Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3AA5C6F44411EF99D77766762E951A.roa
File: 9D3AA5C6F44411EF99D77766762E951A.roa (raw, json)
Hash identifier: 2OGPcevuDKbQophHqIQQTIszS00TxO0kbAgcWn5CrSY=
Subject key identifier: 8C:F1:0C:00:92:CE:BD:7A:23:95:5A:34:4F:61:01:BF:57:F4:91:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3AA5C6F44411EF99D77766762E951A.roa
Signing time: Wed 26 Feb 2025 13:21:41 +0000
ROA not before: Wed 26 Feb 2025 13:21:35 +0000
ROA not after: Fri 20 Feb 2026 13:21:35 +0000
asID: 984
IP address blocks: 154.83.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91057 (0x163b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:21:35 2025 GMT
Not After : Feb 20 13:21:35 2026 GMT
Subject: CN=67bf1565-a103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:09:f5:59:cd:64:62:0b:76:47:d7:6d:92:
58:92:57:66:ad:99:d7:c0:50:0e:79:4e:ad:29:af:
7c:65:d6:59:5e:f7:db:e8:29:a4:b7:14:92:a5:a6:
13:7c:77:9c:66:88:69:f4:f9:8c:59:07:6e:a4:56:
e6:c3:f6:4e:b7:56:9e:d3:87:a4:49:dd:11:c7:1b:
52:15:0c:8a:97:95:9a:c0:88:13:3e:ed:98:34:41:
2d:1f:b7:25:bf:4a:86:13:44:e3:69:c8:35:85:13:
82:72:a1:4b:24:40:88:88:54:84:30:2e:45:d1:ac:
4c:c5:c4:ed:93:9a:94:35:da:0c:30:5c:85:d7:7d:
56:ad:98:1d:a3:3a:35:bf:7e:11:fc:ae:c2:5a:e0:
bb:34:a6:26:2e:4d:33:c3:6f:34:58:a2:a3:0a:00:
27:39:cb:6d:aa:0a:68:b0:b5:1e:19:0d:99:db:94:
7e:0d:a2:e3:3b:96:e3:c0:95:ef:f4:40:b8:f9:4a:
47:9b:cd:fc:f8:80:3f:ea:79:28:84:6a:4a:b2:37:
61:7e:66:0c:72:60:f9:b5:d7:8c:4f:84:3d:a9:f8:
a5:81:2f:03:b9:25:dd:85:14:cd:bf:ce:28:5e:aa:
30:60:16:ee:00:69:71:fe:4f:8c:e4:94:4c:96:2e:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:0C:00:92:CE:BD:7A:23:95:5A:34:4F:61:01:BF:57:F4:91:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3AA5C6F44411EF99D77766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:45:73:7f:1f:ad:12:30:d9:ed:ba:fc:a8:86:84:00:81:52:
c6:fb:f9:6e:d2:e5:a4:b5:98:0b:97:fa:b7:36:b4:4a:49:66:
4c:a8:fc:7f:2d:a5:33:cc:42:dd:14:61:de:e6:5a:5f:87:12:
9e:b6:6b:2b:95:43:6d:70:82:ce:24:d0:65:b5:f6:b3:cf:d3:
1f:20:31:29:60:2d:13:d7:3f:3c:d4:43:bf:e1:e3:18:7a:42:
34:8c:52:2d:69:80:a6:03:83:cb:9f:c5:c3:29:87:91:d4:64:
d5:ba:e0:0b:0b:d8:f0:d4:60:f4:1b:9f:0b:cb:ce:98:a5:bb:
73:5c:62:94:d1:86:65:e4:3f:6f:a1:35:13:82:e6:a2:51:39:
b5:54:64:85:ef:85:9f:2b:a3:f5:ca:82:c8:86:d4:4a:e6:04:
4f:e3:d4:b2:ba:0f:4b:b1:1c:9a:5e:ee:e8:60:57:45:1e:6e:
d5:e4:5d:b5:1e:07:dd:1b:c1:01:d4:7a:60:2e:2d:af:1b:2f:
ab:46:f9:06:05:33:8a:11:ee:a9:e0:89:30:21:5a:b9:e0:79:
a5:9d:75:0a:8c:13:9b:52:98:3a:2c:37:c3:a0:b9:88:2c:eb:
63:f2:b2:cd:93:b5:56:c0:2c:20:4a:bd:c7:6f:5f:b4:fc:ab:
cc:8c:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:42 2025 by rpki-client