Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25255EB2C93A11EF8CBE46AA762E951A.roa
File: 25255EB2C93A11EF8CBE46AA762E951A.roa (raw, json)
Hash identifier: AA7Wfh9IhmjbccAocow/aRyR9nYGxbToeYSDkSZgj1Y=
Subject key identifier: B9:D6:1A:D2:CA:F2:D2:09:47:F0:42:D3:21:9C:F5:BC:AF:EA:C5:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25255EB2C93A11EF8CBE46AA762E951A.roa
Signing time: Thu 02 Jan 2025 18:48:24 +0000
ROA not before: Thu 02 Jan 2025 18:48:20 +0000
ROA not after: Sat 13 Dec 2025 18:48:20 +0000
asID: 984
IP address blocks: 154.223.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78835 (0x133f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:48:20 2025 GMT
Not After : Dec 13 18:48:20 2025 GMT
Subject: CN=6776df78-5cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:dd:a5:54:76:ea:97:35:74:a2:6c:71:d1:
aa:c0:6a:07:d2:c6:05:2e:5e:5c:90:cb:7d:77:36:
22:43:d6:d5:ec:8d:99:51:f0:a7:1d:60:bb:43:20:
c5:31:f1:31:94:f4:0c:fb:af:0e:d2:d3:99:ba:5f:
2e:f5:d6:84:05:c2:7f:88:0b:9c:15:d7:06:f7:00:
ee:d4:f7:50:ef:74:7d:98:bd:2d:9f:5d:3e:ef:c4:
5f:65:cb:0f:17:dc:cb:f2:5f:4c:24:55:28:72:b2:
28:e1:7c:63:ba:c0:2f:bf:ad:a9:8c:ae:d5:f0:4a:
e6:53:72:51:ea:22:67:ab:03:fa:6e:43:2a:da:f0:
ec:62:60:52:9f:5f:72:80:b5:24:52:20:9a:08:9e:
3a:6a:d6:a9:e3:96:a8:c0:f5:e0:d4:0b:26:e9:b5:
d1:17:12:70:41:0f:b4:2b:e9:7d:39:52:4a:bb:bb:
77:8b:06:8e:07:d4:aa:39:27:d7:ed:a8:3f:fa:aa:
32:40:0c:d1:16:43:1d:e7:fd:d8:d4:fe:df:14:1c:
6c:ea:d9:02:f3:86:e0:b5:e6:5d:e6:95:65:fc:8e:
6c:5a:14:32:31:33:e0:58:3f:17:e0:43:9a:72:48:
fc:bd:cb:cd:f8:0d:52:b6:2c:7e:8a:a6:76:b4:fe:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:1A:D2:CA:F2:D2:09:47:F0:42:D3:21:9C:F5:BC:AF:EA:C5:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25255EB2C93A11EF8CBE46AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.192.0/24
Signature Algorithm: sha256WithRSAEncryption
33:43:e7:27:e2:1e:f3:13:c9:fe:e9:59:c0:cd:bb:72:7a:ee:
f0:16:3b:3b:57:ff:e9:3f:33:f7:d3:be:80:9b:18:ad:55:05:
4e:e9:5c:5f:04:85:eb:4f:74:96:77:bc:8e:90:85:3f:12:a8:
0f:d0:40:1b:0d:e7:c8:3a:88:bf:ad:60:e7:70:39:ba:d2:ce:
be:83:29:41:bc:13:68:22:fc:8b:65:0a:ee:cd:6a:f2:11:0f:
0b:c1:94:e1:bc:47:28:9e:8f:48:4f:bc:f8:46:64:ce:4f:2f:
c5:9b:f0:03:d4:81:33:6a:50:d5:e4:aa:32:a0:09:2a:42:c3:
d5:32:e5:dd:77:ca:c4:ad:c6:7d:ee:a8:40:2e:61:f2:fc:c6:
f2:6c:b3:10:23:c9:46:45:0c:64:91:2c:be:d1:cf:32:18:fa:
d4:ae:c1:1c:ac:75:ab:00:1f:15:8f:ea:4f:b7:e6:51:66:19:
2a:2a:88:7e:6a:6d:81:5b:cd:1f:ab:20:67:ae:d6:12:11:6a:
95:1f:ba:6e:23:7d:bc:29:27:8d:37:24:a7:99:c7:16:ee:ef:
b3:61:36:b1:58:5c:3f:ae:4a:84:46:09:92:44:d0:f6:ea:9f:
d8:a6:b2:68:74:2c:2d:e6:33:21:f5:10:c8:54:e3:48:b1:13:
18:4f:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:59 2025 by rpki-client