Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5160EF86F43311EF8D18C86C762E951A.roa
File: 5160EF86F43311EF8D18C86C762E951A.roa (raw, json)
Hash identifier: sMOUntMmkNt6vN/5wUy6cfyZguTHYRQie/yN/qxqpr8=
Subject key identifier: 5C:E6:40:25:3D:E5:32:EB:97:AF:E0:6C:F1:29:FC:04:C0:1A:94:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016285
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5160EF86F43311EF8D18C86C762E951A.roa
Signing time: Wed 26 Feb 2025 11:17:52 +0000
ROA not before: Wed 26 Feb 2025 11:17:48 +0000
ROA not after: Fri 20 Feb 2026 11:17:48 +0000
asID: 984
IP address blocks: 154.199.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90757 (0x16285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:17:48 2025 GMT
Not After : Feb 20 11:17:48 2026 GMT
Subject: CN=67bef860-67b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:9a:83:ea:68:18:69:6f:85:3b:23:3e:73:
b8:ba:6d:45:f6:91:9b:da:9b:2d:39:61:8d:09:c8:
cd:9d:7e:6f:3e:2c:df:34:e3:47:80:40:3d:0d:4e:
ee:e3:2c:b6:9b:29:5b:14:21:a2:31:d5:cc:57:4a:
9e:17:e9:b8:5c:76:ec:6e:e4:b2:cf:c4:8b:92:1a:
c6:3b:00:af:65:9a:37:ac:ed:6e:f8:cd:92:ea:47:
d7:aa:6a:39:a2:71:52:8f:4e:3b:1b:2d:97:01:ff:
f3:4c:34:fa:aa:ad:fb:34:85:e2:15:11:1d:e5:bd:
5a:c3:d7:ad:e9:58:41:0a:9d:50:3d:61:02:2e:b4:
22:1f:86:db:0e:c3:06:fd:6a:fe:40:15:50:85:e2:
a2:54:63:e0:44:26:a9:fc:b0:eb:11:e4:54:68:04:
b5:e1:07:16:16:c6:20:0d:4c:e0:8b:60:c7:3d:f3:
5e:45:67:c0:3d:0e:8d:9b:92:37:54:84:14:9e:81:
da:db:9c:df:c0:fe:df:c6:e5:78:6a:90:bb:ad:ff:
bd:06:d0:e8:6e:2a:cf:16:eb:fb:d8:87:20:9e:37:
81:ec:99:74:63:71:62:ac:8b:18:95:99:a7:f7:d4:
16:16:93:27:5e:45:50:fe:3c:05:b7:fc:aa:a2:8c:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E6:40:25:3D:E5:32:EB:97:AF:E0:6C:F1:29:FC:04:C0:1A:94:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5160EF86F43311EF8D18C86C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.23.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e9:2b:af:c5:8b:18:87:5e:08:e5:2f:2c:2e:6e:6a:0d:81:
6c:a5:ce:70:03:0c:2f:bf:af:3b:75:33:dd:26:ae:4d:f7:5f:
b9:52:3a:86:28:03:71:5d:58:0a:73:a1:83:e3:cd:2c:dd:4d:
43:ff:a1:c2:c4:cf:e3:29:6d:8c:f4:57:c5:0b:89:87:22:93:
a6:54:c4:81:7b:a5:a2:58:1c:61:e1:d0:93:d8:d4:8f:ef:4b:
0c:dc:67:4f:ac:72:c2:e8:c5:33:f4:57:e3:39:70:e0:c7:27:
71:86:89:aa:48:1a:c5:9c:c9:e3:03:57:c3:c5:a2:08:d2:61:
79:66:78:8a:f5:4d:05:05:cb:c9:1b:75:63:a6:17:63:ed:4b:
de:09:f8:86:0b:bc:86:06:4d:98:df:90:86:8f:16:54:cd:84:
82:e2:e2:77:7f:42:81:88:ef:db:4e:bd:70:6a:c2:3d:bc:9e:
5e:b4:55:2c:13:97:8d:a0:99:90:14:e8:df:55:81:be:ec:9c:
32:fd:8a:38:51:e3:a2:81:db:23:e1:ee:59:3f:4a:62:3c:4b:
31:a2:b4:a2:65:1f:dd:2b:ea:f1:11:07:be:5f:29:98:6a:a0:
c9:33:6c:f5:59:4f:9f:ce:fe:ac:59:b2:ac:d5:1e:d0:a2:0c:
5e:84:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:50 2025 by rpki-client