Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649EEA36F45A11EF99DDDF80762E951A.roa
File: 649EEA36F45A11EF99DDDF80762E951A.roa (raw, json)
Hash identifier: gU+KEmp0R58u7lyn0214zn5BbpWqbraWSdR7iBQ3hck=
Subject key identifier: B0:BE:76:D7:AA:D4:86:64:4A:EE:AB:53:83:3F:0F:43:D4:D4:7E:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649EEA36F45A11EF99DDDF80762E951A.roa
Signing time: Wed 26 Feb 2025 15:57:35 +0000
ROA not before: Wed 26 Feb 2025 15:57:23 +0000
ROA not after: Thu 19 Feb 2026 15:57:23 +0000
asID: 984
IP address blocks: 154.210.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91391 (0x164ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:57:23 2025 GMT
Not After : Feb 19 15:57:23 2026 GMT
Subject: CN=67bf39ef-b8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:3f:46:d9:98:9c:f7:77:63:17:86:e9:c3:
17:2c:ef:f3:42:4a:f0:f1:02:48:d1:f1:2d:0e:01:
88:90:29:c0:37:a6:05:c6:62:66:ec:8d:fc:c4:ea:
9e:6f:4a:f6:ab:45:ee:40:1f:a1:4e:e0:98:ef:9c:
83:0d:da:63:9e:ef:90:38:6e:bc:17:dc:f9:b1:e2:
39:c9:b4:ed:26:80:0a:4c:de:df:b2:ea:f5:3c:2f:
de:ef:dc:a6:50:56:63:bd:56:4b:55:e7:09:ca:0f:
2a:6e:97:1c:a8:c2:3b:aa:06:64:f3:15:dd:9a:42:
23:22:2a:c0:88:a0:1e:70:7a:d9:62:5b:80:87:21:
53:19:69:4b:6f:f3:0c:fe:aa:6a:ea:38:85:10:be:
df:1d:7d:43:e8:5d:48:b8:4e:de:97:65:19:9e:5c:
c9:46:91:0f:f6:c1:c2:c9:9c:2f:ef:96:1b:0e:7d:
28:55:de:a3:2d:c0:f2:ae:28:14:96:7d:5b:7d:05:
0b:de:12:bd:d5:57:52:f0:03:54:ba:bc:84:19:96:
0d:1a:73:2f:b0:1e:fe:f6:38:71:9c:56:a8:97:0e:
b3:d5:db:df:5b:49:0e:17:7e:5e:18:bc:60:f0:c0:
a5:ae:be:48:10:34:2e:62:34:4c:c6:c7:ba:01:f6:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BE:76:D7:AA:D4:86:64:4A:EE:AB:53:83:3F:0F:43:D4:D4:7E:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649EEA36F45A11EF99DDDF80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.107.0/24
Signature Algorithm: sha256WithRSAEncryption
46:de:ad:63:f6:bc:18:85:f7:eb:eb:7e:b2:d7:a1:d7:0b:ef:
a6:2a:c3:6b:08:56:ca:d9:85:a4:86:11:19:2f:a5:0f:80:be:
e0:3e:36:a3:26:74:df:0b:0d:7a:3d:d1:cf:b6:6a:9e:4b:7b:
84:ef:18:e7:1f:d4:c9:e5:ea:9e:10:10:c2:02:cf:f2:57:85:
92:51:90:59:13:ef:36:36:7c:be:c8:fc:45:63:79:b4:02:b8:
91:d7:22:6f:2f:16:a3:d1:9b:10:81:36:e6:05:58:ce:bb:f1:
8d:11:26:90:7f:0a:55:35:5b:a8:8b:65:44:a9:ac:5f:9c:7f:
74:cc:9a:36:b3:fd:86:c2:4b:54:82:0a:c0:77:a2:fe:be:da:
8e:0e:26:a3:2a:0e:63:a3:af:b8:e0:ac:c4:a9:99:8b:c4:d3:
5c:7a:d1:16:e3:e1:09:03:3a:fa:62:90:4c:b8:35:61:70:2b:
5c:0f:d1:e7:15:e0:5e:83:c5:3c:1c:62:d6:4b:ac:22:1b:1b:
79:bc:ed:aa:e6:42:57:38:b7:cc:47:63:49:0d:15:4f:8d:16:
ef:76:b3:38:5c:d4:2f:b2:d4:df:51:08:0f:cb:d2:d8:ec:eb:
0b:53:d7:13:50:49:3c:0f:a3:82:47:8e:66:42:3a:5f:13:aa:
8e:8d:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:41 2025 by rpki-client