Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4EBA9AF3D411EFAF9A6950762E951A.roa
File: 4D4EBA9AF3D411EFAF9A6950762E951A.roa (raw, json)
Hash identifier: WJoPcNwoTHtlwtynF/QKLYoucjUPD82dlxBs0IVZKPg=
Subject key identifier: 9A:62:86:E6:35:FC:71:5E:59:63:45:39:D7:A7:EA:91:B8:F6:2B:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016025
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4EBA9AF3D411EFAF9A6950762E951A.roa
Signing time: Tue 25 Feb 2025 23:57:43 +0000
ROA not before: Wed 26 Feb 2025 23:57:38 +0000
ROA not after: Thu 19 Feb 2026 23:57:38 +0000
asID: 984
IP address blocks: 154.88.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90149 (0x16025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 23:57:38 2025 GMT
Not After : Feb 19 23:57:38 2026 GMT
Subject: CN=67be58f7-ce57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:7f:cc:f4:4e:6f:b6:82:7d:05:20:30:fe:
d2:a3:f2:df:32:b4:95:cc:99:b7:41:a8:1b:cf:03:
4f:f5:41:dd:79:b2:af:a8:7f:26:8b:ee:0a:53:77:
f1:4b:d7:2e:d5:65:eb:38:1a:7e:71:ba:10:b8:74:
46:12:9d:7b:c0:ef:6c:2c:97:70:75:05:90:1f:a8:
0e:bb:e2:3a:8a:16:e1:9c:b3:44:42:4d:d4:47:b2:
e6:1a:c9:a4:bf:28:4d:8e:e8:5b:50:26:25:c0:d7:
04:70:0d:50:fe:9b:ca:7e:80:fa:e6:e7:fc:35:99:
34:93:21:01:84:bd:c5:e5:db:ae:bf:fd:58:57:f6:
89:b0:12:dc:6f:bb:6a:91:9b:51:67:ee:1f:97:11:
f4:17:9c:95:df:ac:97:9b:e3:9d:92:3a:2a:43:89:
20:00:f9:53:7c:31:8d:29:ba:43:ed:92:c5:aa:20:
58:40:21:73:ef:ab:fc:1b:75:b4:2d:3c:2b:c8:7b:
d7:2d:84:a1:ed:8b:9c:7a:5e:4e:07:08:9c:5f:e7:
87:b2:71:a6:96:31:17:67:b0:ca:8d:b9:58:19:30:
d6:98:1d:72:1d:8a:0f:0d:bf:18:95:03:a9:be:6c:
1d:8e:8e:6b:6f:13:df:e4:0f:34:f9:46:71:79:2f:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:86:E6:35:FC:71:5E:59:63:45:39:D7:A7:EA:91:B8:F6:2B:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4EBA9AF3D411EFAF9A6950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.127.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ec:01:db:ae:5a:32:14:05:c3:13:4c:e4:41:e1:d2:41:a7:
56:55:02:6f:0a:5c:a6:3f:30:46:dc:1f:a2:a6:60:e3:12:b3:
61:13:5e:c7:fc:56:61:2d:80:84:80:88:6c:d5:46:89:b8:f9:
90:f3:92:1a:9d:83:5c:4d:56:6d:1c:63:03:7b:3c:73:60:40:
80:95:a5:ff:7e:44:bd:22:4d:a0:81:9a:d8:17:fa:98:fa:4a:
89:5b:d8:97:fd:60:57:af:2d:81:f6:1e:5a:39:1d:32:8d:35:
54:1e:13:1b:e3:9b:4e:91:60:ee:3b:db:ec:0e:05:f2:f3:84:
aa:de:ae:2e:60:15:d9:bd:b2:74:4a:99:95:26:4e:7b:a3:d5:
e8:c7:62:fc:ae:62:9a:ca:01:c0:c0:3a:ab:ca:ab:8a:f5:4e:
fa:d9:51:69:38:fd:e7:88:2b:05:d3:97:1c:51:9e:6f:e8:c5:
57:7e:cb:2b:0f:6c:87:35:f1:35:c9:8f:44:c8:92:7b:86:30:
4f:ff:6d:87:ea:a2:b2:94:ae:77:27:ca:6c:84:07:04:cd:52:
ee:2e:ab:4d:d8:8e:59:82:50:13:db:4e:c9:69:8e:f4:a5:95:
00:17:6e:e9:b0:11:e6:05:3a:df:4d:34:11:57:3e:e2:3b:aa:
3a:bc:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:46 2025 by rpki-client