Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9FCA026C93C11EFB37087B9762E951A.roa
File: A9FCA026C93C11EFB37087B9762E951A.roa (raw, json)
Hash identifier: Tz8KkhI81QaaYQ2GaHN7eNBbcFx8UYvRo2piT1ZGr2U=
Subject key identifier: 71:E6:AD:42:C8:C8:85:93:31:D0:7F:99:99:5F:61:1E:50:D4:74:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013407
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9FCA026C93C11EFB37087B9762E951A.roa
Signing time: Thu 02 Jan 2025 19:06:26 +0000
ROA not before: Thu 02 Jan 2025 19:06:22 +0000
ROA not after: Sat 13 Dec 2025 19:06:22 +0000
asID: 984
IP address blocks: 154.223.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78855 (0x13407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:06:22 2025 GMT
Not After : Dec 13 19:06:22 2025 GMT
Subject: CN=6776e3b2-3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:84:46:ee:09:54:22:dc:ed:1d:70:e5:f7:
ea:7d:72:02:f8:99:b8:61:d1:5d:72:8f:17:ac:6d:
40:e3:cd:4a:5b:59:89:af:b3:04:8c:7d:92:85:3a:
06:9d:73:21:bf:21:5e:d2:9a:83:25:94:9d:84:e3:
5b:39:f0:dc:61:ea:93:38:29:4a:96:10:e3:b2:e0:
8f:5c:ce:75:d6:2c:a9:7f:dd:74:b9:38:3f:1e:7c:
e5:47:ea:e5:fb:32:49:0c:bb:c4:d4:e7:32:79:06:
a3:f6:65:a9:ce:43:93:78:18:66:24:20:da:41:36:
f2:21:f7:d5:e7:47:ce:16:f4:0f:bb:f2:7a:b7:9a:
78:c2:55:df:4d:8d:33:f0:ea:f8:5d:a4:57:9a:97:
32:8a:28:56:15:a6:62:84:38:f0:74:3d:62:1a:75:
94:f4:54:43:07:26:39:50:f4:ce:9e:42:19:20:c2:
86:b1:80:f0:68:8a:50:ea:c5:b0:e1:01:7e:90:cc:
84:87:9a:9e:7a:d6:4e:11:17:5d:6c:0d:4e:7f:9b:
c9:f5:0f:3b:b3:19:63:31:80:9d:93:25:9a:26:9b:
08:d5:8b:80:4d:db:b9:f4:f7:05:35:71:dd:8d:e3:
f9:dc:fc:d3:d9:6b:f0:a5:e5:02:e9:18:ba:d7:bb:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:AD:42:C8:C8:85:93:31:D0:7F:99:99:5F:61:1E:50:D4:74:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9FCA026C93C11EFB37087B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.231.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0f:6c:a4:d7:14:1c:c1:e2:e5:55:4f:9d:3e:1a:cb:fe:ff:
09:07:0b:2c:ae:28:60:ef:29:fb:16:9d:ec:45:05:3e:aa:4a:
1a:0e:c2:26:45:64:60:38:ae:8f:06:80:18:7f:5f:28:8e:8d:
43:84:11:84:f4:c9:d9:9a:48:f4:23:8d:b2:69:59:13:ee:2c:
b3:44:47:68:1a:fd:35:fc:13:4d:d1:68:1b:2d:e7:14:0f:b5:
02:a2:11:98:79:72:d6:4f:f1:81:3e:16:b7:89:9f:d2:45:f5:
60:b6:aa:67:bd:cc:89:a2:eb:3f:a3:9e:b8:48:44:d6:4b:30:
18:c5:2b:44:1d:5d:59:ab:a6:ad:66:52:e1:b7:f0:88:99:ed:
90:b3:56:fa:07:37:d9:dd:8b:2a:50:0e:d7:df:d9:9c:db:84:
cf:a4:5c:b2:56:e5:58:f8:94:31:6d:80:99:a8:bb:ab:3c:ff:
96:8a:1f:f1:14:1b:83:64:03:04:f6:a5:70:b8:cf:22:5c:c2:
b3:e5:03:c2:7c:38:5c:64:93:e4:36:9e:1b:87:0a:6a:59:a0:
c3:1b:2d:37:31:42:ba:a8:24:db:8a:5d:ad:6b:e1:5c:0e:ec:
d2:91:33:72:df:40:5d:d7:fe:ed:0f:08:d4:71:39:65:49:ce:
04:66:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:13 2025 by rpki-client