Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E86E114F42A11EFAB4987AA762E951A.roa
File: 1E86E114F42A11EFAB4987AA762E951A.roa (raw, json)
Hash identifier: KFkwrBWf0iy+ZYtq+f+tIwfz58E3BdrZCF85A1n7img=
Subject key identifier: 1B:E8:26:1C:A1:B0:E4:BB:34:00:40:D6:4B:41:94:3C:68:74:CC:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016225
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E86E114F42A11EFAB4987AA762E951A.roa
Signing time: Wed 26 Feb 2025 10:12:01 +0000
ROA not before: Wed 26 Feb 2025 10:11:57 +0000
ROA not after: Thu 19 Feb 2026 10:11:57 +0000
asID: 984
IP address blocks: 154.208.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90661 (0x16225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:11:57 2025 GMT
Not After : Feb 19 10:11:57 2026 GMT
Subject: CN=67bee8f1-8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:17:fd:1e:30:62:00:12:70:eb:c0:ff:a6:
54:e9:3a:9c:be:8c:79:e9:3b:66:26:21:79:8e:46:
ed:7f:a8:b6:ac:6d:f4:fa:36:60:06:2d:16:af:15:
61:49:d6:59:f9:c7:4d:3f:34:85:eb:5e:89:8e:a9:
94:9d:d3:c8:05:32:30:3a:4e:24:73:55:2a:3c:38:
51:bf:f0:14:08:68:7c:db:e5:23:a7:aa:5a:39:0b:
db:fb:5e:ff:78:78:d0:29:b8:21:ec:91:8d:77:e6:
f5:68:25:8f:13:fd:46:b8:b7:b8:01:df:64:cd:a5:
8e:d6:62:8b:73:fe:51:30:ad:7b:4e:36:5b:60:81:
05:7e:dc:87:c1:de:c1:fe:12:e2:99:d7:01:7b:b5:
e9:7d:51:79:0f:82:82:3b:36:c2:c0:f6:ca:89:72:
29:8f:e3:d5:0b:7f:b0:01:6f:de:18:3d:68:f5:82:
b6:28:55:5b:9e:c2:bd:44:02:10:2a:41:1b:86:1e:
e5:1b:8e:52:15:21:1b:89:b1:de:b6:2f:f1:8d:c7:
2e:db:8b:e4:01:32:3d:d1:b1:e9:a6:d0:1b:99:92:
04:6b:db:2c:3e:0c:f5:59:a5:f0:d5:c3:14:0a:6d:
a8:2c:f9:3f:df:ce:1c:59:49:52:f2:e9:39:78:c4:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:26:1C:A1:B0:E4:BB:34:00:40:D6:4B:41:94:3C:68:74:CC:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E86E114F42A11EFAB4987AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.69.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ff:5b:e6:a2:8c:f8:71:01:a5:a9:2e:36:db:fc:5a:b2:a7:
36:aa:af:f2:ee:d8:a9:cd:94:a7:02:53:91:ec:38:48:91:ae:
cd:8c:29:e7:b4:d2:40:58:7f:97:cf:db:b5:64:44:01:48:c4:
22:74:0d:fa:38:74:68:d5:2b:af:05:e7:7d:eb:90:3a:08:ec:
8b:8e:df:34:7e:09:0c:92:1f:7f:4c:f0:4c:f5:e1:be:c2:72:
3f:ab:b6:51:fc:d8:cc:b1:e3:55:c5:71:6f:a1:97:fb:cf:94:
4e:a1:4a:e1:94:0b:46:3a:11:16:9a:d0:b4:11:b3:98:43:6a:
50:bc:2e:3f:d9:a0:41:17:a6:f9:f0:7c:74:df:65:7e:75:8c:
98:30:1f:66:d3:2f:0f:01:46:06:7e:0b:69:f2:08:4f:a7:b6:
ea:5a:a0:44:92:4d:1f:a6:b9:87:06:e3:3a:c5:55:84:6e:49:
f3:34:4d:74:30:b1:3a:09:ea:56:86:7f:c0:60:81:85:54:c2:
9c:f1:8b:f2:2b:16:5b:6f:5f:fd:04:fd:9c:60:32:b0:2f:05:
c5:2a:a6:f4:02:05:b8:d2:3c:34:06:66:56:87:d9:e2:f6:2c:
01:7c:5d:36:49:cd:16:df:57:c1:67:e9:7f:0f:45:47:f3:d6:
56:a2:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:21 2025 by rpki-client