Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E69108F43811EF9DCCBA8E762E951A.roa
File: 16E69108F43811EF9DCCBA8E762E951A.roa (raw, json)
Hash identifier: 9Ub0VcJlfbr/52xPFjRi68Uit3qFVTawxx2lxQ4if+Y=
Subject key identifier: B7:55:C9:BA:E0:17:E8:1A:0F:E2:7F:9D:1B:0F:27:B0:1C:62:6C:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E69108F43811EF9DCCBA8E762E951A.roa
Signing time: Wed 26 Feb 2025 11:52:01 +0000
ROA not before: Wed 26 Feb 2025 11:51:58 +0000
ROA not after: Fri 20 Feb 2026 11:51:58 +0000
asID: 984
IP address blocks: 154.199.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90826 (0x162ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:51:58 2025 GMT
Not After : Feb 20 11:51:58 2026 GMT
Subject: CN=67bf0061-cf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:57:08:4d:d7:e3:d6:7f:a5:c2:b4:65:8d:
02:85:70:9e:1c:cb:86:0a:22:b2:cc:16:ac:bd:90:
ba:7f:d1:4d:42:bd:45:1a:fb:81:3b:6d:c4:21:a8:
41:35:9c:fc:43:e7:78:6f:ba:59:a7:65:78:47:3d:
9f:fa:65:e4:53:e4:e9:59:db:22:d7:c6:e0:95:81:
10:e5:37:29:62:9d:9f:20:04:a1:b9:8d:56:f1:98:
1e:a6:18:92:fb:c5:61:96:26:b3:1f:63:7b:a8:cc:
44:40:9c:23:46:45:5d:91:26:84:f0:ec:15:a6:70:
1c:10:0f:06:59:a8:09:f3:bd:b1:41:5a:a6:04:49:
03:f6:b7:10:b9:80:76:91:b6:76:d9:e2:f8:92:96:
99:20:44:0a:fa:a7:0d:03:39:0f:57:c3:7a:f7:58:
d3:9d:58:8e:27:1a:a6:dd:85:d9:1a:f6:c6:90:87:
cc:d0:8c:3e:5c:87:96:26:3d:22:56:43:0a:e4:13:
f9:77:b7:7e:48:35:ca:60:c0:6b:c6:92:70:aa:60:
8c:2f:86:d7:29:f4:d5:67:fe:0e:e7:9c:22:eb:4e:
1e:a4:bf:c4:d0:a1:2f:4b:0a:59:d4:59:b2:a3:71:
ae:b1:96:2e:2e:90:32:6c:7d:65:61:6e:71:54:ee:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:C9:BA:E0:17:E8:1A:0F:E2:7F:9D:1B:0F:27:B0:1C:62:6C:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E69108F43811EF9DCCBA8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.143.0/24
Signature Algorithm: sha256WithRSAEncryption
28:14:bc:3a:15:bc:30:0b:26:32:6f:f3:f4:8b:94:37:c2:3e:
d2:bd:20:db:9f:97:d6:d7:2c:2d:47:94:f6:c6:39:64:76:d6:
31:28:99:d7:96:47:9b:8d:d9:02:3c:99:8a:df:dd:63:78:11:
63:38:64:39:bb:41:03:5b:f4:7d:f0:81:42:af:a3:22:9f:fb:
d2:ac:e8:56:1a:66:55:3c:2e:b0:2f:34:45:16:92:1b:80:be:
76:70:88:2c:ae:14:da:d1:a3:02:2f:88:58:af:aa:86:a3:c3:
8d:ca:87:8c:be:1a:8c:91:7b:a5:43:45:9e:5c:45:1f:df:a6:
8d:75:3d:84:c5:39:e8:4f:b3:11:f1:a1:41:15:04:c7:82:fe:
bf:e9:7f:6b:a9:4d:27:ba:70:2e:6f:02:39:3c:bf:40:35:b5:
ef:56:b5:79:7b:0b:07:45:7d:6c:88:98:85:5b:45:fa:b8:97:
ca:d0:bf:08:be:72:9e:68:bf:3f:da:9d:32:b7:5b:e8:5d:a7:
ce:76:7a:ac:a3:f8:7c:06:4a:94:18:1d:e4:34:8a:e3:21:63:
22:13:a6:01:ff:31:28:2e:5a:45:cf:3e:6f:1f:0f:d5:81:5a:
ca:fc:7b:3a:93:94:d5:b8:29:a9:11:a3:45:bd:c0:77:ed:f1:
77:08:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:27 2025 by rpki-client