Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA90207EF3F011EFA0BB8CA1762E951A.roa
File: AA90207EF3F011EFA0BB8CA1762E951A.roa (raw, json)
Hash identifier: UpW8HSf+xZAmu7sjxZYLtClqwYAFB9BFtVBaV0GHzEU=
Subject key identifier: BE:7F:2E:BE:67:22:49:EE:2E:BD:40:B8:91:1F:9A:89:42:9D:35:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA90207EF3F011EFA0BB8CA1762E951A.roa
Signing time: Wed 26 Feb 2025 03:20:45 +0000
ROA not before: Wed 26 Feb 2025 03:20:41 +0000
ROA not after: Thu 19 Feb 2026 03:20:41 +0000
asID: 984
IP address blocks: 154.203.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90273 (0x160a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:20:41 2025 GMT
Not After : Feb 19 03:20:41 2026 GMT
Subject: CN=67be888d-b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:c5:c5:62:c6:4e:2a:57:da:bc:9a:36:59:
71:49:bf:44:f8:ce:80:ca:74:72:7c:c6:00:07:c2:
84:3d:03:cf:aa:d1:64:4d:b7:24:f5:6b:a6:e8:3b:
a3:0d:86:5b:a0:02:d8:e8:2a:32:0c:de:b5:a7:11:
54:68:d4:1b:1d:52:a5:e3:90:09:18:71:f3:f3:80:
4a:c2:ae:46:88:3e:7c:25:94:47:55:cd:e0:c4:c1:
9b:58:30:ee:3d:f3:57:99:f4:38:ae:49:7e:b6:dd:
25:9f:cc:e1:de:5d:d6:10:12:45:5f:45:6f:10:5d:
cf:ce:7d:47:45:e3:1e:a3:29:3f:f7:58:43:1a:f5:
4c:a3:2c:bc:db:f1:fb:46:58:68:71:a1:9f:72:be:
4c:1f:11:d8:a9:56:00:6a:ed:ac:83:6c:07:ea:b0:
e7:f3:27:58:f6:02:0e:f6:83:1e:26:d0:b3:cd:7e:
cf:c7:a2:1a:f8:d0:a5:a4:17:23:6e:3d:d9:ec:4a:
c9:b7:c5:25:5a:04:95:9f:f6:b3:87:77:32:f2:27:
f6:71:f4:19:e5:38:e0:5d:28:b6:d7:86:4c:7b:4e:
55:35:5c:9b:ca:f6:12:3e:09:42:3a:15:cf:7c:12:
35:67:c9:4f:45:43:d9:51:74:cf:fe:35:ca:f8:1d:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:2E:BE:67:22:49:EE:2E:BD:40:B8:91:1F:9A:89:42:9D:35:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA90207EF3F011EFA0BB8CA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f5:b5:8e:c5:99:1d:80:c2:cd:94:42:45:db:e0:92:4f:5f:
15:1d:fd:e6:44:2d:b7:39:31:a4:b8:6c:6c:24:d0:13:15:56:
b8:30:7f:d5:5d:65:ec:44:88:14:63:a7:d2:3c:27:39:cd:fe:
5c:36:52:23:c2:9a:2c:bc:c3:b8:97:42:75:79:01:d4:00:88:
50:fd:de:06:f1:ac:b5:d1:ee:ad:b8:45:7c:b4:96:e8:d4:db:
f8:8e:6e:df:f2:45:54:ec:a6:ce:65:8d:9b:35:0f:5d:e5:1b:
07:66:fd:f1:47:a0:fd:8d:b4:63:b7:86:3c:67:a7:cc:22:61:
f8:01:64:e4:83:b0:55:99:f1:c5:18:c8:7c:20:4b:86:d1:65:
aa:4c:83:e1:35:8b:61:25:75:50:c9:03:b1:07:80:1e:dd:cf:
c3:7b:53:e9:de:c2:19:f4:01:44:e2:0e:63:82:38:d3:0a:a8:
13:24:fd:5c:2a:6f:2b:91:ae:12:0f:61:9d:93:1f:02:d7:c4:
fd:b9:4f:1e:8a:4a:9d:11:36:9c:d7:2c:47:b8:42:98:fe:be:
a3:25:97:f2:2d:45:7e:10:a3:53:7e:2a:ff:2f:cc:1e:7b:e2:
84:d9:cf:34:5a:06:51:e7:26:64:1b:80:09:e5:a0:05:d5:44:
0d:56:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:38 2025 by rpki-client