Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9328AF43611EFBF278581762E951A.roa
File: 88E9328AF43611EFBF278581762E951A.roa (raw, json)
Hash identifier: j1MKKpKqEAnnquAR+xs8lhkqybk4Bh07UM//EVJFuN8=
Subject key identifier: 05:07:B1:B8:AB:12:92:96:54:BB:A2:5F:A1:34:41:05:55:4E:5B:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9328AF43611EFBF278581762E951A.roa
Signing time: Wed 26 Feb 2025 11:40:55 +0000
ROA not before: Wed 26 Feb 2025 11:40:47 +0000
ROA not after: Thu 19 Feb 2026 11:40:47 +0000
asID: 984
IP address blocks: 154.207.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90800 (0x162b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:40:47 2025 GMT
Not After : Feb 19 11:40:47 2026 GMT
Subject: CN=67befdc7-4b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:bd:eb:50:50:1d:ce:8b:93:71:a9:2f:77:
2d:17:80:99:de:29:7a:9c:58:38:be:70:88:8a:89:
56:fe:d3:fb:7a:1d:16:ee:54:95:33:eb:48:2b:f5:
a8:b3:2e:0f:e3:8d:9a:c7:60:b8:97:ce:fe:f0:f9:
73:88:37:2a:9c:5d:f6:5d:b9:0a:2d:8f:d6:68:85:
b7:1a:30:a3:fe:f8:d7:c3:d6:b5:80:ca:28:aa:a1:
26:9f:9c:e4:89:43:19:40:bf:7c:e9:5d:3a:21:5b:
23:c4:f7:e4:26:63:3a:b1:e0:ed:c7:82:c7:2d:80:
37:85:e5:ab:f4:c3:d1:96:be:f0:a0:0d:01:a7:3e:
8f:87:71:79:3e:8c:f2:50:61:c7:16:78:f1:ee:7d:
c6:ee:ad:b9:4b:5c:28:a4:e3:b8:c7:46:fd:d6:b9:
64:a1:08:ab:ae:a0:08:3e:11:bd:43:f0:38:26:7f:
ad:10:8e:0a:e4:9b:09:6c:10:05:11:67:6b:f6:b7:
37:2b:42:8f:e0:30:fe:5f:59:33:63:36:49:8e:85:
7c:e9:8a:76:20:35:3a:5e:b7:5a:1f:68:13:c8:92:
78:0a:34:7e:23:31:79:5b:58:98:22:0a:98:fd:58:
74:76:73:75:24:af:cd:73:e1:e8:56:6c:bc:f4:27:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:B1:B8:AB:12:92:96:54:BB:A2:5F:A1:34:41:05:55:4E:5B:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9328AF43611EFBF278581762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0d:6f:0c:1e:07:db:50:fe:49:21:30:df:94:f1:5a:9a:20:
69:85:fd:ba:54:62:4b:5e:78:45:d3:92:d6:c7:84:b5:ac:d6:
f9:00:59:7c:a1:ae:62:d3:c1:ac:7b:9c:9c:28:db:62:9d:17:
c7:50:a5:11:77:54:1f:19:8c:c2:54:18:3d:ff:d7:c8:45:1d:
32:ff:62:be:9e:3b:9c:c4:9a:15:88:4e:54:88:e3:f5:ee:4a:
fa:06:c2:68:c3:1a:4c:77:1c:8a:26:d6:b0:33:78:64:47:4c:
e6:60:5e:c5:1f:21:0b:12:58:25:54:2d:1e:10:0c:fc:d4:4d:
8a:34:6c:1b:b5:0f:3f:fa:84:fe:09:fb:d4:73:2c:f8:19:8e:
ef:ee:bb:18:9e:ac:02:19:5e:c0:c2:84:4f:94:d9:85:9d:3b:
13:49:52:04:8c:1f:7d:ba:d4:3c:93:34:70:db:ab:43:c2:f1:
96:19:5e:05:ac:f9:0f:c9:7e:e8:cb:af:b7:bb:34:23:25:e3:
1c:7e:02:9c:75:12:45:4e:39:43:f0:1c:f3:e4:19:22:e0:ae:
46:da:82:19:8b:c9:95:4d:71:86:f0:29:3e:bc:f4:82:e8:6b:
27:a2:76:02:7f:72:6f:7c:98:2b:a4:9d:b5:4a:03:48:2a:54:
98:80:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:28 2025 by rpki-client