Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC9A61AF3EF11EFADA01597762E951A.roa
File: 3CC9A61AF3EF11EFADA01597762E951A.roa (raw, json)
Hash identifier: y9iV4kyaDePqZJAAStzFzPxRYu462ZayEkSazoUzx2U=
Subject key identifier: 67:F4:2A:89:9F:6E:80:40:51:CB:95:EC:C7:4B:19:66:58:21:BE:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC9A61AF3EF11EFADA01597762E951A.roa
Signing time: Wed 26 Feb 2025 03:10:31 +0000
ROA not before: Wed 26 Feb 2025 03:10:28 +0000
ROA not after: Thu 19 Feb 2026 03:10:28 +0000
asID: 984
IP address blocks: 154.203.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90265 (0x16099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:10:28 2025 GMT
Not After : Feb 19 03:10:28 2026 GMT
Subject: CN=67be8627-f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:9a:2e:71:7e:90:b9:cd:cf:72:c6:29:e6:
88:4a:42:16:0e:62:3f:93:cb:c5:9d:c5:fd:f3:43:
e4:ee:74:38:46:16:e4:80:f0:04:35:a2:29:b9:9e:
75:3f:d4:fd:ec:4d:1a:63:d0:60:c2:0d:a9:f0:22:
bc:d2:44:e6:cb:c7:ea:ba:30:92:37:ec:fc:c6:81:
c9:68:83:80:0c:7b:0c:98:3b:e6:ce:a4:2b:0e:fa:
d0:5c:a6:b4:ce:21:d8:f2:5c:40:53:04:4a:a8:05:
5a:ae:3d:ed:6e:7c:4e:9b:cb:a9:16:ae:5a:82:fa:
7e:bb:e3:ad:ce:cf:e2:8d:e0:26:3d:db:2a:36:78:
4c:20:d3:b6:4c:e6:80:ee:a3:18:96:0b:bf:4a:12:
5a:45:7a:ac:9a:d4:c6:ed:c4:e5:54:53:49:42:23:
89:43:df:ad:92:2b:89:4c:35:f0:ce:ea:aa:1c:34:
b2:ec:e9:e9:96:c6:48:98:e8:0c:94:83:f2:23:fe:
5a:ae:62:0f:9d:67:52:c2:6d:c5:d0:36:ca:b1:d1:
8b:38:c5:ee:85:10:47:83:ec:79:45:50:9e:6e:cb:
14:a4:9f:50:5a:05:35:43:01:54:0b:2b:fb:da:83:
33:01:32:49:eb:a6:df:80:4d:3d:d8:83:e6:db:72:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:2A:89:9F:6E:80:40:51:CB:95:EC:C7:4B:19:66:58:21:BE:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC9A61AF3EF11EFADA01597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:58:94:b5:37:57:c6:85:f9:f8:b2:60:3e:a0:d5:8b:67:01:
f6:af:2b:06:05:69:14:df:3b:a5:86:b6:8b:db:fc:9c:32:e4:
cd:51:2c:fd:b3:93:f2:c4:af:91:19:ce:07:94:37:b8:32:bc:
67:b8:a9:d9:3d:05:58:99:76:f9:a1:45:4b:83:50:2b:3a:1b:
3e:f0:2b:6e:f8:a1:16:f1:17:8e:53:7f:ee:1b:3f:97:1d:9a:
f5:e3:a7:7f:bb:fe:44:90:cc:4c:9b:e5:08:cf:eb:b9:ef:19:
19:cd:b2:e3:29:33:0c:ca:fa:a1:03:86:9e:32:33:9d:b7:e2:
bf:55:cc:47:ac:f4:b5:4d:7f:de:d7:9b:f8:a2:36:8e:c1:5e:
4c:40:2c:5c:5c:2f:01:39:07:5b:29:e9:20:7d:70:74:73:64:
42:a2:7f:12:3f:94:6d:11:c2:cc:fd:77:32:81:b2:05:0c:c8:
df:d4:07:73:25:bc:65:6d:85:d4:a0:9a:8d:d6:4e:e5:ca:0f:
17:cf:29:3e:bb:a9:50:8e:5a:06:18:66:9d:4f:80:a7:c8:20:
f8:bd:aa:4b:44:14:1a:19:c7:55:f3:80:d6:b9:2a:6a:7a:8b:
2f:4c:11:b7:f5:a3:a5:ab:96:b9:7d:84:75:7e:c8:73:92:32:
8f:97:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:21 2025 by rpki-client