Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F524ACC1AC11EF97A389A0762E951A.roa
File: 16F524ACC1AC11EF97A389A0762E951A.roa (raw, json)
Hash identifier: S69Xt+lzKVCQMQ+8mQJwuA7fmz23EqxmExSOU6OjgCU=
Subject key identifier: 87:27:D6:F9:86:48:EA:9B:35:4E:55:81:C4:9A:08:64:03:67:D3:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012139
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F524ACC1AC11EF97A389A0762E951A.roa
Signing time: Tue 24 Dec 2024 04:03:54 +0000
ROA not before: Tue 24 Dec 2024 04:03:50 +0000
ROA not after: Wed 10 Dec 2025 04:03:50 +0000
asID: 984
IP address blocks: 154.92.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74041 (0x12139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:03:50 2024 GMT
Not After : Dec 10 04:03:50 2025 GMT
Subject: CN=676a32a9-294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:9e:ff:b7:b9:05:d2:7b:d6:02:90:ad:ee:
dd:0c:f0:cd:46:a5:f9:11:8f:02:ae:ff:20:e4:27:
20:63:6c:af:01:1e:56:a8:34:f7:54:03:3e:f0:67:
17:57:a8:6f:3c:5d:50:82:88:21:99:1d:37:bc:7c:
34:a2:a6:30:36:09:03:21:92:54:7f:8b:ca:4b:6e:
a2:2e:04:09:b3:df:c4:0d:9f:98:c9:49:13:bf:29:
fc:ae:89:96:74:23:a1:b6:77:d7:27:15:8c:c4:67:
5f:8b:34:4e:e6:55:e3:7f:e4:d1:ec:bf:e2:2b:0b:
ff:55:df:52:91:dc:65:c5:fb:f3:1a:98:79:61:b7:
94:91:24:2a:bf:51:ee:8c:96:3b:b8:a9:75:d5:d6:
aa:ad:68:5c:e5:32:f8:45:c1:51:06:04:8e:ae:03:
e6:af:67:e8:a7:cb:8f:a1:4d:0a:a1:f9:56:5f:e4:
dd:67:d7:7f:8a:c4:2e:3c:e6:7b:f6:75:77:9b:91:
bd:de:bf:09:b9:73:0f:c6:e9:1b:cb:73:11:60:b1:
53:fb:35:ef:e7:f6:18:80:86:a4:df:47:ad:f5:f3:
9a:bc:02:7e:d0:be:14:62:f0:ab:23:d0:fb:16:80:
a5:db:c3:03:55:18:b4:d1:f5:9d:0a:d2:e3:32:ad:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:D6:F9:86:48:EA:9B:35:4E:55:81:C4:9A:08:64:03:67:D3:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F524ACC1AC11EF97A389A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.250.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:93:96:88:ba:75:f4:cb:bd:c6:0f:28:4b:88:51:de:a9:b7:
e4:c6:ca:65:c9:18:45:c4:b5:1f:6a:f9:8f:24:b9:13:d0:85:
6e:fc:de:43:a5:83:5a:81:0c:e8:b8:45:b0:e7:e5:a8:91:96:
dc:8a:94:ae:0c:fc:29:ee:95:e5:8e:e4:68:e5:0e:20:c4:56:
08:ac:c5:04:33:ab:ce:8a:76:99:c1:ce:d4:33:87:59:c0:38:
d7:10:d0:aa:fa:9f:1d:22:b1:33:06:bc:73:14:7a:bd:b8:54:
06:1e:ba:0c:00:d2:ae:21:00:b6:5e:94:6d:9e:f5:13:45:9f:
69:c1:ed:44:8b:dd:8f:18:cc:eb:96:4e:fc:d7:81:fb:11:cd:
ed:7a:47:2d:59:71:d1:a6:62:e9:f4:87:ed:e5:0b:44:3f:dd:
47:f6:22:dd:a7:9b:bd:9c:d8:b7:4f:58:c6:ff:3b:66:c6:ae:
25:4d:9c:cf:f2:48:d7:65:3c:63:aa:55:ae:a7:4a:b8:c1:4d:
f3:37:a8:4e:df:bf:e7:6f:73:e4:2b:6a:61:53:31:3e:46:fa:
b9:98:05:17:df:e8:7d:5c:47:b9:5f:54:70:49:75:9e:df:86:
9b:4d:f2:cf:a5:4c:6b:bd:d0:20:c7:6f:bd:ca:99:f7:1d:42:
95:05:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:55 2025 by rpki-client