:fd:50:a9:bf:90:e0:98:f4:86:75:93:c8:78:47:a2:57:
02:fd:8e:b9:d7:e8:48:b0:13:6e:af:18:97:46:3f:74:ff:5a:
59:03:e0:70:3e:b8:0f:dd:14:70:14:1a:c4:07:33:a1:b2:a9:
64:f7:f0:78:a9:56:62:4a:89:9b:f1:dd:f7:b2:85:6b:6b:0d:
99:71:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:00 2025 by rpki-client