Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AF0530F44111EF80C8B950762E951A.roa
File: A3AF0530F44111EF80C8B950762E951A.roa (raw, json)
Hash identifier: C7f40WnXnPEUmei4nsoe1RHLXsiC/k0pEDc6MvnRM5s=
Subject key identifier: 7F:F1:A7:F1:25:CE:B4:6C:D6:02:50:01:DE:F4:DF:13:D5:CB:D3:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016372
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AF0530F44111EF80C8B950762E951A.roa
Signing time: Wed 26 Feb 2025 13:00:23 +0000
ROA not before: Wed 26 Feb 2025 13:00:19 +0000
ROA not after: Thu 19 Feb 2026 13:00:19 +0000
asID: 984
IP address blocks: 154.208.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90994 (0x16372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:00:19 2025 GMT
Not After : Feb 19 13:00:19 2026 GMT
Subject: CN=67bf1067-83d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:19:de:67:0b:7c:0e:a7:e0:c0:23:2d:84:
eb:25:19:f3:73:94:c7:e9:95:1b:cb:7e:30:b4:65:
b1:c4:6d:2b:24:b6:f3:7a:a6:da:84:d7:38:18:03:
55:39:99:1a:25:18:3b:38:77:5b:be:97:28:42:95:
40:c8:a9:b8:80:fd:44:9c:31:69:8e:53:a3:ec:e2:
39:0b:c6:6a:f1:73:77:b6:cf:c3:2e:7f:4b:ec:55:
f9:ab:34:c4:54:c1:2e:d2:f4:d5:80:f7:77:3f:b3:
92:ac:ea:10:ab:49:9c:a7:38:ae:52:0b:f0:e0:e1:
92:17:b1:f0:87:15:50:cd:52:3f:62:91:5a:45:99:
d8:3e:03:23:2d:81:cf:35:20:f0:b1:ff:42:8c:d3:
30:93:8a:6a:c2:95:b1:81:63:66:7c:c3:83:09:e2:
5e:16:1f:c1:cd:3b:96:95:47:18:ae:81:42:84:64:
ac:ca:33:91:f0:b5:15:85:6a:1c:64:b8:75:d4:af:
8a:57:d2:1f:03:9e:1b:81:bc:26:cd:54:29:06:72:
bc:72:a3:b8:13:1b:88:56:f4:0c:12:d5:32:f2:ba:
85:54:2c:4f:22:fa:aa:7c:47:e5:a4:4f:74:09:88:
f0:a0:0c:1c:2a:36:d9:c5:b3:7c:a8:b4:7c:a8:3c:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:A7:F1:25:CE:B4:6C:D6:02:50:01:DE:F4:DF:13:D5:CB:D3:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AF0530F44111EF80C8B950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:58:d2:f7:3b:58:a8:79:0e:19:f0:c3:2d:e0:31:86:0e:c1:
a4:7a:92:bc:bd:5e:69:9a:86:68:ee:54:27:64:e8:2f:18:68:
42:1e:53:01:54:98:51:18:94:e9:8c:6e:b1:01:4b:c7:af:9b:
3e:db:75:b9:89:08:d2:82:0e:d1:a9:81:c2:56:86:83:a4:d9:
ca:0c:8f:42:e7:7e:d9:04:8b:1d:7d:0f:e6:d6:88:25:b7:fc:
95:90:90:e6:53:4d:85:fe:b5:7a:f9:13:78:e9:46:e8:c2:0c:
69:5f:20:aa:10:d8:ba:ef:3b:20:ad:62:3c:c5:40:73:c0:c4:
cf:5e:76:e7:9d:c7:34:46:f8:ce:48:96:76:ff:a1:66:5d:28:
4a:c7:f3:0a:96:92:0d:24:b0:48:78:f8:56:95:64:c5:e5:13:
0b:7f:29:7d:98:a9:51:c6:1c:bc:0f:06:8a:d9:14:1a:3b:d1:
49:59:c6:69:f7:5d:2d:e9:a2:ae:26:38:cc:5e:fd:f9:6d:16:
c1:8a:e8:02:df:30:2f:11:19:76:64:82:95:bf:6f:2b:23:a3:
87:59:96:77:98:cb:84:17:e1:6b:d4:91:0f:da:80:0c:99:d6:
c5:55:3b:9c:aa:5a:32:85:76:b0:85:0b:87:67:00:6e:fe:9d:
19:46:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:19 2025 by rpki-client