Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F81693AF41F11EF89939D5F762E951A.roa
File: 3F81693AF41F11EF89939D5F762E951A.roa (raw, json)
Hash identifier: 0tSUr6kawHHrOZRrycy9y362Aj9hACm///4D2/afKX4=
Subject key identifier: 0C:1D:E3:2F:84:B9:DA:B2:5D:45:6E:48:6D:BD:CD:1B:1B:50:C3:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016181
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F81693AF41F11EF89939D5F762E951A.roa
Signing time: Wed 26 Feb 2025 08:54:12 +0000
ROA not before: Wed 26 Feb 2025 08:54:08 +0000
ROA not after: Thu 19 Feb 2026 08:54:08 +0000
asID: 328608
IP address blocks: 154.200.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90497 (0x16181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:54:08 2025 GMT
Not After : Feb 19 08:54:08 2026 GMT
Subject: CN=67bed6b4-98cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:d0:df:67:69:58:57:e7:69:0b:5e:2a:80:
82:8c:da:0a:7e:a6:84:7d:f2:8f:23:91:16:b8:4c:
fe:8d:a6:4d:98:9a:b8:7b:a7:74:2e:74:37:cb:eb:
a0:2b:2a:ba:58:5c:c2:61:8c:da:55:7d:46:e3:a6:
8c:04:bf:6a:84:77:a5:dd:59:2c:90:18:96:c4:69:
1a:37:aa:5f:14:63:59:53:5a:7e:81:54:0d:f9:5e:
96:ba:c4:3e:3b:a8:e6:ba:2f:e9:d1:d9:40:af:ee:
bf:67:cf:25:48:be:21:15:c8:79:da:7c:6c:8b:09:
5e:c0:0e:05:db:da:53:7c:65:ed:63:ea:c4:db:6a:
39:4c:0c:4d:a4:01:c7:7c:a7:00:09:8f:f8:d5:f2:
62:5c:5b:e6:68:7f:a9:b6:d8:46:92:ad:84:4b:c0:
4c:b8:0e:4d:2c:15:40:bc:d6:68:e0:7e:c3:a4:89:
2a:fa:6d:55:8a:a4:97:b6:94:72:5b:73:9e:3a:b9:
e9:01:96:55:87:c8:27:05:a6:00:d7:71:eb:a4:4f:
d5:cf:b5:46:14:56:19:63:6b:39:f3:a3:44:2d:d6:
2f:0f:f0:91:e4:6f:79:e1:ba:1e:9f:11:bd:cb:d7:
0d:58:a0:a6:2a:1b:c7:64:b1:e4:a3:b6:3d:53:83:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:E3:2F:84:B9:DA:B2:5D:45:6E:48:6D:BD:CD:1B:1B:50:C3:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F81693AF41F11EF89939D5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.201.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d4:ba:a9:e8:f7:a9:fe:d6:a8:24:51:af:99:12:63:02:32:
23:3c:79:2e:09:ff:67:e6:8c:cb:1c:b0:54:26:33:fb:67:26:
94:f1:19:04:41:d2:e9:df:9a:34:e1:1d:bb:10:ef:f1:36:a1:
3b:02:9a:c8:30:0e:10:21:5b:5f:32:ff:00:cc:39:67:66:9e:
78:7e:a8:44:71:a8:c7:c9:80:ca:45:b8:bb:c4:09:5f:64:f2:
59:f3:25:02:4f:b9:18:77:7a:02:05:42:0d:0e:a7:51:3d:3c:
9e:a0:56:7f:1c:79:ab:f2:f2:62:7b:5c:8b:87:7b:eb:e0:1e:
c0:b1:05:82:7e:7b:0a:28:79:ef:ca:de:0c:3b:a6:5a:75:07:
f3:10:df:aa:27:a4:60:8b:7f:f5:42:1a:d9:b0:ee:70:35:5a:
ca:d1:c1:b0:98:40:cf:8f:5f:ab:02:a3:f1:5a:1e:4a:26:71:
ca:b3:e9:92:90:fc:38:b4:1f:37:fe:fb:c9:b2:7c:85:b5:89:
42:36:b4:6c:44:08:52:39:7b:57:24:7c:69:ea:f1:3c:f7:23:
b2:dc:5e:84:ce:32:a8:ad:70:d0:13:f3:8e:32:09:2f:06:61:
09:5c:45:77:b2:4a:12:7b:de:c6:7d:2f:39:52:c4:95:d7:eb:
21:0d:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:45 2025 by rpki-client