Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82B686ECF43B11EFBA0F24A5762E951A.roa
File: 82B686ECF43B11EFBA0F24A5762E951A.roa (raw, json)
Hash identifier: WbWY6qLGGUBHoWFoZK2NmjhnpaiWS234eybBpNc0CjU=
Subject key identifier: 94:C7:F3:A7:67:DC:7D:75:FE:BE:F4:CD:C4:76:A4:7C:BB:4D:36:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82B686ECF43B11EFBA0F24A5762E951A.roa
Signing time: Wed 26 Feb 2025 12:16:30 +0000
ROA not before: Wed 26 Feb 2025 12:16:27 +0000
ROA not after: Thu 19 Feb 2026 12:16:27 +0000
asID: 984
IP address blocks: 154.208.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90884 (0x16304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:16:27 2025 GMT
Not After : Feb 19 12:16:27 2026 GMT
Subject: CN=67bf061e-6021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:eb:81:90:b8:3c:f4:51:e6:1d:31:22:34:
cc:3f:a3:df:40:8c:16:d7:d3:97:33:2b:3f:77:13:
b3:3f:43:6a:75:61:78:a6:92:d8:74:9e:50:eb:62:
a2:49:43:5b:61:c8:69:64:45:ff:52:b3:ad:de:88:
26:44:f1:98:11:9f:60:7b:b7:e2:8c:d7:2f:cb:63:
6f:ca:47:9b:00:76:e6:57:7b:5f:0a:2e:03:5b:bc:
94:7e:c6:35:7e:1b:bc:0b:6c:2a:1c:c3:b6:bd:02:
dc:27:cd:71:c6:d6:f1:90:29:9d:68:4e:6c:cb:39:
c4:10:f2:c9:06:98:1f:30:32:68:81:79:10:06:06:
41:42:c6:fd:47:85:31:5d:fc:60:ed:f3:fa:6f:dc:
cf:78:5d:e4:a1:bb:0b:73:a3:3c:cc:ee:e1:e0:83:
d9:52:58:04:b6:fe:59:be:98:29:b0:ce:5b:45:7f:
bc:39:44:32:d1:0c:7e:4c:f0:51:9d:33:4e:cf:15:
13:bc:e9:e2:c0:38:56:4a:5c:71:ec:0a:8b:b0:ca:
e8:de:eb:f9:42:f9:17:81:c5:2e:03:dc:c8:04:6d:
41:8e:80:f7:de:40:92:53:63:2c:4c:26:b0:38:01:
14:41:70:c3:3f:ab:11:af:72:3e:5b:06:61:01:75:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:F3:A7:67:DC:7D:75:FE:BE:F4:CD:C4:76:A4:7C:BB:4D:36:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82B686ECF43B11EFBA0F24A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.116.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b3:70:c3:e6:cc:19:69:59:ca:34:1b:57:7a:6c:32:65:96:
9a:f5:77:62:66:60:15:ad:8b:7b:54:58:1e:4d:24:60:af:22:
7f:0a:7f:6a:1e:f5:cc:92:35:59:88:53:9c:e3:27:04:c7:c1:
71:75:dd:9a:4a:b1:d4:f8:06:e5:d3:7d:06:38:d4:3c:66:bf:
ec:56:b2:73:67:61:74:4b:13:d5:d8:24:bb:d3:26:96:bb:8e:
2d:3f:97:d1:87:c2:f0:5b:68:4f:b8:21:3c:29:29:29:5b:2f:
10:42:59:24:b6:63:0c:79:48:63:00:42:6e:29:e5:fe:9d:ad:
33:2c:f2:db:70:7b:39:5d:bc:f9:89:a3:14:bd:3e:87:dd:19:
93:f7:68:1b:cb:5a:35:5b:cf:67:a6:84:2a:13:ed:3d:9e:9e:
f1:79:80:fe:68:35:cf:38:37:93:04:64:d7:34:f0:69:9a:64:
95:8d:60:49:b0:7c:97:3e:34:37:30:b8:0f:4e:5a:b6:8d:f4:
bc:23:cd:64:8f:8a:82:90:53:fd:f3:e9:95:ce:95:96:82:9f:
c2:b4:e8:97:11:f4:50:74:48:d8:d5:3e:6a:e9:b6:e4:91:a9:
45:17:62:88:9b:37:fc:9c:0f:87:12:88:a9:15:d1:0e:0d:56:
7d:82:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:51 2025 by rpki-client