Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E4FBBEF3DC11EF82A5D385762E951A.roa
File: 80E4FBBEF3DC11EF82A5D385762E951A.roa (raw, json)
Hash identifier: 9EZDYLV/Iz4cMvVsI6iUmnekU2+3w15fOxIl/ox3VUg=
Subject key identifier: 51:D1:7C:26:16:0E:D5:5A:42:E1:C6:D9:2A:22:45:12:D4:24:E9:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016051
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E4FBBEF3DC11EF82A5D385762E951A.roa
Signing time: Wed 26 Feb 2025 00:56:25 +0000
ROA not before: Wed 26 Feb 2025 00:00:21 +0000
ROA not after: Thu 19 Feb 2026 00:00:21 +0000
asID: 984
IP address blocks: 154.92.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90193 (0x16051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:21 2025 GMT
Not After : Feb 19 00:00:21 2026 GMT
Subject: CN=67be66b9-2f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:86:bd:71:2f:a2:ae:3e:44:7d:e2:a2:b5:
ce:b4:d2:2a:5c:ef:eb:48:a3:f3:ce:1f:da:5a:9e:
49:49:22:ac:70:70:09:a6:6b:3b:2a:d6:95:88:78:
61:df:28:01:47:11:e9:0f:85:7f:90:27:fe:5d:e1:
b1:2d:72:53:4d:15:fb:7a:e6:8a:29:46:d8:c3:f3:
cb:a8:9f:15:97:d0:d7:ff:f2:5a:c2:30:da:27:0b:
47:a0:87:4f:16:8e:96:96:61:8b:21:47:c8:40:a5:
a5:29:32:74:e2:64:d2:a7:61:86:71:cb:79:03:ba:
fb:55:4e:c8:ed:7c:d5:7d:7a:e7:e1:59:1b:86:da:
cf:fd:e2:d0:86:24:e7:88:83:78:5c:03:60:0e:ce:
95:98:24:93:d8:3a:e2:b1:4c:eb:32:cc:9f:c2:d3:
cc:11:c4:6f:f0:4b:21:45:0d:79:30:27:7a:f3:61:
15:39:b9:1a:17:55:b1:8a:51:40:52:bb:82:17:3c:
1e:d8:e1:30:db:81:6f:b4:b2:78:99:69:b5:9f:de:
bf:ae:39:66:2c:4f:bc:f7:c8:22:53:f6:5c:3a:aa:
0b:8a:a6:2f:5f:70:33:56:46:a5:ac:49:35:b0:14:
0c:c9:65:78:6c:5b:c1:10:0d:c2:75:99:09:0c:ed:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:7C:26:16:0E:D5:5A:42:E1:C6:D9:2A:22:45:12:D4:24:E9:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E4FBBEF3DC11EF82A5D385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.230.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f2:c7:88:22:ea:f4:2d:d7:06:99:44:cf:88:f8:3c:6f:4e:
d0:8c:c1:22:b8:90:06:ae:71:d8:15:19:29:b1:6d:f2:68:87:
4f:06:44:b6:8b:6d:37:aa:d7:4a:92:50:56:7f:ff:f1:35:a9:
cc:6b:f6:cc:db:f5:7b:de:83:5d:d7:91:64:de:88:28:8a:5c:
31:b9:df:be:42:9f:6d:2e:2b:fd:c4:12:97:28:8f:11:01:27:
8e:bb:1f:5e:2c:1b:13:06:af:d3:82:58:70:a7:d8:9a:72:36:
b8:97:d6:85:bf:e1:6b:c4:fa:ca:1e:40:5b:bb:91:2e:01:0b:
de:00:16:31:0f:30:13:d0:26:4f:1f:88:01:cb:bc:df:74:35:
b5:4e:cc:6a:67:f0:0a:98:e9:21:92:63:3d:69:8a:bb:4e:40:
85:cd:45:fa:44:f2:f4:39:f5:00:f1:36:0e:ca:f9:6d:b9:62:
b7:fc:99:83:8a:d5:c5:0d:95:8d:39:c9:71:94:9f:3f:99:fd:
a6:ad:7d:2e:5d:74:bd:f2:37:64:6c:25:5a:df:e1:da:d3:81:
96:22:c1:9b:f0:e1:4d:07:75:a9:e1:d3:cc:94:a6:76:62:76:
21:7a:78:70:1b:c1:ae:fd:df:bc:0f:ea:1a:7d:c5:cf:57:ef:
3e:be:f4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:52 2025 by rpki-client