Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471C75BAF41D11EFBB69C451762E951A.roa
File: 471C75BAF41D11EFBB69C451762E951A.roa (raw, json)
Hash identifier: rNLuQvFito7jFYX9tZB75eM+XKsIgqGvDZy7ON/ZFyg=
Subject key identifier: 10:61:BA:8A:F5:35:9E:0E:D4:13:0B:8A:C8:22:E1:F9:82:F0:8B:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01616B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471C75BAF41D11EFBB69C451762E951A.roa
Signing time: Wed 26 Feb 2025 08:40:06 +0000
ROA not before: Wed 26 Feb 2025 08:40:02 +0000
ROA not after: Thu 19 Feb 2026 08:40:02 +0000
asID: 984
IP address blocks: 154.206.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90475 (0x1616b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:40:02 2025 GMT
Not After : Feb 19 08:40:02 2026 GMT
Subject: CN=67bed365-dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:37:98:4f:5f:4f:a1:12:1b:2a:c9:59:4a:
10:ca:10:7c:97:49:c6:7f:69:8c:ae:a1:7f:ed:8f:
d7:b0:ac:36:a3:33:20:1d:14:8a:75:6d:f6:d5:72:
68:ab:9e:36:1a:4c:e2:70:e4:cf:2a:55:6a:59:71:
ad:ef:02:1b:07:2f:4c:9b:0a:8d:0e:b2:c8:11:a2:
c9:8b:57:37:83:09:d6:83:d8:40:67:f8:03:6a:1e:
6a:21:44:07:56:39:d4:e3:0c:c8:3b:c0:63:d2:31:
91:03:0d:73:06:c6:81:6e:51:fb:52:99:39:21:b7:
61:7f:2a:e1:56:e2:7c:9b:4e:1b:9c:e7:f5:45:0c:
5d:b4:92:d5:95:9a:f9:e1:24:2f:3f:e3:13:e9:6e:
4d:67:39:57:2c:ab:3a:6b:b3:21:90:8c:1b:95:34:
e0:84:aa:8e:35:61:74:b1:ac:87:9c:e8:7d:04:46:
97:79:6a:53:90:88:c5:ef:83:ef:f3:39:dd:54:ec:
21:d7:1e:c9:7d:03:15:3a:33:63:e4:64:f1:db:ca:
b9:e7:2e:92:f3:5e:80:1b:62:c7:b0:db:19:79:51:
c4:1a:a1:6a:5e:73:c7:23:69:08:a1:34:0b:6f:9c:
b6:87:6f:02:71:c8:7c:2c:dc:da:9d:b8:b6:9d:60:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:61:BA:8A:F5:35:9E:0E:D4:13:0B:8A:C8:22:E1:F9:82:F0:8B:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471C75BAF41D11EFBB69C451762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.216.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8f:6e:94:1f:03:58:69:f2:a7:23:d6:28:d7:9c:47:4a:76:
ed:40:9f:fb:8e:7b:31:f0:aa:c9:7c:d7:a6:35:ce:ce:c2:c9:
2a:11:35:e1:5f:17:45:12:53:32:c8:a1:5d:06:cb:25:6d:17:
cd:38:4a:ae:a7:f0:21:a5:d4:67:f1:cf:54:7f:58:cc:19:7b:
c6:ae:64:c4:60:f8:f6:f5:3c:e4:de:cc:3c:d9:3c:1b:91:e8:
9e:ce:4f:ce:3d:12:f9:88:62:f0:84:0c:43:bb:50:eb:59:fe:
52:c7:44:fd:18:d0:b6:5d:55:9e:d0:f7:f1:63:e7:8b:f5:ab:
2d:40:5d:fe:3b:01:6f:8e:67:a2:b0:fa:04:44:47:86:68:99:
bb:3e:62:47:4d:53:56:75:c5:02:36:4f:73:24:58:c6:95:f2:
34:a3:60:9d:d6:b1:44:26:c5:80:2b:b1:62:5f:6e:1b:ef:1f:
f2:1b:5e:ef:81:0d:68:82:cd:b2:7d:b3:6b:2c:ed:3e:8c:37:
af:21:79:89:97:3d:00:2d:b6:1c:e9:54:a9:76:47:8e:17:06:
f6:01:de:bd:dd:99:96:4f:f4:a4:d5:46:c3:1b:b7:25:2d:5c:
a7:dd:d4:d1:b9:b0:a8:a8:ed:af:b6:e9:c9:b1:07:44:3c:08:
a5:3f:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client