Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A67FF92F3D811EF8125BF67762E951A.roa
File: 2A67FF92F3D811EF8125BF67762E951A.roa (raw, json)
Hash identifier: g9dG14bnWBKSOKRsClv2tVatnPxvpeFsOrwwGeYaPAQ=
Subject key identifier: 1E:7A:1B:2B:A2:76:D5:AD:D7:92:F5:01:2A:87:52:8E:8C:2F:7D:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016039
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A67FF92F3D811EF8125BF67762E951A.roa
Signing time: Wed 26 Feb 2025 00:25:22 +0000
ROA not before: Wed 26 Feb 2025 00:00:18 +0000
ROA not after: Thu 19 Feb 2026 00:00:18 +0000
asID: 984
IP address blocks: 154.89.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90169 (0x16039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:18 2025 GMT
Not After : Feb 19 00:00:18 2026 GMT
Subject: CN=67be5f72-e16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:52:9e:57:63:70:09:cb:ea:0b:f4:b7:18:
a2:0d:60:53:4b:2f:b8:19:ec:e0:5b:9a:f4:e1:68:
65:9b:1a:4f:97:ae:f4:2c:eb:74:7c:75:ab:6a:2e:
53:47:58:8d:76:40:2f:ce:6d:a4:b6:74:a8:a7:53:
7c:1f:64:1b:16:0f:b7:45:49:5d:66:33:76:b3:f5:
32:1c:c6:bd:a2:0b:8c:ff:8b:a5:67:32:c2:7b:fc:
b9:e0:20:e8:d7:51:38:15:69:80:cb:0d:f0:b0:20:
6b:ae:2c:78:6e:29:60:86:bb:39:90:ea:31:d3:0a:
ff:a8:39:14:26:cb:8a:d4:6c:58:43:cd:3f:66:01:
b9:56:13:0f:6d:dd:f2:82:2a:2e:58:3f:e1:c8:aa:
82:4a:ba:3e:ed:02:9d:81:ed:dc:92:76:c4:b7:81:
2e:24:4c:65:78:52:29:2a:98:ca:f8:95:22:57:fd:
c6:49:fa:95:88:37:d0:e2:7d:c4:e9:66:ce:d5:c9:
53:02:de:2f:f8:b5:73:49:99:36:59:1e:f6:f3:38:
ac:b3:42:5d:7d:13:b5:55:80:75:ea:66:1e:ab:41:
ae:61:6d:28:97:67:0a:ae:cf:fc:d1:d6:92:41:aa:
60:82:c3:b0:72:33:2f:db:2c:02:8b:68:6d:ce:33:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7A:1B:2B:A2:76:D5:AD:D7:92:F5:01:2A:87:52:8E:8C:2F:7D:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A67FF92F3D811EF8125BF67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:d6:cb:fb:ee:60:df:33:e0:17:aa:8b:15:c8:a7:5f:de:bb:
eb:0e:e1:ed:88:cb:e0:79:cb:09:5e:be:f2:71:49:4b:84:9a:
13:c7:93:be:2d:a9:3b:84:db:23:2c:05:0a:0f:b2:47:d2:f1:
5e:f2:fd:00:f8:fa:25:b4:ab:7b:c1:f5:16:de:6c:29:e3:02:
09:a3:3e:35:da:b1:38:19:fd:ee:33:a3:ed:8a:72:8e:16:49:
95:f3:c9:96:0b:28:25:e7:57:3a:bc:82:c9:e9:03:8d:8c:c8:
38:f7:93:61:f8:b6:c6:f4:b9:e7:7d:78:97:86:d0:23:1e:2d:
76:b1:3d:e4:0f:84:c5:62:b6:6c:be:e3:2d:7a:17:3b:d5:87:
22:13:86:ea:74:f1:1a:c9:c0:f9:fe:8b:f0:83:20:fb:25:43:
c2:db:06:ef:c2:5e:df:74:4a:51:34:c8:cb:ab:9c:1a:1c:22:
eb:02:88:4f:54:17:7e:25:a4:de:4e:c0:a7:c3:06:cb:1c:f4:
ae:71:94:01:a0:39:46:42:76:22:1b:10:1d:d0:d5:3c:84:6e:
ac:30:78:25:05:cf:d3:aa:1d:2b:a4:6e:c4:5d:c3:b7:a4:51:
ee:b6:01:fc:60:74:18:ab:b7:b2:b3:6e:f6:b6:0d:0d:44:81:
fe:c4:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:36 2025 by rpki-client