Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E5097EF43911EF8DAB7A98762E951A.roa
File: 82E5097EF43911EF8DAB7A98762E951A.roa (raw, json)
Hash identifier: tXYcOUH5RrHhExxyQvz1QwQGDzkDesyCBUutRqJrijU=
Subject key identifier: 8D:CB:CA:03:7A:90:E2:8F:78:91:07:FF:2E:D9:2A:27:41:C9:CC:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E5097EF43911EF8DAB7A98762E951A.roa
Signing time: Wed 26 Feb 2025 12:02:12 +0000
ROA not before: Wed 26 Feb 2025 12:02:08 +0000
ROA not after: Fri 20 Feb 2026 12:02:08 +0000
asID: 984
IP address blocks: 154.199.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90854 (0x162e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:02:08 2025 GMT
Not After : Feb 20 12:02:08 2026 GMT
Subject: CN=67bf02c4-201c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:7e:7f:95:5b:71:95:75:c8:9e:33:a6:6c:
64:0c:a7:87:e3:c2:66:09:93:91:00:b0:a3:28:1b:
a2:63:71:87:1d:3b:cf:93:85:5a:fd:d7:22:bf:9a:
a9:f8:f7:cb:8e:58:a9:26:d4:fb:09:88:05:bd:8d:
72:e7:ad:2a:77:97:9d:a9:f0:77:9b:05:89:23:30:
ea:5e:35:b5:a5:6b:d4:77:e8:e0:4c:e7:9e:a0:55:
53:df:44:16:35:6a:ae:13:f5:b9:a0:d3:b3:fc:ab:
e1:73:d8:ba:8f:e5:c9:71:35:85:f4:12:61:50:df:
e7:7e:84:a6:92:d3:1a:60:03:e2:6c:91:78:76:1d:
f2:ed:13:4e:96:18:1b:7d:12:34:71:bc:95:74:f0:
57:51:00:33:c9:d3:27:7d:12:ae:d6:83:fe:55:9a:
70:4a:ff:94:98:6e:6e:91:ec:7d:75:50:c8:e0:07:
d1:d7:2a:5d:eb:70:e9:3d:11:f6:9b:c8:00:d2:94:
14:af:1d:75:a4:6a:38:47:19:36:52:c1:09:6e:0f:
95:35:cb:47:5b:20:58:52:da:80:d6:a7:03:e7:34:
2d:f6:43:23:f8:9a:bd:11:11:f9:e3:2d:8f:15:e7:
9a:2f:06:04:7d:7e:d9:b0:51:a3:ca:b8:a9:e9:07:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:CA:03:7A:90:E2:8F:78:91:07:FF:2E:D9:2A:27:41:C9:CC:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E5097EF43911EF8DAB7A98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.147.0/24
Signature Algorithm: sha256WithRSAEncryption
32:37:21:f5:1a:d9:5c:da:28:95:cd:89:ef:59:13:71:d3:dc:
fe:ff:52:2f:a6:a8:03:8d:ef:41:dd:0b:3c:ce:ef:36:2a:b1:
23:40:05:22:17:f8:ed:95:83:84:7d:1b:36:d3:51:78:bc:04:
89:a8:15:c3:cd:70:cd:93:96:6a:e1:28:58:30:64:1d:5e:36:
6b:5c:d8:58:c2:30:33:7c:a2:92:48:e0:0d:05:d6:11:27:e6:
c4:77:3c:cc:39:bb:30:f1:6e:55:33:5a:84:4e:06:69:5c:88:
1d:0d:b8:f2:c6:4f:dc:4f:fa:91:93:b9:cf:26:e1:71:5b:33:
4b:5d:44:49:02:51:3b:bc:51:e8:20:36:e7:e2:3d:c0:57:08:
19:fe:22:38:e9:d1:92:0e:fa:da:2a:9c:94:e3:ff:c3:a2:e9:
4d:0a:6d:a9:0c:a9:57:e0:d5:d0:1d:e4:cd:f9:0a:a2:7c:4c:
96:a7:ae:42:14:41:61:9f:87:c2:67:fa:dc:db:dd:1b:8c:7e:
3a:28:7a:9c:02:e5:09:88:30:cd:8b:6b:9b:97:b5:46:1b:7b:
70:cc:14:b5:2a:40:06:b8:e0:7b:90:e7:09:b6:7f:15:2c:9e:
e5:80:13:c5:20:74:b5:4c:3c:15:fa:9a:6f:26:99:e6:9c:67:
fd:5e:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:15 2025 by rpki-client