Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF2A602F45611EFA764D363762E951A.roa
File: 7DF2A602F45611EFA764D363762E951A.roa (raw, json)
Hash identifier: uIVyEk16EW7zxL1frcI+gdem1qARevzfQ3hOpGdWHZE=
Subject key identifier: DC:15:49:61:44:BB:52:CE:4B:44:20:97:DA:C8:2C:78:BD:DF:3D:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF2A602F45611EFA764D363762E951A.roa
Signing time: Wed 26 Feb 2025 15:29:39 +0000
ROA not before: Wed 26 Feb 2025 15:29:35 +0000
ROA not after: Thu 19 Feb 2026 15:29:35 +0000
asID: 984
IP address blocks: 154.210.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91347 (0x164d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:29:35 2025 GMT
Not After : Feb 19 15:29:35 2026 GMT
Subject: CN=67bf3363-ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:c3:68:38:1b:da:80:2e:37:a4:b9:9e:fd:
33:8b:cc:25:9f:e3:ac:3e:b5:de:f4:0e:da:b0:7b:
79:2f:65:31:fa:07:44:a2:2c:c7:81:14:fa:5f:53:
41:74:4e:df:90:3a:a4:e1:63:ed:6d:cf:09:8c:77:
94:54:ef:3c:4b:92:a0:37:97:9f:04:b0:41:a3:48:
61:95:a8:44:98:fc:0e:2c:7d:6e:03:ed:61:94:eb:
24:7b:8c:e0:aa:3c:b2:be:42:dc:64:83:dd:84:fb:
8e:ca:c6:e7:c5:dc:66:02:bb:f5:a3:e5:9f:bd:31:
b8:b5:5b:10:f7:50:07:fc:0d:ff:2d:d8:31:a3:60:
74:bc:21:69:e7:ae:44:bd:c1:35:20:01:20:1f:e3:
91:eb:12:02:4d:6f:74:31:9c:80:f3:59:a2:ff:f5:
e2:c0:df:44:59:59:c1:69:36:ac:e2:c2:fe:d7:09:
eb:50:04:45:86:e0:f9:81:27:a5:25:ba:62:a4:58:
fe:21:0a:09:ca:50:d7:59:b7:b9:06:89:97:8c:d3:
11:4c:49:04:4e:6a:89:ee:0f:0c:84:70:87:87:ee:
e5:67:1a:3c:da:2a:05:9b:f5:3e:20:8a:1b:5b:0a:
6a:84:ee:5a:cc:2e:87:69:15:70:96:8e:de:06:00:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:49:61:44:BB:52:CE:4B:44:20:97:DA:C8:2C:78:BD:DF:3D:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF2A602F45611EFA764D363762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.92.0/24
Signature Algorithm: sha256WithRSAEncryption
74:43:c2:27:06:a6:76:b8:59:82:2c:62:da:42:d1:f2:d6:0a:
d3:76:0a:83:48:fe:65:12:2a:bb:99:3b:69:80:b1:48:0b:ca:
76:61:9b:63:e0:75:e1:e5:bf:1e:a6:6f:ac:ae:3d:28:62:9f:
66:6e:d3:f3:73:32:6f:c1:34:2b:87:1c:79:44:c0:12:87:b8:
91:a5:c6:2e:70:80:8e:32:34:a3:0f:92:f6:96:b0:4b:d5:09:
38:6c:c0:55:95:4f:07:09:3d:bd:30:65:60:cf:c3:18:21:52:
78:f9:e0:36:a6:14:ef:d3:f7:d3:ce:e9:96:53:6f:42:50:27:
3e:9a:07:a8:80:c3:21:42:30:31:c3:13:f3:f0:b7:df:f1:3b:
c1:3c:ea:be:ac:3d:86:82:9a:2c:fc:01:93:f1:8f:c5:6c:96:
f0:71:17:e0:0f:9b:eb:58:99:70:c0:24:7f:91:6f:25:55:5d:
96:0f:de:5b:b7:6c:93:40:d5:9e:e3:71:06:b7:d2:0f:5e:6f:
55:61:a7:43:80:aa:73:0a:8f:19:ac:96:37:ca:74:74:0a:51:
2a:e9:c1:88:a8:ee:2f:2e:ed:7d:ff:40:4a:83:d2:7e:ff:b3:
e2:aa:bb:77:b4:72:54:79:b3:93:e9:b8:e4:88:cc:1d:60:c5:
2a:e2:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:16:16 2025 by rpki-client