Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D23D334F45E11EFB3DCAB98762E951A.roa
File: 1D23D334F45E11EFB3DCAB98762E951A.roa (raw, json)
Hash identifier: 8INLaQqDe2n6x85f5EyJmk592OF9JWJhP5wr5R44bEY=
Subject key identifier: 62:F7:60:C8:53:7A:6D:63:40:71:7F:19:BB:2E:C8:A1:42:A8:14:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016522
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D23D334F45E11EFB3DCAB98762E951A.roa
Signing time: Wed 26 Feb 2025 16:24:13 +0000
ROA not before: Wed 26 Feb 2025 16:24:09 +0000
ROA not after: Thu 19 Feb 2026 16:24:09 +0000
asID: 984
IP address blocks: 154.210.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91426 (0x16522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:24:09 2025 GMT
Not After : Feb 19 16:24:09 2026 GMT
Subject: CN=67bf402c-5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:24:c5:ee:af:90:a6:0d:b1:a3:2d:72:4e:
0d:b5:fb:39:5e:96:ca:1a:3e:a5:5e:6a:b3:dc:79:
03:17:08:54:d0:e6:73:e3:6e:04:eb:0f:40:ad:37:
2c:06:78:3b:79:8c:4d:c9:a0:a0:63:ae:4a:d8:46:
2f:cc:ed:74:01:85:2c:2b:7d:d3:b1:7e:a7:85:e9:
4e:9a:96:88:90:4d:d7:27:50:f2:c0:5c:9a:7e:62:
72:c3:e1:f1:da:1b:3b:41:6d:9e:fb:13:28:c5:1b:
71:1e:da:bf:bd:df:0b:f9:2c:3b:3b:99:e2:b9:e9:
c3:2d:47:a9:56:26:33:e3:6c:8f:ef:44:86:ed:24:
e0:27:67:60:9d:f1:dc:f6:dd:54:53:fc:90:ee:af:
d5:45:05:de:51:3c:24:08:c9:d7:52:06:25:f0:24:
e4:e4:4d:9d:39:ab:7b:ab:1f:67:20:ed:b3:fe:f3:
7b:75:64:0f:6a:ab:1a:8f:e7:e5:1b:d6:d8:17:d3:
f9:d5:90:c0:67:52:41:f3:ad:46:de:89:25:bb:10:
df:68:e9:a3:c9:d2:8a:14:49:4b:a0:37:7f:ce:d4:
18:b4:14:d9:75:b8:9d:ef:ac:ff:6f:d2:15:4e:19:
49:85:16:30:d8:9d:35:74:97:63:1e:df:a1:8f:00:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:60:C8:53:7A:6D:63:40:71:7F:19:BB:2E:C8:A1:42:A8:14:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D23D334F45E11EFB3DCAB98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.116.0/24
Signature Algorithm: sha256WithRSAEncryption
64:85:16:b1:19:38:14:fa:15:75:55:95:89:1d:d0:b7:48:2a:
31:39:e4:de:fc:5c:53:5a:9b:fa:b0:6f:97:32:04:18:ec:57:
8b:55:ec:4f:59:8b:89:6c:0c:3e:73:30:17:2d:82:ff:c8:70:
d0:ce:d0:46:27:e1:44:44:79:87:b5:4e:f4:20:65:27:69:75:
c2:05:77:fd:4e:06:c3:3d:39:17:10:a1:d7:03:07:fd:be:77:
ee:d9:11:d5:87:79:01:ee:e8:4f:2a:ac:ef:44:ef:14:64:d6:
e0:71:7b:0b:fb:98:47:b4:94:08:7e:95:47:8e:62:53:db:f4:
19:cd:42:c7:6a:e1:59:84:03:3e:9e:ae:7f:fb:58:91:49:72:
97:6f:69:d8:db:f9:88:6c:8d:f5:02:32:be:cb:62:30:a8:63:
28:e2:ac:35:b0:48:88:b7:b3:81:f7:82:2e:37:00:9a:cd:ef:
54:4a:31:58:dd:08:fd:c3:f4:be:e4:8d:aa:41:71:ca:cd:5d:
58:4c:cc:8b:57:0f:43:ce:60:4d:b3:29:92:d2:43:fc:28:09:
0a:bd:23:5e:ac:1e:60:d7:3e:71:7a:00:b4:55:39:08:0c:65:
1a:85:87:38:a5:e5:32:37:d9:94:b9:53:e5:40:68:5c:c2:c0:
06:92:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client