Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B80EC6F81211EFA0C19E6E762E951A.roa
File: 26B80EC6F81211EFA0C19E6E762E951A.roa (raw, json)
Hash identifier: 4UXNjyTiHmauxBJyTWWGfIyi+Pqz1bP0Y3XjyJv9NjQ=
Subject key identifier: 58:DB:70:C5:E9:3D:60:F6:7E:71:A6:CB:64:F8:12:B5:63:14:9A:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B80EC6F81211EFA0C19E6E762E951A.roa
Signing time: Mon 03 Mar 2025 09:30:31 +0000
ROA not before: Mon 03 Mar 2025 09:30:28 +0000
ROA not after: Wed 30 Apr 2025 09:30:28 +0000
asID: 63139
IP address blocks: 154.94.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94141 (0x16fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:30:28 2025 GMT
Not After : Apr 30 09:30:28 2025 GMT
Subject: CN=67c576b7-a0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:64:e1:03:27:a0:4b:b0:60:12:af:c6:6d:
9d:ed:d0:57:34:fa:f7:31:de:16:6b:c3:5b:10:94:
60:99:dd:e0:71:d1:07:1d:81:0c:1b:4a:5b:ed:45:
aa:50:e0:44:5f:0e:92:70:ee:a2:01:b0:79:c7:a2:
c8:62:6c:2e:c6:7c:51:cd:b5:05:1a:f9:5f:d1:89:
d2:65:89:e3:77:06:52:80:0f:1a:63:31:c7:14:24:
e7:8b:82:b2:e4:f5:b7:21:70:3e:69:2b:b3:18:72:
db:fa:f9:40:78:1c:ef:04:ed:d7:65:1b:95:3c:a0:
f4:3a:75:61:5e:35:d1:d4:3c:ce:76:f8:f0:0b:a6:
30:c7:b5:a7:e8:8f:78:52:97:da:57:a3:24:bc:78:
c2:e7:62:2b:96:4e:0d:4d:de:4a:a2:72:75:62:55:
f1:24:67:cc:78:8a:2d:0b:9a:ae:21:c3:45:8a:04:
ed:2b:e9:4c:0e:31:47:60:3f:19:2b:65:41:6c:43:
d5:70:f6:28:03:0d:e1:92:e8:b3:53:1a:c1:2e:38:
76:30:46:7f:87:23:83:73:3b:75:19:6e:96:34:a2:
65:a8:33:53:8f:88:11:9b:7b:c1:13:b3:a5:91:74:
bd:fc:7e:c5:6e:40:12:99:ae:46:9b:70:da:78:dc:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:70:C5:E9:3D:60:F6:7E:71:A6:CB:64:F8:12:B5:63:14:9A:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B80EC6F81211EFA0C19E6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.108.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:3b:be:49:06:8c:1e:a6:e8:01:6a:69:04:dd:cb:21:97:6d:
8b:c6:10:02:d1:8e:06:d3:bb:9f:11:e0:7a:e2:d3:d2:da:99:
ed:ba:7b:29:25:68:57:7d:18:d8:1e:0d:a1:47:e5:94:c9:c1:
06:33:97:17:ae:73:e5:a1:47:6c:d9:94:a6:b4:20:04:94:76:
0f:73:c4:3a:f8:ca:f4:bb:97:4a:a5:5b:ce:fc:17:e4:fe:c7:
62:25:e6:e1:9b:f5:77:29:e6:48:a3:09:69:2c:e8:19:9e:fd:
bd:d2:b0:62:4d:cd:53:82:3b:c9:df:ff:7a:30:01:5f:22:d5:
ff:3c:f5:95:13:84:3c:13:0a:05:68:6e:8f:26:5a:f8:e0:a1:
f1:ee:26:07:c1:76:3b:e3:c5:71:62:be:85:d5:f0:2b:8b:65:
20:db:aa:c1:67:53:4f:c9:8f:ed:47:f9:6f:e3:ac:9f:b7:e2:
cb:4c:99:06:1b:23:96:4c:8f:27:37:f8:6c:f3:eb:6c:9b:12:
77:48:dc:e5:65:50:2a:ca:60:05:bb:c6:8f:2e:3a:20:65:2b:
02:67:fe:88:f3:dd:0e:d4:1c:b8:52:8d:15:49:98:9c:6f:6f:
1a:0d:7f:3a:42:3f:06:bb:51:1d:90:88:16:e6:b9:b4:ae:9a:
14:55:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:11 2025 by rpki-client