Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8010A2DEFFE811EFA3C9655D762E951A.roa
File: 8010A2DEFFE811EFA3C9655D762E951A.roa (raw, json)
Hash identifier: Vcvo0z3ADGB5UwiYXs/R4UkOr3JYG720o6KNx871QxQ=
Subject key identifier: A9:61:CC:02:39:04:EE:6E:6F:44:ED:0D:F8:22:28:D6:92:99:5C:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017427
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8010A2DEFFE811EFA3C9655D762E951A.roa
Signing time: Thu 13 Mar 2025 08:52:32 +0000
ROA not before: Thu 13 Mar 2025 08:52:28 +0000
ROA not after: Thu 12 Jun 2025 08:52:28 +0000
asID: 398993
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95271 (0x17427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:52:28 2025 GMT
Not After : Jun 12 08:52:28 2025 GMT
Subject: CN=67d29cd0-8001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:0b:59:c7:1b:1c:9a:58:e4:1b:c9:e3:c9:
7a:81:2e:59:b3:0d:6b:4f:47:c2:17:36:d1:33:2f:
e2:35:38:bd:97:8e:63:95:97:e1:6c:f9:72:d7:ae:
d9:53:9a:59:52:57:69:45:de:21:89:5c:2b:5f:9e:
54:d6:12:37:01:56:5d:aa:11:06:1e:43:10:31:2e:
7c:46:e4:2e:36:fc:cb:ec:fc:e9:41:4d:14:3a:eb:
ed:7e:d0:60:a0:c1:4d:35:b2:03:eb:d9:20:0e:37:
e8:e4:2b:1e:41:f8:92:40:05:2e:dd:e6:7c:f6:83:
10:9a:27:14:ba:6f:cd:10:b2:db:2c:9c:73:c1:04:
be:3a:d6:44:e6:5c:fc:5b:b1:e4:f9:cb:b4:37:06:
f8:10:ad:e8:3a:8a:49:98:08:62:5d:f4:37:9d:b6:
23:65:ba:96:28:05:e1:e9:df:74:4d:ae:cb:50:72:
71:5b:b7:97:ac:26:6a:c6:7b:d5:86:92:5e:47:8f:
93:09:24:0e:ec:dc:92:aa:62:59:16:9c:95:2f:b4:
1b:1f:c7:18:0a:f1:87:19:ec:3a:98:15:40:22:42:
ae:d4:41:9b:c3:08:c9:da:9d:a1:3b:ae:e4:ff:eb:
b2:e0:06:f9:00:85:7b:c4:f8:ac:d1:f6:c0:f5:65:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:CC:02:39:04:EE:6E:6F:44:ED:0D:F8:22:28:D6:92:99:5C:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8010A2DEFFE811EFA3C9655D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:0a:20:bd:fa:7e:98:a3:6c:c6:b7:02:ab:93:b4:3e:62:e4:
e7:ef:1a:19:ac:31:d6:c9:ec:6b:c6:e4:bd:6d:95:8f:56:9d:
ba:25:2a:33:ed:a2:74:48:43:46:77:ff:42:67:d7:a4:d9:f3:
46:e8:c3:f6:3d:50:9a:53:48:55:35:f5:56:68:75:ac:b1:03:
ba:ac:67:82:c6:43:ee:60:ef:76:dc:a3:dc:74:a1:1c:f5:5f:
12:bc:4d:ed:30:25:50:c1:11:2a:43:34:dc:e7:00:98:67:12:
50:33:50:7e:3c:d4:9a:fa:b6:91:7f:28:8e:f3:b6:2c:fc:34:
2c:f3:10:4c:a9:79:be:e4:a2:cc:6f:9b:2a:fe:6a:1d:26:a6:
30:0c:ce:17:9f:6f:d1:fd:9d:b2:7f:62:28:d2:f8:09:b5:5e:
80:19:af:29:5f:ee:e5:c4:87:40:d2:03:b9:88:50:a3:a1:49:
33:5c:41:45:44:03:50:0a:07:c2:87:b9:6f:5d:b8:16:f9:e8:
3e:33:3b:15:13:ca:be:a5:c2:0f:84:4d:f2:b1:4f:d9:95:d7:
ab:0f:76:9b:8e:1e:aa:14:14:e4:9a:c8:14:20:e2:c8:42:8b:
f6:42:ef:f9:1e:17:66:c7:21:bc:7f:c4:a9:a9:64:e4:e5:0f:
a0:95:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:16 2025 by rpki-client