Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/304A3384F43311EFBBD6696C762E951A.roa
File: 304A3384F43311EFBBD6696C762E951A.roa (raw, json)
Hash identifier: TYeDau39HQcl5l0+tqpHIbW7morP+MxfjaTaLo8sJgM=
Subject key identifier: B0:EC:A9:D8:BA:C4:1B:7E:C9:1D:A6:75:E0:1C:10:BA:53:86:33:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016283
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/304A3384F43311EFBBD6696C762E951A.roa
Signing time: Wed 26 Feb 2025 11:16:56 +0000
ROA not before: Wed 26 Feb 2025 11:16:53 +0000
ROA not after: Thu 19 Feb 2026 11:16:53 +0000
asID: 984
IP address blocks: 154.208.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90755 (0x16283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:16:53 2025 GMT
Not After : Feb 19 11:16:53 2026 GMT
Subject: CN=67bef828-ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:20:ba:38:55:57:e3:3f:43:5b:3e:c1:e6:
ef:c8:5f:13:d5:a1:20:11:c5:09:ab:c0:17:07:4b:
0a:04:61:36:ad:9f:96:ad:de:79:5f:32:3f:11:fb:
b7:77:7f:db:3f:1b:5c:58:23:18:a5:fe:79:56:28:
4c:b3:14:fc:09:1e:67:97:61:e3:1d:25:d3:81:1f:
a9:d4:82:ce:28:3c:b5:b7:e4:9c:55:5c:cd:7c:fc:
d9:77:fe:ce:c5:75:aa:f9:2d:36:bc:e7:18:b5:ea:
ac:ad:e1:a3:23:59:fc:e1:c5:b2:95:aa:1b:12:c4:
fe:83:6f:11:a3:7e:15:b0:df:5e:ae:a8:e5:6f:70:
4b:b5:41:aa:d5:f1:f3:3a:2c:ba:ec:69:5d:5f:15:
a5:85:1d:dd:57:11:77:ba:77:cd:f3:a0:e0:99:24:
cc:92:bf:70:c6:96:75:a6:20:98:cd:90:21:0c:87:
f2:a9:61:d2:36:e4:d1:6f:0c:ee:5b:84:58:e3:3c:
b8:42:4d:ba:c4:8b:f7:ed:8f:c7:a0:a4:50:dc:d4:
f7:3e:e2:02:f5:04:c2:72:e5:f6:f1:7d:db:3f:ad:
e8:a6:b8:6a:40:17:63:80:60:47:56:04:92:e6:de:
00:3a:90:10:2b:5c:c9:f2:c9:97:88:2e:a9:4c:5d:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:A9:D8:BA:C4:1B:7E:C9:1D:A6:75:E0:1C:10:BA:53:86:33:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/304A3384F43311EFBBD6696C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.93.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5e:27:df:a3:11:92:cb:6e:be:ac:4a:8d:a0:8a:e4:f7:3e:
dd:22:10:80:0b:1c:25:6e:d7:c3:ba:e7:c3:17:2a:1d:f6:ac:
4a:32:63:d7:8c:6f:cb:16:89:6b:3c:1d:df:23:8e:58:6d:a7:
50:34:d6:24:ee:6d:20:53:2c:c9:d6:1b:04:92:9a:c2:32:95:
90:c3:63:02:91:5a:14:a1:bf:e7:f9:d5:c2:fc:9e:a7:93:3e:
ed:18:61:ab:10:16:65:c9:9a:05:c1:34:55:5a:45:02:a4:03:
d0:db:7d:c2:51:c6:52:18:c9:bd:27:18:9c:a4:ef:79:52:55:
5c:5c:86:fe:27:c2:3c:58:e3:d3:2d:6e:db:e5:e9:21:c9:1f:
b6:88:a4:a5:dd:81:2c:8b:bf:6f:4f:39:9a:27:e7:84:0e:21:
25:2e:68:2a:11:59:ad:94:1c:6d:fa:55:fe:be:14:ad:ea:5a:
47:45:f6:52:c1:ce:49:01:9e:bc:30:b1:e9:c9:87:f6:bd:97:
1a:ab:63:17:7e:1a:68:e4:7f:d7:62:f0:86:c0:d0:82:dd:21:
12:2e:c3:e5:3f:11:b3:6d:ce:34:50:08:23:fb:84:3c:5b:4d:
54:f7:3e:60:a1:98:5c:6f:b6:86:d8:7d:e4:5b:03:ce:22:ca:
d7:90:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:00 2025 by rpki-client