Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784F7564F44111EF88221F50762E951A.roa
File: 784F7564F44111EF88221F50762E951A.roa (raw, json)
Hash identifier: OJr5mBUQWn3DIw85vPUZtc6k0IhzRge3xzQZhdeL5D4=
Subject key identifier: D0:EF:CE:CC:FD:B6:27:D4:E7:FA:47:32:09:92:7B:24:8D:4C:40:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01636E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784F7564F44111EF88221F50762E951A.roa
Signing time: Wed 26 Feb 2025 12:59:10 +0000
ROA not before: Wed 26 Feb 2025 12:59:07 +0000
ROA not after: Fri 20 Feb 2026 12:59:07 +0000
asID: 984
IP address blocks: 154.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90990 (0x1636e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:59:07 2025 GMT
Not After : Feb 20 12:59:07 2026 GMT
Subject: CN=67bf101e-1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:d0:e3:66:c1:5f:44:94:3e:94:12:c4:ba:
2e:ed:64:76:79:01:ec:f2:b2:1f:30:80:49:c6:f3:
99:7d:1e:b5:52:67:5a:27:f2:df:8d:74:b5:17:87:
3d:8b:71:07:b3:a0:9a:17:df:77:7e:35:58:15:03:
08:0b:35:fb:9f:26:95:02:14:f4:a0:ed:d6:8b:a7:
f3:23:30:88:67:df:15:c6:b9:ba:62:a4:84:68:0a:
07:ba:f6:88:bd:79:85:77:8c:02:15:94:aa:6a:58:
04:bc:10:6c:a2:42:b2:1e:79:ff:6b:0c:4c:01:a1:
30:7c:d7:0a:55:3f:63:d2:1e:c6:91:07:8a:df:61:
67:52:71:e1:cd:33:f2:bd:81:af:b7:4f:31:bf:3e:
b5:ef:1d:89:97:f8:a2:e7:9a:e7:c7:22:c3:2c:86:
6e:00:59:14:a6:53:01:e8:7b:23:01:5d:53:68:7f:
92:52:46:6f:91:b8:b8:97:1a:e4:97:e4:f1:72:d4:
3d:96:ae:0a:b3:ba:10:90:cb:61:81:6c:ba:de:71:
3c:5c:dd:0e:7d:c4:3c:1e:e4:ce:89:05:f1:06:63:
20:c6:5f:89:95:4c:f1:82:23:33:6d:53:9d:46:a0:
4d:04:6b:f5:ae:cd:5f:f9:9f:42:ac:5d:bc:33:ef:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:CE:CC:FD:B6:27:D4:E7:FA:47:32:09:92:7B:24:8D:4C:40:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784F7564F44111EF88221F50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9b:7d:f1:65:c1:44:cf:ef:df:ef:55:d7:db:1f:f9:46:08:
6f:f5:6d:14:4e:74:a3:1e:5a:13:1c:4e:c3:73:62:a3:1b:c5:
51:84:91:83:4b:45:eb:38:ae:3e:34:3c:6c:7c:50:a2:93:af:
54:22:2a:01:f7:41:f0:37:ee:44:a3:4a:44:93:1d:7b:d2:c5:
d4:05:9a:0b:a8:f5:a5:94:d2:1d:7e:12:22:8f:d6:0e:7d:6d:
b4:c8:3a:70:a5:8c:2a:84:0d:96:fb:a5:04:99:50:34:5b:32:
e2:72:6d:7c:23:d0:e4:23:fd:0e:fa:54:cd:4b:57:02:e9:3c:
f4:27:6e:6b:33:76:0e:81:75:be:0e:a5:da:3f:43:f0:ff:6e:
2f:55:26:ac:48:e0:f3:ef:00:d1:a5:59:e6:4f:bd:c1:5f:36:
62:48:39:50:6b:9c:63:93:10:51:45:ca:53:09:d7:db:e0:c2:
69:b4:cd:2d:f4:ef:49:ea:c5:3d:18:c6:04:a7:81:8e:cd:fd:
5b:b2:44:c8:62:7d:ac:64:eb:49:ca:f9:7b:4f:c5:1b:8d:0a:
48:0e:21:98:17:c3:2b:22:8b:19:8c:ec:94:52:2d:f7:aa:ad:
a9:f1:5c:4e:78:80:6c:d8:72:ed:b6:98:2b:c5:cb:7e:57:5d:
47:ba:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:34:55 2025 by rpki-client