Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A62174A8F44E11EFA83D1BAD762E951A.roa
File: A62174A8F44E11EFA83D1BAD762E951A.roa (raw, json)
Hash identifier: RVYYjJpMSIk6qBMxyvfgsqQDTeo8lRJVdMpNJ7IGX6Q=
Subject key identifier: B4:25:AB:48:C0:B9:4D:26:2E:87:43:EB:3B:58:65:E1:72:08:87:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01645B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A62174A8F44E11EFA83D1BAD762E951A.roa
Signing time: Wed 26 Feb 2025 14:33:30 +0000
ROA not before: Wed 26 Feb 2025 14:33:27 +0000
ROA not after: Thu 19 Feb 2026 14:33:27 +0000
asID: 984
IP address blocks: 154.210.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91227 (0x1645b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:33:27 2025 GMT
Not After : Feb 19 14:33:27 2026 GMT
Subject: CN=67bf263a-2aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:ca:8f:9a:29:25:ee:ca:44:a0:34:70:eb:
a9:d1:87:da:8a:e1:e9:7f:9b:f5:cc:47:6a:7c:1f:
76:bd:5d:e1:7d:8f:41:86:a7:a6:00:5e:c0:5c:55:
fd:93:30:17:5e:53:24:11:77:17:2d:a0:4e:c2:46:
8e:26:99:f1:e1:46:31:64:e3:ba:6e:5d:63:ee:69:
4f:d2:c5:c9:5b:ac:60:ae:38:5d:85:0b:4f:88:d2:
c1:28:d5:e3:77:c1:24:5c:d0:65:30:44:cf:c4:4f:
1b:54:22:74:3d:27:2d:b7:7e:ed:70:a5:8d:82:d8:
10:48:42:ab:99:ef:97:4e:3f:de:e2:a6:52:dd:c7:
bc:72:7e:a2:93:3d:96:a9:cc:b1:4a:05:3c:2e:09:
d6:64:85:ba:9a:6b:97:82:b7:e6:c0:e3:17:d4:77:
7c:cb:92:9d:37:5a:e6:85:04:7a:5d:5b:1a:da:b3:
72:a4:f0:61:db:b1:7e:8c:5e:e0:e6:b9:88:7a:7b:
77:ef:43:ab:30:ef:48:23:11:1c:49:11:a6:c4:02:
16:58:79:86:83:1e:d8:9c:86:ba:a1:4f:0c:e6:d9:
c7:07:d1:f6:e3:36:ca:91:aa:0f:b7:34:ab:bf:a9:
4b:e9:6d:b0:19:7a:40:7d:ea:92:dd:39:23:48:0b:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:AB:48:C0:B9:4D:26:2E:87:43:EB:3B:58:65:E1:72:08:87:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A62174A8F44E11EFA83D1BAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0e:85:71:1c:71:93:6b:ad:34:7b:71:2b:b8:07:7b:f1:54:
66:2c:d7:5f:0d:e7:69:7e:34:bc:d6:2c:bf:39:f4:83:ae:f9:
30:15:2b:42:48:35:89:d5:bc:9c:04:99:db:55:aa:24:89:ee:
70:10:ca:97:e1:37:f3:ac:7c:ce:b3:fb:b7:82:3f:24:7b:89:
50:ff:9d:bc:ab:cc:9c:9d:59:f4:a9:9d:da:b6:05:01:1e:7c:
b4:d8:17:d3:78:b6:48:d0:9f:fe:c9:03:07:af:b1:de:67:33:
53:4d:42:a7:3c:c9:98:0b:cb:6c:12:87:59:03:c2:ba:27:af:
92:c1:b0:80:24:0a:18:9d:50:a7:76:ca:c0:0c:81:5a:b4:c7:
19:3f:1f:cb:03:a2:00:dc:ca:fd:60:4b:84:c0:fa:53:f9:1c:
c9:13:0f:84:4d:7a:de:21:17:b7:b8:ea:e0:e9:cd:13:19:83:
86:aa:d2:5b:ce:95:53:c4:0a:97:94:05:b8:4c:94:da:52:a0:
0e:8e:90:b8:73:1c:ff:68:ec:fc:dd:e8:a8:a3:e8:cf:95:9e:
ad:74:f4:94:7e:de:17:9c:85:b6:b6:2d:4c:2e:ee:b8:da:22:
69:b1:6f:22:f4:ec:46:6b:2e:c1:ba:92:79:41:a4:1b:d1:8d:
07:64:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:01 2025 by rpki-client