Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8F0E0F3E011EFB4EE20A3762E951A.roa
File: 45C8F0E0F3E011EFB4EE20A3762E951A.roa (raw, json)
Hash identifier: HRGIiClHRHCAHUyTAEvKjfMt9A0uAygccHIT+MJYT9w=
Subject key identifier: 06:63:C3:20:D6:13:35:02:7E:A0:9B:7E:AA:29:13:F7:35:09:A5:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016058
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8F0E0F3E011EFB4EE20A3762E951A.roa
Signing time: Wed 26 Feb 2025 01:23:24 +0000
ROA not before: Wed 26 Feb 2025 01:23:20 +0000
ROA not after: Thu 19 Feb 2026 01:23:20 +0000
asID: 984
IP address blocks: 154.92.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90200 (0x16058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:23:20 2025 GMT
Not After : Feb 19 01:23:20 2026 GMT
Subject: CN=67be6d0c-64dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8e:ba:8b:28:5e:79:1d:f2:63:08:87:65:7f:
6e:03:76:30:7c:f3:f8:eb:e7:39:1c:5b:b3:21:22:
16:5d:e9:2e:36:4b:b0:78:2a:eb:7d:8b:8b:cb:8d:
f8:6c:4e:ea:e3:07:f7:00:fa:c7:dc:ce:b7:e7:8b:
0d:96:42:5a:a3:46:84:1a:ac:62:81:51:ff:f7:9c:
af:12:63:b1:39:f3:fd:f3:28:99:dc:c5:1f:e1:f4:
30:43:6a:e5:f7:18:8d:64:57:7b:bd:ce:57:1a:82:
a6:6c:e1:5e:e9:7f:27:32:2d:c3:cc:91:d0:8c:8e:
d7:84:c3:32:fd:fb:7f:1f:3c:9c:e0:7b:78:80:50:
31:e9:5e:5e:44:39:ea:4e:bd:f8:75:e9:bd:f4:f5:
3d:3e:77:c7:3b:42:b9:d9:62:1e:33:50:bc:ea:82:
13:f7:40:7b:67:80:e1:1c:7b:3a:6a:c8:2b:bd:e4:
e7:db:a5:ec:0b:ae:81:af:bd:b2:dd:84:fd:32:09:
42:07:a0:73:f8:f5:54:f2:4f:37:21:68:bf:66:03:
c6:c1:66:a7:23:ea:24:d9:fb:1d:ed:c9:2a:07:57:
bb:52:f9:f2:1d:51:97:e0:f8:a9:18:65:a8:cd:e0:
08:c2:a1:af:b5:7a:37:9b:24:72:75:d4:b5:3e:c7:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:63:C3:20:D6:13:35:02:7E:A0:9B:7E:AA:29:13:F7:35:09:A5:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45C8F0E0F3E011EFB4EE20A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a1:65:82:62:df:15:b6:a6:e3:41:43:33:2e:06:5e:35:a1:
70:e6:0a:18:80:68:6a:93:5e:0e:14:24:08:a4:13:3a:76:7a:
aa:91:fd:b9:e3:8d:f1:cd:e6:b4:94:d9:8c:c2:65:35:c1:2b:
9e:4f:7d:3d:0a:bf:24:7f:58:06:c5:2a:57:c6:4c:61:ad:38:
f1:10:d5:5b:c5:91:f6:43:81:03:60:57:e9:0e:2c:ea:4a:05:
13:ed:38:2f:b6:45:d0:b5:88:3a:ee:9c:33:6c:28:55:ce:c2:
11:40:35:2c:69:12:e3:f6:4e:3e:16:bd:18:5c:14:e7:b7:62:
05:da:5b:47:23:50:a8:54:17:e9:d1:09:c8:77:1f:c6:62:87:
04:6f:56:db:68:c8:81:3d:88:e3:3b:4b:b2:a3:d7:c9:bd:00:
33:5a:c9:cc:f8:2c:b9:06:80:fb:55:d9:f4:33:15:50:4d:44:
48:6d:fe:78:29:22:d7:0d:8f:f5:39:f6:65:1e:b4:4b:2b:87:
18:a1:d0:7f:9a:65:9e:51:d0:d0:48:3f:07:78:5c:02:6b:e1:
4b:54:0b:ca:7f:6c:1d:ef:17:a5:4d:81:6d:49:d0:0a:cd:65:
e6:9d:4c:7b:3b:e0:d1:e8:33:30:fb:18:e8:24:b5:dc:a7:c5:
c3:aa:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:22 2025 by rpki-client