Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE2E2A2F3F511EFAE794045762E951A.roa
File: 5DE2E2A2F3F511EFAE794045762E951A.roa (raw, json)
Hash identifier: Ghbmj60lh9RHn+f+B5yBfwaK1+7fr57NUquxLDg8TTA=
Subject key identifier: C1:86:CA:FE:0E:4C:C7:E6:59:58:C3:D6:BC:24:3F:75:89:79:36:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE2E2A2F3F511EFAE794045762E951A.roa
Signing time: Wed 26 Feb 2025 03:54:24 +0000
ROA not before: Wed 26 Feb 2025 03:54:20 +0000
ROA not after: Thu 19 Feb 2026 03:54:20 +0000
asID: 984
IP address blocks: 154.203.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90299 (0x160bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:54:20 2025 GMT
Not After : Feb 19 03:54:20 2026 GMT
Subject: CN=67be9070-3e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:f6:4c:71:42:f5:1b:87:83:96:10:8d:6e:
6a:8e:ab:37:00:ef:aa:e9:a1:6a:94:03:3b:24:d6:
20:f3:df:dc:4d:d2:9b:90:71:75:98:e7:43:59:94:
3e:18:0c:0b:02:45:c4:fd:ce:cd:b8:7d:f7:b8:06:
26:c7:78:fd:c2:bb:95:a5:69:2f:44:66:21:c4:38:
42:10:28:2b:e1:7f:ae:29:30:c1:30:d2:b2:52:fa:
9c:1e:9e:1a:5c:4e:dc:84:cf:02:27:df:b8:77:ce:
5e:69:ff:f0:50:15:db:4a:08:f0:a8:3a:46:a9:d9:
1f:62:92:e7:d7:d0:97:f5:86:6b:c7:d7:cf:d7:76:
c3:57:ea:0b:0b:e8:7c:ec:25:da:78:e7:47:a1:a9:
90:15:e6:fb:ac:59:b1:48:53:3a:27:b2:4f:87:ca:
91:6b:d0:6b:c8:2e:db:91:95:ad:84:6a:02:d3:4c:
ed:c2:11:c1:d9:c4:8c:43:2e:7b:02:fa:c7:a4:96:
33:0d:60:43:91:0c:2a:99:1b:45:0a:84:04:6c:68:
37:1e:42:7c:77:7d:eb:14:e5:84:ef:f5:ca:60:95:
0e:59:b9:bc:a9:0c:f5:57:4c:5e:cb:09:c6:b9:0d:
40:bf:a7:9d:5a:ae:35:81:e3:c5:29:d8:36:76:0e:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:CA:FE:0E:4C:C7:E6:59:58:C3:D6:BC:24:3F:75:89:79:36:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE2E2A2F3F511EFAE794045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:82:af:c2:99:6a:ce:df:2a:46:49:f4:44:1a:21:cb:e5:58:
b4:3e:bf:16:22:89:13:be:08:89:aa:c5:38:7f:0d:a2:0c:09:
b3:30:80:d0:7d:61:f4:f7:3e:fb:4d:42:a7:05:d2:03:e9:7d:
04:90:36:33:46:e8:94:de:f8:13:e9:bb:59:21:ce:80:31:d7:
d5:31:dd:b7:41:04:eb:6f:a9:5e:cf:75:b5:62:16:e2:a8:9e:
16:a0:1c:e0:0f:1f:d2:7d:35:f1:2b:e5:32:50:2d:a6:88:04:
c9:58:a0:f6:a9:53:e8:8e:eb:bc:1b:48:21:1b:1a:56:3d:53:
08:63:32:b3:2a:3a:9d:fc:4d:fd:6c:38:c4:0b:ad:9d:43:4e:
5f:86:9d:7c:ad:55:8c:ea:15:70:d6:79:b7:c2:c6:d3:bd:4d:
53:7f:9a:a4:5d:65:33:e1:57:b3:8e:bb:32:43:3d:64:33:0f:
ef:a2:b5:e1:29:10:39:69:7c:0a:57:dd:cf:ae:2a:bc:f6:ec:
d9:f0:d3:fb:d4:2a:e7:58:d8:da:d8:12:4b:b8:ac:bc:2b:2f:
92:ab:79:1c:35:f4:46:e6:a7:c8:26:1f:bb:0e:ff:d9:4b:5b:
75:a0:da:03:b9:82:90:d6:ba:ea:85:52:ba:3b:ee:f8:67:a9:
e8:17:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:17 2025 by rpki-client