Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1883C9D6F45611EF939D5163762E951A.roa
File: 1883C9D6F45611EF939D5163762E951A.roa (raw, json)
Hash identifier: VsDobddprSnall+D8MhPU4Wn68wrErf8O7yThXHY6tw=
Subject key identifier: 43:12:2F:A0:49:9F:BE:1A:FD:DA:2B:38:F2:EA:C8:D0:62:C3:81:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1883C9D6F45611EF939D5163762E951A.roa
Signing time: Wed 26 Feb 2025 15:26:49 +0000
ROA not before: Wed 26 Feb 2025 15:26:45 +0000
ROA not after: Thu 19 Feb 2026 15:26:45 +0000
asID: 984
IP address blocks: 154.210.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91343 (0x164cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:26:45 2025 GMT
Not After : Feb 19 15:26:45 2026 GMT
Subject: CN=67bf32b9-4d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:d0:49:57:91:27:52:f3:de:23:a6:53:f8:
3a:b2:7a:2e:05:36:a6:97:28:75:f1:bc:c4:c1:e1:
cb:6e:c5:27:b9:d9:1c:0b:6c:f2:c2:32:37:53:a0:
52:c2:95:35:62:25:79:38:d6:65:5f:0f:02:b6:d1:
61:21:9a:0f:7f:e6:a1:89:44:2f:dd:11:13:3a:ca:
f6:9b:1c:59:75:e0:78:c0:50:fd:b7:b6:dd:05:01:
f5:5a:e6:9e:9e:ce:84:e7:5f:71:96:8a:b6:17:84:
d7:55:1c:da:29:80:af:dd:01:4d:21:59:a6:65:ae:
a4:c0:92:3f:15:90:3f:ca:55:00:e9:c9:3f:43:2d:
66:b0:d8:26:1c:f6:47:d9:bd:6c:a2:09:79:9f:dd:
e1:06:1f:2d:db:b8:c0:14:37:c9:36:27:ff:8e:ee:
a5:be:14:07:3f:2d:65:7a:04:46:6d:ee:cb:df:9f:
7e:ba:74:b2:d7:62:a7:30:7e:27:ef:c9:3e:2f:91:
8b:d4:8c:0c:74:83:b0:db:f5:bc:f3:c3:43:33:e0:
11:7f:d1:c2:07:3e:8c:90:94:f4:a3:f6:9c:c1:34:
dd:d9:9e:b9:fd:18:6e:78:44:1e:01:09:28:44:66:
60:34:0b:95:61:99:83:ae:41:f2:96:ac:a8:18:c5:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:2F:A0:49:9F:BE:1A:FD:DA:2B:38:F2:EA:C8:D0:62:C3:81:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1883C9D6F45611EF939D5163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.91.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fb:d7:44:93:2f:1e:0c:6b:3f:98:15:b1:f1:d9:9e:36:9b:
5a:a6:f2:fe:4a:29:0a:85:b7:04:70:fb:7d:33:fd:fa:a2:f8:
90:a0:da:c2:3e:50:f0:97:23:43:ed:4b:71:ae:44:a6:e9:48:
3e:ab:30:1c:98:54:83:df:4f:00:5b:92:9e:3b:19:ad:7c:af:
8f:d6:b2:e7:11:94:1c:ea:dc:32:d3:d0:e8:3a:8c:ec:e3:5c:
02:19:72:43:af:f9:26:cc:69:40:9d:b7:19:7b:3d:60:8d:99:
16:c8:68:44:f9:e5:a8:a1:5f:60:98:36:08:2e:b9:48:52:46:
92:d9:6c:c0:69:3f:1c:8d:4e:9e:20:03:e9:80:c1:c7:39:3c:
9b:6e:59:88:8d:45:9c:64:67:ab:a4:57:d1:b8:c8:cf:a6:b8:
af:03:c8:cd:ab:81:8e:a4:c3:c0:04:d0:85:4d:e8:fd:46:2b:
fc:27:7e:fd:fc:0a:95:00:78:49:f2:99:3a:df:33:20:ae:0e:
18:e6:e8:6b:d4:78:7b:ec:c6:25:a7:8b:38:2e:db:cb:ab:bf:
40:42:d5:4a:23:69:eb:d9:0a:81:a0:f2:ca:d9:be:05:45:a5:
13:a4:d4:ef:d5:ec:45:03:45:a3:47:f8:4b:81:fe:67:85:d9:
4f:2b:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:18:05 2025 by rpki-client