Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EB452AF44E11EFB22870A8762E951A.roa
File: 25EB452AF44E11EFB22870A8762E951A.roa (raw, json)
Hash identifier: AsB5IG4Wia1Q9+ISIF5xkLX4wCHKRWE21rcVyHMZMAk=
Subject key identifier: 9E:F3:57:91:99:B6:A7:AA:9A:95:1F:A3:82:29:CA:FF:75:7B:E7:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016453
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EB452AF44E11EFB22870A8762E951A.roa
Signing time: Wed 26 Feb 2025 14:29:55 +0000
ROA not before: Wed 26 Feb 2025 14:29:51 +0000
ROA not after: Sat 19 Feb 2028 14:29:51 +0000
asID: 17561
IP address blocks: 154.82.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91219 (0x16453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:29:51 2025 GMT
Not After : Feb 19 14:29:51 2028 GMT
Subject: CN=67bf2563-8258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:46:77:ab:ac:cc:67:90:41:43:cd:28:c2:
3f:ce:d5:94:fe:1e:9f:15:37:15:9e:d8:62:bb:70:
de:83:e0:07:7e:e8:78:19:fe:3c:be:02:0b:ee:d9:
3c:85:61:60:f3:6a:03:e7:60:e0:6e:4d:ef:f4:c4:
25:25:64:c2:cc:c9:77:02:d0:67:06:c2:e4:5c:48:
ef:0d:cd:5e:33:4f:b2:6a:f7:01:e8:17:db:bb:fb:
87:93:1b:c1:2e:f7:9d:16:39:77:ed:d3:17:b1:61:
08:68:ff:3b:76:ed:94:a7:e7:bd:40:7b:1e:34:09:
26:63:8b:7c:25:7e:21:65:5e:fc:52:54:1c:65:dc:
6a:a4:c4:a4:e8:df:4b:0f:bc:5c:16:43:fe:5b:e0:
e6:93:01:90:8c:d7:ff:f2:e4:87:93:02:8a:29:35:
46:3e:72:58:d2:24:ba:d3:aa:62:ee:5a:f1:29:b5:
04:35:27:40:2f:e3:23:24:65:55:4e:e1:a1:c9:25:
83:34:52:a9:9d:b0:b0:ba:a5:47:d8:ab:da:35:ca:
73:0f:c6:9c:21:c8:ae:6f:19:e7:e0:f6:39:e6:9f:
f4:92:a6:8b:7a:1c:fb:c2:fc:c6:f2:48:20:a5:98:
2b:61:27:01:09:af:a3:d7:5d:70:5e:74:76:3f:0e:
1c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:57:91:99:B6:A7:AA:9A:95:1F:A3:82:29:CA:FF:75:7B:E7:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EB452AF44E11EFB22870A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:c8:eb:e6:7f:e8:56:b4:dd:b4:e3:6b:f0:79:aa:6f:2e:
e6:3d:98:d9:ee:63:ab:ac:ce:44:fe:08:9a:73:41:bd:16:92:
ca:63:75:93:59:96:16:75:01:ca:3b:e6:2c:bd:7a:46:66:b0:
1e:f2:7c:51:33:db:fa:a7:bc:55:b4:96:69:88:b6:b2:86:d9:
f5:20:5e:65:55:d9:2e:f8:26:c0:30:e0:c9:b9:cc:d3:b3:64:
fa:97:27:2e:70:73:f6:ca:12:5c:a3:13:75:42:4f:42:31:b8:
e4:aa:2c:30:37:0d:fb:a0:d7:c7:86:a5:25:9a:6d:4e:6e:ae:
9c:c3:1c:f7:7e:ac:1f:46:4d:b1:65:0b:67:0e:2e:66:ca:cc:
bc:73:bc:ea:ad:2e:da:2c:cf:8f:c2:5f:13:14:6b:bd:9c:9a:
6d:ca:a4:db:0f:10:8f:ce:66:a7:9a:1f:a8:43:a5:b6:3a:52:
b4:d7:b2:97:cc:4d:69:aa:d9:83:c9:0c:ac:69:3c:8e:58:31:
cc:4d:4b:37:86:07:5f:b3:6d:df:2e:cb:58:bc:8b:49:c4:ca:
d2:a6:05:14:85:08:1d:55:08:70:9f:09:54:70:b3:93:c3:80:
f3:08:ac:ac:29:e4:e8:c9:a3:bd:95:65:ba:14:99:7a:2b:f7:
38:f2:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:27 2025 by rpki-client