Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E6A7146F3F011EFB48FE3A0762E951A.roa
File: 4E6A7146F3F011EFB48FE3A0762E951A.roa (raw, json)
Hash identifier: TUdkA6bOMGeZI74jFsLDJzdEOQiC8HZZs4/1NhURVWA=
Subject key identifier: 88:92:9A:E8:EA:DE:2D:7E:CA:7B:DB:5A:B3:16:12:7D:36:36:B0:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01609F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E6A7146F3F011EFB48FE3A0762E951A.roa
Signing time: Wed 26 Feb 2025 03:18:10 +0000
ROA not before: Wed 26 Feb 2025 03:18:07 +0000
ROA not after: Thu 19 Feb 2026 03:18:07 +0000
asID: 984
IP address blocks: 154.203.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90271 (0x1609f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:18:07 2025 GMT
Not After : Feb 19 03:18:07 2026 GMT
Subject: CN=67be87f2-1eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:93:4c:e9:94:37:34:d5:f1:dc:f4:0e:e4:
95:52:64:4a:6f:76:58:0f:32:9f:81:07:bb:5b:61:
ad:21:c5:fd:3e:72:1b:9b:2a:60:97:40:92:d7:5f:
a4:1b:b4:1a:cc:5f:f6:a7:84:d0:bc:05:05:37:63:
5f:f2:d0:ac:d2:d1:35:a9:43:17:57:05:d9:43:79:
f6:15:82:ab:e2:43:10:db:6b:c8:30:74:d2:c5:c0:
cd:91:14:71:13:40:10:44:96:83:84:67:90:66:5c:
14:ee:36:e0:72:e2:4f:54:ab:95:fc:57:14:9f:00:
67:41:d6:6c:a6:f9:c6:c2:19:b5:d8:58:1a:bf:c4:
8c:6f:56:c4:a1:54:76:84:4d:ae:be:9d:af:b4:b5:
6a:c8:16:d0:68:f3:d6:15:ec:72:d7:06:73:d6:ed:
3c:e2:94:08:00:35:f8:77:4c:39:f0:12:90:fd:61:
91:1b:b8:57:0f:4f:26:6c:a9:62:af:23:ab:19:39:
14:26:23:e0:3b:a3:90:ab:29:42:77:39:e5:ba:4c:
4c:cb:15:c9:10:ff:d8:8c:0c:77:fa:f9:15:98:55:
1d:f3:0c:0a:28:10:b5:83:91:55:05:e6:4e:0f:19:
72:6d:4a:de:a1:8d:c2:9c:69:8e:a7:3c:3e:82:25:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:9A:E8:EA:DE:2D:7E:CA:7B:DB:5A:B3:16:12:7D:36:36:B0:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E6A7146F3F011EFB48FE3A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cc:eb:89:14:c5:18:4f:03:07:3b:0e:cb:d4:33:37:49:8e:
f7:ad:c8:96:6a:93:71:2b:fc:3c:e5:15:00:8f:b5:cc:24:83:
a1:93:e4:1c:a8:dd:55:38:07:27:85:a1:58:c3:5b:56:3f:96:
73:41:95:89:44:2f:26:be:3d:00:92:56:3d:f4:a5:ca:16:2e:
e7:fe:d5:cc:9e:28:ac:28:04:9d:e8:86:d4:20:b1:8a:fc:7a:
77:45:20:d0:56:bc:7b:93:bd:7d:bc:a3:df:74:03:87:64:3d:
d7:62:c7:f1:96:a6:ef:3c:c3:6e:fd:43:f3:e5:2b:00:2d:8b:
82:a2:08:c5:21:16:2e:c0:b0:00:3c:d4:5b:cd:64:ac:75:7b:
0b:6d:a3:69:45:f4:07:c1:41:a6:19:3a:93:38:9f:29:11:2d:
0a:26:b8:25:0f:16:c7:86:aa:fe:27:b5:fb:ca:66:ee:a4:ca:
39:ab:af:f8:b0:38:4c:32:5b:21:06:58:60:1b:0f:c2:54:d3:
da:e1:1f:a5:56:42:c2:72:de:ff:92:26:b5:21:e9:28:26:3e:
d0:09:c2:f9:52:4c:5a:ab:43:fa:08:6d:e7:70:47:33:76:94:
52:cc:7f:f7:a1:1d:95:ec:79:16:83:cd:f2:52:e8:66:9c:4c:
6d:7e:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:42 2025 by rpki-client