Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D980BEF3FA11EFA6EBB765762E951A.roa
File: 20D980BEF3FA11EFA6EBB765762E951A.roa (raw, json)
Hash identifier: fkag7p4yir1Y7/uBjAAc+zMkbqnJxWIh1pYdrWSxx8c=
Subject key identifier: 5D:B5:71:16:E8:D4:FB:DF:B5:8A:FC:06:2E:6D:8D:37:7C:08:8D:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D980BEF3FA11EFA6EBB765762E951A.roa
Signing time: Wed 26 Feb 2025 04:28:29 +0000
ROA not before: Wed 26 Feb 2025 04:28:25 +0000
ROA not after: Thu 19 Feb 2026 04:28:25 +0000
asID: 984
IP address blocks: 154.203.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90325 (0x160d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:28:25 2025 GMT
Not After : Feb 19 04:28:25 2026 GMT
Subject: CN=67be986d-628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:fe:42:0e:5c:d5:92:17:af:7d:d2:c3:16:
f5:57:f3:e7:c6:c8:fe:09:81:1d:d6:61:59:ad:b3:
c8:62:84:72:04:21:0c:6a:01:6a:71:88:48:74:68:
f9:e5:8a:28:9e:8c:0f:df:a0:f3:da:76:35:7c:69:
60:5b:b8:ff:e8:be:0c:cf:b2:cc:de:9c:a6:b6:d2:
cd:5c:c0:bf:68:37:48:e9:cf:b4:77:b6:35:21:d2:
d1:97:a5:20:cc:06:e1:6c:76:87:03:e0:b6:2d:57:
c2:ef:90:57:b4:bb:ce:a7:68:cc:49:f3:4b:64:4e:
5d:7f:5a:74:13:bf:43:26:0c:92:0c:93:5d:67:43:
c4:80:5d:6b:ee:a1:f5:2c:d3:ca:c2:8d:4a:b7:3f:
4b:54:5c:1b:d3:a4:2b:4a:24:89:75:f2:5a:4a:0f:
55:8d:59:7e:92:0f:16:75:c6:50:31:fd:90:aa:0f:
12:ab:eb:46:9a:ea:d3:88:03:68:5b:9b:1a:dc:16:
17:a5:65:c0:ac:a3:8e:91:af:47:05:40:45:2a:91:
ca:31:db:40:d6:e4:1a:86:d3:57:26:c1:11:2a:c5:
96:f0:e9:75:c8:d9:84:61:f9:ba:85:20:90:13:70:
e0:a4:78:9c:eb:ae:1f:fb:5d:6b:0d:2d:31:be:4f:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:71:16:E8:D4:FB:DF:B5:8A:FC:06:2E:6D:8D:37:7C:08:8D:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20D980BEF3FA11EFA6EBB765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:27:65:d0:91:b4:73:07:13:08:ca:8d:34:18:70:9d:44:88:
f4:94:0b:b3:62:81:e2:c1:cb:31:e6:f0:cd:e8:7a:1f:a4:0c:
b0:45:5b:73:dc:55:71:31:8d:cc:38:02:c9:63:10:7d:cc:a8:
c3:76:12:51:b2:71:12:ab:99:04:e9:1b:51:02:a2:32:7e:ba:
ff:96:f7:40:76:0f:09:66:a5:ec:c5:97:6e:f8:0e:3d:16:c7:
ff:50:38:be:56:98:11:13:e5:9c:ef:ff:12:6e:46:b6:9d:ef:
d2:86:a3:a3:98:47:4a:46:d5:0b:16:7b:d7:e7:1e:50:e6:0c:
9e:d7:5c:62:44:25:20:c9:dd:e4:13:d0:5e:73:92:8f:23:57:
8a:fe:43:ee:c5:1a:f4:89:1c:b8:b4:db:6c:c2:ba:6f:8b:35:
58:a6:6c:9d:c7:b9:a1:93:b2:8a:d1:fb:ea:02:9d:bb:f5:f9:
38:9f:89:de:d0:1e:de:f2:b8:22:d7:ee:99:ef:19:60:54:61:
e2:44:04:c1:41:86:3e:2e:73:36:64:41:d3:d4:f5:67:f1:c8:
11:0a:e5:58:0d:30:b7:ca:3f:19:a5:e8:f6:da:6c:f5:ab:d0:
eb:d7:ed:a8:ea:39:2d:8f:cd:0d:57:d4:14:35:e7:79:34:4e:
c0:e0:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:53 2025 by rpki-client