Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6998CF45C11EF97421D8B762E951A.roa
File: 4EC6998CF45C11EF97421D8B762E951A.roa (raw, json)
Hash identifier: VDOme8kJMTUcmblVq8b8lLhLrAUPgDJfHQ9Z+GwtNZA=
Subject key identifier: C1:27:40:89:51:68:A0:9A:EC:36:3D:04:C3:7B:E6:FE:2F:E3:42:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016510
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6998CF45C11EF97421D8B762E951A.roa
Signing time: Wed 26 Feb 2025 16:11:17 +0000
ROA not before: Wed 26 Feb 2025 16:11:00 +0000
ROA not after: Sat 19 Feb 2028 16:11:00 +0000
asID: 17561
IP address blocks: 154.82.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91408 (0x16510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:11:00 2025 GMT
Not After : Feb 19 16:11:00 2028 GMT
Subject: CN=67bf3d25-841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:2c:76:4a:5f:8a:8a:5f:aa:aa:a1:71:24:
b0:c5:56:21:f0:6c:02:fc:c4:da:0f:e8:bc:03:01:
55:d4:cb:ed:73:f6:3f:65:86:b9:4d:09:e6:56:34:
8f:81:62:80:36:e0:8f:04:9c:fe:cd:02:7a:0d:bb:
dd:38:ca:20:96:41:d8:28:c4:e5:f4:b3:1e:dd:cc:
ee:34:a0:c8:4b:8b:55:85:5c:99:95:11:07:0f:2b:
0d:2e:ea:5c:f5:09:5f:19:c9:fc:07:af:ee:0a:f0:
65:06:93:bd:f0:aa:1f:d9:32:6a:c9:27:a1:2f:bf:
f0:05:2f:b7:ee:34:4a:9c:03:4a:73:b7:a3:87:e6:
60:75:e6:c4:22:0d:68:76:fd:99:a9:eb:2d:66:c4:
bb:f1:a7:0c:17:fe:95:c3:25:e6:26:d5:f6:97:c5:
80:51:b1:ed:18:fb:15:b0:a8:0b:c3:5b:43:b8:53:
e3:33:8f:6a:bf:4c:ac:96:aa:0d:4a:86:21:00:af:
2f:82:37:fc:06:33:f1:02:3e:66:bd:cb:9e:8a:21:
3e:cc:f0:16:45:1e:94:b8:26:4c:c9:fb:51:7b:30:
9d:6e:c5:92:91:f1:3a:ec:3a:2d:51:bc:8a:45:a5:
67:d2:11:fb:f8:81:3c:ca:6c:e4:ac:44:69:a2:d5:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:40:89:51:68:A0:9A:EC:36:3D:04:C3:7B:E6:FE:2F:E3:42:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EC6998CF45C11EF97421D8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:cc:d2:f8:68:67:03:e0:ee:ac:25:92:cc:cb:a9:46:5c:
48:44:bc:6e:51:11:36:10:3d:c1:d4:01:f3:90:a7:97:b9:9e:
fb:24:c1:1e:17:63:34:c0:02:e3:08:0f:2d:3d:98:78:41:b5:
e3:8f:4a:9a:8d:d2:60:eb:da:85:f5:7a:66:73:14:37:b5:92:
77:2d:97:96:19:c2:38:38:76:92:ac:91:20:3b:01:ac:78:9e:
50:40:98:01:d9:2e:ca:d9:77:d8:00:80:3e:11:81:c4:06:f9:
54:64:93:f0:7f:2e:ef:0a:54:ef:cb:bf:aa:e8:36:8a:27:39:
bb:79:a3:4e:83:d1:47:3d:49:e0:19:32:8c:51:bd:45:89:c7:
98:76:20:68:c8:37:71:ed:3c:1d:d4:f2:55:f2:ef:b0:db:fb:
33:79:47:57:27:a5:ca:7f:53:a7:b5:24:a8:d2:19:12:16:36:
ea:47:3b:d0:74:4d:78:38:06:c4:b1:b4:7e:76:2f:a0:bc:d4:
55:06:81:33:84:ed:d9:6e:ff:3d:e0:f1:80:3f:ab:d7:db:f1:
1e:cd:2a:da:ec:d2:f0:3d:b7:ab:33:78:f9:85:53:45:c3:25:
98:e1:d7:86:d7:1c:9a:41:1a:9f:5a:82:fa:f4:63:a9:2a:83:
62:a0:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:58 2025 by rpki-client