Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24806BA607B411F0A1E46B50762E951A.roa
File: 24806BA607B411F0A1E46B50762E951A.roa (raw, json)
Hash identifier: /CnFepU113cdtOG3Ynrq5lUFbp4S+h2xwuALIgiqcTo=
Subject key identifier: 31:DF:4A:87:07:5E:72:1D:43:8F:F4:BE:38:87:13:18:9D:15:D8:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24806BA607B411F0A1E46B50762E951A.roa
Signing time: Sun 23 Mar 2025 06:57:54 +0000
ROA not before: Sun 23 Mar 2025 06:57:49 +0000
ROA not after: Sun 29 Jun 2025 06:57:49 +0000
asID: 29802
IP address blocks: 154.202.100.0/24 maxlen: 24
154.223.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95667 (0x175b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 23 06:57:49 2025 GMT
Not After : Jun 29 06:57:49 2025 GMT
Subject: CN=67dfb0f2-1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:68:d0:db:27:58:78:59:05:e0:f9:76:c1:
ad:38:c0:8f:28:5e:88:6e:f2:09:41:5d:c2:a7:64:
18:12:93:3a:af:fb:db:46:49:30:11:c7:e7:0d:eb:
65:5a:0d:b0:ec:84:51:c8:5c:99:02:dc:e8:2e:7a:
36:d3:a2:bf:c1:12:ed:35:eb:d8:17:c4:44:a4:6d:
b9:df:9d:6d:7c:39:12:03:8c:54:0d:0f:9e:4a:89:
31:06:7e:30:eb:5b:c6:70:ad:53:be:25:99:e5:d5:
1d:37:05:60:42:07:c0:5f:23:ca:f1:11:b0:58:dc:
89:48:6a:a2:c3:12:24:5e:19:25:0e:3d:b5:54:3b:
74:c2:d8:54:60:f2:f7:9d:a2:3e:57:6d:a3:c8:b5:
2a:d5:77:e9:00:d8:16:d6:94:96:89:fd:18:08:26:
46:16:db:c9:25:b3:9f:56:e8:df:a5:eb:e3:03:68:
e1:b0:2b:9b:9f:90:de:1a:eb:ea:78:96:5a:cb:80:
ff:4b:5e:04:f4:25:f2:9a:b5:e1:85:7d:0a:b9:d8:
4f:af:53:e6:93:62:a3:6e:8c:e6:cb:78:ca:ff:33:
06:5d:70:b5:86:fe:6e:48:4f:ce:bc:e7:47:73:83:
0e:3a:50:72:14:56:ec:70:da:05:c5:87:fe:11:fb:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DF:4A:87:07:5E:72:1D:43:8F:F4:BE:38:87:13:18:9D:15:D8:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24806BA607B411F0A1E46B50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.100.0/24
154.223.90.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8f:6e:36:ff:06:65:0d:9b:d9:cc:02:58:68:55:69:d7:47:
dc:d6:e9:ff:e6:9d:d7:d7:12:6b:06:29:22:85:25:dc:ca:2f:
24:7f:8c:8b:53:df:34:b4:46:fc:86:ce:79:2c:1a:8b:34:8a:
8a:81:bc:b3:36:59:76:0e:be:33:6d:b7:7d:d5:e0:39:e8:23:
3e:cb:06:fe:65:74:d3:c6:e2:98:82:f1:82:f7:54:6e:ac:f3:
7c:bc:65:a2:2f:7b:a3:40:4b:28:74:4c:e3:97:ae:a8:03:5d:
1b:ea:6e:dd:1d:e3:28:a6:13:a4:06:66:82:11:51:92:5d:12:
a5:ae:ae:01:95:95:75:00:ad:bd:a1:bd:fc:7e:df:2a:2b:ca:
b5:d9:9e:3a:0b:cb:a5:a3:d1:32:a4:b7:b2:a8:5f:4b:87:1d:
f6:1a:ed:56:93:9e:1d:f5:ac:1c:2b:32:2f:a2:8c:24:b1:ec:
cd:7c:d5:c0:04:78:4d:32:27:5a:c5:65:63:d4:86:95:77:27:
e1:4f:c2:3e:2f:ca:6c:97:c6:17:fd:8f:90:4c:6a:89:c6:85:
0e:75:79:51:ac:c6:fe:4a:8e:0f:65:5c:41:a8:ff:3a:54:d1:
0e:bb:3d:46:56:50:96:9e:94:2d:4f:c3:0e:49:fa:f8:7b:be:
83:bb:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client