Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE118F2F43811EFB751618F762E951A.roa
File: 6DE118F2F43811EFB751618F762E951A.roa (raw, json)
Hash identifier: 5FNjqkTlaPeTJBrfugoLXur9IV2dDXq6yp5sKBC8dfw=
Subject key identifier: 38:29:71:19:D8:EE:2C:11:63:69:3B:47:B2:B0:DA:0B:40:78:58:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE118F2F43811EFB751618F762E951A.roa
Signing time: Wed 26 Feb 2025 11:54:27 +0000
ROA not before: Wed 26 Feb 2025 11:54:23 +0000
ROA not after: Fri 20 Feb 2026 11:54:23 +0000
asID: 984
IP address blocks: 154.199.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90832 (0x162d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:54:23 2025 GMT
Not After : Feb 20 11:54:23 2026 GMT
Subject: CN=67bf00f3-f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:c3:e9:13:53:c8:fa:44:e0:8f:53:bb:6a:
37:4c:67:8d:2f:d2:6d:b3:5c:52:27:f5:f7:9c:4e:
e8:ce:dc:ed:95:54:84:f8:a7:30:50:b4:12:7d:ad:
d2:e9:23:f1:46:f9:93:98:09:96:b5:79:be:08:ee:
be:a9:f2:fe:20:3c:7c:0a:ff:cf:88:94:38:01:f6:
a6:24:c8:73:13:52:11:83:f6:27:39:ee:84:45:18:
f8:a9:c2:e1:f9:bd:0c:1a:32:22:14:b5:b3:08:04:
5d:77:ad:cb:08:61:fb:c6:2a:6b:dd:04:d1:53:34:
9f:44:34:3b:39:94:ea:a9:0f:89:9e:ee:72:bb:9b:
c5:0f:9f:5b:61:43:96:8d:9f:71:cc:7b:91:d2:aa:
15:db:1f:39:5f:13:49:eb:86:9e:f9:a0:8f:25:cf:
2f:04:3a:ad:97:43:b8:4c:71:93:ad:68:0a:bd:6c:
d2:89:e3:1b:ef:9a:ed:9a:31:c3:52:11:11:4e:dd:
68:06:f8:50:5e:7b:b1:40:c2:78:95:c0:2b:30:12:
2a:e1:39:a5:20:7d:73:72:61:e0:3f:53:45:6d:f9:
e6:16:61:3f:d0:9d:ca:09:47:d1:a2:bf:1e:67:3e:
ab:e0:e7:c1:8f:4d:fe:fb:09:31:51:e1:6c:1e:fb:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:71:19:D8:EE:2C:11:63:69:3B:47:B2:B0:DA:0B:40:78:58:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DE118F2F43811EFB751618F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.144.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:38:56:03:50:6d:c3:db:bc:0b:f1:0e:78:c5:03:d4:49:1d:
4a:0b:5e:8c:fa:1a:f6:32:c9:b4:a1:aa:a9:67:4a:44:45:47:
89:51:64:23:7f:f6:f9:c9:60:c4:69:67:f5:3e:15:17:18:4d:
6d:6c:ed:2f:3e:d2:e0:80:ac:6b:b8:c7:f2:d8:bc:bd:2d:eb:
be:5a:0a:5d:7c:c4:09:39:7a:0f:16:00:b7:01:39:30:3f:f3:
2b:2a:f4:c7:9d:93:8f:66:f0:73:1b:30:ee:2f:39:2e:3a:71:
6d:94:ca:cc:f5:78:4c:d3:f7:02:8e:a9:5d:1c:e2:60:38:b9:
d5:ab:d7:0e:d8:dd:0c:91:0a:f9:96:ff:4a:fa:65:a0:2d:ec:
45:3b:25:4d:a7:6b:67:ed:9b:2d:7d:16:29:86:b1:aa:84:71:
e1:d8:2a:4c:5a:79:0e:4e:7a:71:79:22:bd:a5:81:37:25:22:
0f:58:4d:bf:84:9c:10:23:7e:dc:1b:82:f2:c0:bf:71:3f:37:
3d:8d:47:0e:0c:81:c0:3f:0e:b0:c9:df:c1:c9:91:7e:96:62:
ae:b7:5f:9b:79:09:a7:ba:95:e2:3d:f9:89:b1:3d:e1:1d:ee:
eb:34:2f:e1:47:76:94:d7:1a:c0:b7:c2:1c:4c:de:e4:fd:4a:
97:29:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client