Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9EC52F4BC11EF81619AB2762E951A.roa
File: 75E9EC52F4BC11EF81619AB2762E951A.roa (raw, json)
Hash identifier: T3VCmbbxkVJLEfl84DCKC/CaqLV+6MAP3L6anXdb228=
Subject key identifier: A0:C8:9D:06:5F:41:DC:AA:9C:09:CA:BB:66:B5:D6:2D:09:E4:19:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016634
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9EC52F4BC11EF81619AB2762E951A.roa
Signing time: Thu 27 Feb 2025 03:39:34 +0000
ROA not before: Thu 27 Feb 2025 03:39:30 +0000
ROA not after: Thu 19 Feb 2026 03:39:30 +0000
asID: 984
IP address blocks: 154.200.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91700 (0x16634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 03:39:30 2025 GMT
Not After : Feb 19 03:39:30 2026 GMT
Subject: CN=67bfde76-dd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:99:55:67:ac:ad:b3:6c:0c:ce:91:3b:b6:
fd:c6:d4:44:2e:d3:03:87:c1:71:80:8c:fa:6d:41:
92:1a:bf:b9:72:40:9d:04:a0:cf:47:91:96:1b:46:
64:5f:19:30:de:fe:a6:3a:5d:66:8e:07:2a:96:34:
da:67:63:1d:6c:8f:08:e9:f6:f5:ba:09:bb:fc:62:
ff:c1:ef:12:22:30:50:a6:12:97:19:46:9c:bd:ac:
a2:e4:b2:2c:86:5a:e8:29:73:26:f9:ec:98:85:92:
d5:e8:a2:9e:0e:63:8a:d4:f8:4e:83:88:c5:61:a4:
8e:48:a6:f5:74:71:02:ce:9a:52:10:a1:55:2e:a2:
50:60:4d:c6:74:1b:73:f9:3e:9b:af:ea:a4:2e:2a:
1d:67:19:ee:39:39:a6:61:5d:27:a5:6b:05:62:47:
4b:cb:4a:36:25:89:40:17:9a:be:bb:bd:ef:52:70:
ca:75:46:6f:f0:db:01:4f:b0:cc:ba:3f:d6:b6:a6:
d2:ec:91:d9:44:45:65:c7:b5:ab:52:c8:8b:9d:bc:
74:8b:e7:81:e3:27:b8:32:9f:1b:30:0c:a6:65:c2:
f4:77:43:a3:1f:0a:f8:c7:d5:85:6b:6a:30:d0:30:
a7:93:62:fb:a9:02:7c:de:2e:b9:59:40:b9:fb:fc:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:9D:06:5F:41:DC:AA:9C:09:CA:BB:66:B5:D6:2D:09:E4:19:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E9EC52F4BC11EF81619AB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.81.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c2:bf:57:06:90:6b:86:1f:50:c3:a0:71:21:ff:f9:10:33:
88:74:47:82:3b:78:51:88:e5:93:d7:e5:a9:07:e5:8d:c4:3f:
fc:bf:bf:40:90:76:d1:c4:16:af:b1:a7:55:db:f6:61:00:03:
d7:c8:51:50:7e:d5:5f:70:95:3a:d3:9c:0e:f5:9a:44:a6:69:
31:12:0d:db:89:3d:be:87:17:f6:0b:43:6f:82:5e:77:c6:42:
28:32:ae:a0:df:a2:43:62:3a:e6:4b:28:e3:a9:9b:b9:6f:91:
4d:1a:76:4f:c8:c1:8e:bf:57:fa:12:75:64:2a:64:d1:7d:e0:
42:fe:94:a1:e2:b3:04:40:92:75:9a:29:8c:d3:ee:5e:cf:ba:
ce:af:77:3e:c6:bf:a5:29:76:87:8c:d3:d3:cb:af:ce:b4:8d:
3f:b7:d2:5e:ac:76:24:23:7d:94:38:86:de:05:29:93:31:f1:
b5:a0:b0:34:43:c8:d7:29:82:2f:63:a9:92:16:bf:6c:89:0e:
7d:64:17:e0:6b:d6:c1:ef:c9:81:9a:ab:8a:ee:a3:a6:5d:d8:
d8:be:c2:5b:d5:03:ce:f2:43:e6:e2:6a:67:03:6d:24:71:94:
98:35:4a:65:65:99:db:09:d2:cf:55:e3:35:af:09:71:b6:3e:
20:7b:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client