Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76FAFA78F42611EF934CD490762E951A.roa
File: 76FAFA78F42611EF934CD490762E951A.roa (raw, json)
Hash identifier: G5uACoGm0dr8KepEpt9E9A+LS72BNBbsdARN8Uykuio=
Subject key identifier: 56:A9:F7:E9:94:22:A5:71:5A:2A:04:9E:01:C5:AD:69:02:EF:E8:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76FAFA78F42611EF934CD490762E951A.roa
Signing time: Wed 26 Feb 2025 09:45:51 +0000
ROA not before: Wed 26 Feb 2025 09:45:48 +0000
ROA not after: Thu 19 Feb 2026 09:45:48 +0000
asID: 328608
IP address blocks: 154.200.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90617 (0x161f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:45:48 2025 GMT
Not After : Feb 19 09:45:48 2026 GMT
Subject: CN=67bee2cf-68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:28:20:ed:d7:62:0f:eb:c0:0f:8b:d4:ad:
3b:e3:cd:9b:d9:ce:0e:06:3d:b0:5e:ed:84:81:31:
a5:88:85:a2:ff:ba:bb:1a:8d:6c:17:6d:ea:3a:4f:
3f:92:16:76:21:ed:ba:db:73:32:68:01:ab:50:29:
a9:26:25:78:7d:89:ce:c4:5f:99:3e:16:91:4b:8c:
6e:fc:1b:60:b0:8f:ba:d1:62:7a:8b:d4:f8:fc:19:
76:3a:a2:f4:c4:f8:cb:aa:71:fe:51:20:1e:7a:21:
4e:ee:d7:7b:b1:68:e5:34:a4:df:bf:83:ac:f6:24:
eb:9a:91:da:95:4e:b9:d3:8c:4a:2d:ed:b4:0d:22:
42:fc:fa:5f:37:36:c6:4a:c5:48:9e:ea:aa:fe:15:
05:77:68:2f:d3:7d:f7:cf:02:45:aa:d6:40:66:6f:
48:83:6c:7b:92:74:5e:92:0e:b0:77:32:ec:a1:d2:
26:d9:59:ff:e5:1b:c0:a8:c5:53:ac:c4:ef:53:26:
23:30:2b:f7:29:f7:78:40:aa:46:db:12:db:40:4f:
96:0a:42:b1:68:fe:b2:83:e3:84:91:e2:51:e4:8b:
24:4d:5b:09:9a:11:59:8e:ab:60:e6:20:47:b1:1d:
c7:92:b5:85:89:28:43:c6:f0:f1:ef:44:a7:cc:b1:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:F7:E9:94:22:A5:71:5A:2A:04:9E:01:C5:AD:69:02:EF:E8:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76FAFA78F42611EF934CD490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b7:a1:d5:a3:c0:20:c9:77:a7:d9:b4:d4:17:19:25:3c:a2:
ce:81:e1:78:e0:3e:1d:b4:76:be:ff:bd:ad:8c:e7:ca:8f:c6:
ce:4d:a5:d9:79:71:26:b6:6f:00:42:79:02:95:63:90:b9:3c:
d4:4f:41:9b:e0:1e:2d:8c:b0:3a:82:85:80:6a:cb:dc:5c:5e:
af:79:b1:78:09:02:2e:5c:73:f9:17:3d:15:a0:76:6a:8f:cc:
85:53:26:a2:50:94:ef:f0:27:85:a5:c6:7c:43:84:24:77:29:
82:f0:a5:f0:a6:07:7b:a8:63:17:e4:d6:c6:a2:d6:0a:c8:a9:
61:7b:46:86:4c:f4:e4:50:35:62:07:92:cf:e8:13:df:e7:d6:
44:ec:8f:13:92:9b:0e:8f:89:2f:12:bc:75:79:e6:e3:b7:08:
c6:e5:d3:0b:45:bf:b0:9a:ec:72:e7:ee:1f:dc:e3:a6:92:a7:
eb:5c:fa:de:ff:cf:f2:25:7f:ef:7f:20:9e:73:0d:0f:02:83:
a5:f8:cd:e5:4d:f2:09:7f:11:f4:d6:48:a2:3a:bf:7d:44:57:
14:98:ab:50:af:94:7e:ec:14:da:3a:80:99:97:ad:a0:14:f5:
68:d7:73:01:3d:e4:cc:58:d9:a2:23:ee:d9:d8:3d:2b:fd:a4:
79:5e:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:20 2025 by rpki-client