Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025E18AF3FC11EFB59D8073762E951A.roa
File: 5025E18AF3FC11EFB59D8073762E951A.roa (raw, json)
Hash identifier: 5He85GS1HpLrcGLM9Q2p+KZjccWHUseGjSJfqmGbMF4=
Subject key identifier: 9F:AC:0E:3A:05:BF:14:77:E2:DC:F8:BD:9D:B5:33:BC:5D:8C:61:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025E18AF3FC11EFB59D8073762E951A.roa
Signing time: Wed 26 Feb 2025 04:44:07 +0000
ROA not before: Wed 26 Feb 2025 04:44:03 +0000
ROA not after: Thu 19 Feb 2026 04:44:03 +0000
asID: 984
IP address blocks: 154.203.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90337 (0x160e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:44:03 2025 GMT
Not After : Feb 19 04:44:03 2026 GMT
Subject: CN=67be9c17-aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:a6:0b:53:5a:8d:cc:b9:1c:d4:61:eb:53:
cf:1b:d5:57:6a:89:de:94:15:0b:ad:4a:20:1e:1e:
8f:ae:3d:75:0f:85:5b:a7:7a:7a:23:cc:b5:ce:f3:
30:f0:28:05:4c:f8:81:6d:41:16:49:b0:45:e6:4f:
71:ed:a5:be:72:90:8b:8f:dd:bf:47:97:dd:d6:e3:
76:64:35:ca:fa:72:b9:08:62:f2:08:2d:86:90:c3:
63:26:30:1e:37:e3:02:05:5b:70:a0:78:a5:88:69:
22:77:67:11:a1:ee:b9:fb:d5:67:31:a9:03:16:9c:
7f:0f:f4:ff:18:36:8d:e5:95:0a:88:1e:f3:0e:f9:
20:96:35:0f:70:36:e1:70:e4:75:46:4c:db:d8:84:
d5:c7:b1:c5:fc:b9:c2:71:e1:e5:78:72:ee:6c:20:
5f:c5:86:7f:19:b3:e7:55:18:8b:b9:25:60:49:f1:
fa:25:29:03:ff:2e:66:42:a8:37:b2:23:9d:89:98:
50:a0:59:47:56:35:df:e2:c2:f9:1e:bb:9e:0e:0f:
54:4d:70:73:80:97:92:be:08:32:3d:b7:ca:30:8a:
b1:0d:fc:74:36:42:f8:93:35:24:cb:0a:ba:ef:3b:
6a:ac:96:21:5b:4a:bf:7e:22:af:32:2d:c1:dd:77:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:0E:3A:05:BF:14:77:E2:DC:F8:BD:9D:B5:33:BC:5D:8C:61:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5025E18AF3FC11EFB59D8073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9e:1d:74:bd:69:ed:70:02:f6:31:46:ef:39:c3:36:d3:f8:
eb:9b:32:45:81:df:5e:23:3a:b4:ed:55:d7:72:4e:cb:0a:a6:
f2:be:46:17:89:dc:25:a8:a8:a6:17:c0:84:d1:21:ae:a5:35:
d6:d4:64:82:2f:3a:d6:b5:58:58:2e:34:4c:23:7b:1f:c3:ec:
34:f3:6b:8c:35:7e:30:1c:2b:3a:98:e9:24:19:2a:5c:0a:70:
c2:3c:c4:c0:1f:ca:48:47:39:78:9d:a6:9e:fe:54:b3:69:6a:
4c:24:3a:80:2f:c8:cf:d7:51:ec:56:b1:c3:b1:b0:2d:5b:60:
4c:85:32:95:8d:26:86:34:53:31:66:85:58:b4:16:cd:b4:04:
26:af:c6:c0:b4:39:86:be:0d:cd:17:8a:02:c3:a0:6d:02:a6:
39:77:0a:8c:4f:be:1a:5b:1c:ad:72:65:96:20:27:a7:0b:33:
b0:90:fb:7d:61:4d:4d:5a:ca:e5:d7:0b:76:b5:17:09:02:1c:
2a:60:32:cf:5a:5c:92:37:50:c6:d3:dd:2e:4d:7a:89:45:d1:
78:a4:e1:87:de:38:08:c9:77:a6:f0:17:9e:68:05:cd:a2:06:
db:d7:1b:1b:63:a2:69:6d:54:37:1e:f2:5d:75:05:e2:95:e6:
a5:9b:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:32 2025 by rpki-client