Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8BC3EEF43B11EF9E21ADA2762E951A.roa
File: 2D8BC3EEF43B11EF9E21ADA2762E951A.roa (raw, json)
Hash identifier: HrEh6nZscHo+z815wM13clKcvaScdOmw0jZlwYwSvZE=
Subject key identifier: 6B:B2:B9:94:B8:48:FA:33:E0:18:D9:C8:11:89:FA:EA:CF:3D:BB:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8BC3EEF43B11EF9E21ADA2762E951A.roa
Signing time: Wed 26 Feb 2025 12:14:08 +0000
ROA not before: Wed 26 Feb 2025 12:14:04 +0000
ROA not after: Fri 20 Feb 2026 12:14:04 +0000
asID: 984
IP address blocks: 154.199.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90880 (0x16300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:14:04 2025 GMT
Not After : Feb 20 12:14:04 2026 GMT
Subject: CN=67bf058f-d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:0f:a3:e7:f2:0f:9d:6c:26:14:7e:7e:a4:
cc:14:be:e8:2b:2b:cd:8a:5c:e6:5d:4d:6a:55:51:
07:ba:6a:ad:43:8e:8b:2e:e4:39:90:1a:3e:a2:28:
0f:e8:99:2a:9d:fc:5b:22:e3:7f:6d:ea:58:ec:78:
61:a7:2f:02:c1:e5:31:a1:dd:c2:e6:3d:bb:b9:08:
de:b6:5c:c9:a2:70:0a:06:51:61:28:dc:c2:39:42:
66:a9:b9:39:b8:2d:ee:fb:e9:b6:66:e0:02:22:1f:
50:b8:83:11:09:3c:f7:cb:30:a8:33:93:c1:01:d9:
02:bb:b6:25:14:11:83:86:c3:80:49:15:53:d2:9a:
ae:b0:19:4c:77:47:38:86:a6:05:15:4d:c5:24:74:
5d:66:79:b2:f5:fa:10:40:3b:c4:27:0e:f3:d4:2b:
a6:42:06:74:cc:13:f3:e4:24:13:99:37:e8:bb:61:
77:8a:ff:9a:4e:34:d8:b3:8c:f0:e3:bd:32:d6:1b:
b0:97:32:37:69:7e:5f:a5:3b:da:69:24:4b:64:da:
b1:0a:9b:92:b9:4b:6c:cf:57:81:16:52:95:95:5a:
f8:29:fd:69:7d:6a:5f:cd:87:ad:5f:6c:77:c3:d6:
c4:67:f7:f3:e2:0e:26:6b:68:36:6b:e5:c6:51:11:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B2:B9:94:B8:48:FA:33:E0:18:D9:C8:11:89:FA:EA:CF:3D:BB:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D8BC3EEF43B11EF9E21ADA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.152.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:04:f9:56:13:3c:f2:04:a4:be:35:8f:75:62:53:dc:db:30:
7a:eb:24:6f:09:3a:fd:fe:91:e8:53:31:98:eb:d4:0a:41:2e:
0b:83:df:28:f5:77:57:62:33:af:2f:96:c1:aa:ce:19:4f:f2:
f7:42:da:11:b9:6d:1f:de:a8:ca:95:48:a1:96:80:01:99:76:
49:f4:3e:d6:9a:c9:ca:02:d9:1b:3f:38:62:42:31:e7:4c:8f:
0c:2a:f5:50:f2:9f:d6:66:cd:f9:d8:ad:d4:05:d2:be:74:2f:
69:e1:49:10:a5:da:25:e8:79:ce:60:95:f1:db:77:43:9d:c6:
10:1a:bc:ad:b9:7c:8e:6b:ad:8f:91:c1:20:6a:9c:cb:66:0b:
01:05:9e:56:45:21:31:58:84:56:22:e1:ea:ad:93:51:1b:2f:
1f:7a:9b:ff:60:e9:8d:6f:32:c0:6c:a8:97:5d:bd:49:ca:c2:
6b:54:1c:07:c8:89:64:b4:5e:fa:f7:e4:91:fe:31:c4:25:b0:
24:ba:cc:08:c5:e6:7c:ec:a1:bc:74:2b:89:07:59:0a:77:79:
85:f8:19:79:c7:2d:bc:72:ca:48:cb:b6:1e:d4:8d:c1:82:21:
11:e5:04:d7:db:e9:9a:18:af:c9:97:64:bd:87:95:4c:d0:7a:
bd:37:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:28 2025 by rpki-client